$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa File: a619e9f2-a5c2-3db3-989a-7abc86139860.roa (raw, json) Hash identifier: 0nXp4n0EBA/UGcaDiUlJ4CfoIiH1NWArJCwjXNU3+i0= Subject key identifier: 49:0D:32:CD:DA:B6:3C:2A:37:49:0E:1C:A4:0F:1E:E9:53:B6:CB:22 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E94EA4CE38D58C93E8B541600 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 2604:86c0:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:4c:e3:8d:58:c9:3e:8b:54:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=887490a7-c341-457a-8c19-1989ef905faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:0e:74:99:4d:43:ff:9f:dc:5e:d9:80:40: a0:e9:14:a3:5c:b9:68:3a:aa:ce:c5:a2:6d:24:0c: 2d:f0:fc:58:e3:bd:76:56:02:bc:7b:9b:95:6c:8d: 1c:8a:0d:8c:b9:9a:35:60:88:64:31:17:ac:b4:6f: 9b:8a:78:d0:a2:26:7c:23:c5:ff:38:26:f2:24:12: 54:59:0f:c7:47:64:28:ca:9a:ad:4f:2c:80:f0:dd: 3e:2b:a3:2e:a4:1e:99:9d:1b:05:78:41:8b:87:68: ff:63:33:39:38:d0:82:81:e0:f0:2b:e9:03:3d:9e: 4f:83:c4:d2:ff:fd:97:bc:ff:df:86:01:fa:9a:47: 32:0b:02:f1:71:1b:d3:a3:74:3c:54:af:d6:84:fd: c7:85:d8:ab:14:58:b8:2a:9c:19:55:ac:53:a6:c8: 6c:45:d9:46:d7:f6:9e:fe:63:dc:df:c3:13:79:76: 90:68:3a:4c:fa:01:15:87:8f:82:ee:43:f6:54:20: 9c:69:1c:e4:69:80:ef:5d:1f:b9:a0:07:e2:5b:47: cf:c1:3c:20:50:09:8c:16:d1:c0:04:cb:89:88:f2: 81:0c:40:52:ac:58:14:7d:6c:88:4a:03:7d:98:fc: ae:91:3f:c8:c4:7a:76:1c:a2:de:06:ed:f1:ed:f2: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:32:CD:DA:B6:3C:2A:37:49:0E:1C:A4:0F:1E:E9:53:B6:CB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:06:bf:92:0b:b1:87:ba:3f:b9:22:21:82:9e:91:da:96:a8: 70:3e:15:ad:de:63:d9:57:ed:46:4f:0b:de:3f:89:04:91:eb: 39:9e:48:b2:f5:65:04:c5:58:40:2b:3b:ed:f7:00:cc:15:06: 0a:f4:1b:b1:7c:b5:62:2f:6c:b9:fb:e5:3a:2d:88:bb:68:f1: 8f:d8:c0:99:1f:bd:5f:ce:08:d3:4a:f7:34:da:d8:6f:ef:ba: da:33:e2:ef:d9:97:4b:67:c2:dc:c8:fb:9d:a8:63:82:84:8a: c6:26:dc:63:09:1d:7d:88:8b:be:dd:16:84:fe:e9:01:ab:9d: 62:3d:7c:27:85:98:88:76:4c:68:46:6d:28:04:89:07:da:20: 95:ea:b5:2b:2e:d2:19:1e:7e:4c:fc:05:ae:08:0e:fc:00:dc: 0e:96:0b:20:7c:66:1a:ef:1e:d8:b2:0a:bb:e8:4a:b2:98:ba: cd:09:bc:25:e9:e8:b9:6c:a3:25:80:e8:32:0d:a5:e3:08:9c: e4:cf:0c:56:86:d8:94:92:de:fb:bd:8f:03:37:8d:66:18:41: f8:df:81:48:0f:f4:c4:f3:b7:30:8f:50:7f:23:7d:bd:22:10: 58:a2:c6:7a:69:ed:d7:25:4b:7e:be:de:d8:38:62:45:19:82: 39:60:a8:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6U6kzjjVjJPotUFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk ODg3NDkwYTctYzM0MS00NTdhLThjMTktMTk4OWVmOTA1ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneUOdJlNQ/+f3F7ZgECg6RSjXLloOqrOxaJt JAwt8PxY4712VgK8e5uVbI0cig2MuZo1YIhkMRestG+binjQoiZ8I8X/OCbyJBJU WQ/HR2QoypqtTyyA8N0+K6MupB6ZnRsFeEGLh2j/YzM5ONCCgeDwK+kDPZ5Pg8TS //2XvP/fhgH6mkcyCwLxcRvTo3Q8VK/WhP3HhdirFFi4KpwZVaxTpshsRdlG1/ae /mPc38MTeXaQaDpM+gEVh4+C7kP2VCCcaRzkaYDvXR+5oAfiW0fPwTwgUAmMFtHA BMuJiPKBDEBSrFgUfWyISgN9mPyukT/IxHp2HKLeBu3x7fKskQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEkNMs3atjwqN0kOHKQPHulTtssiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTYxOWU5ZjItYTVjMi0z ZGIzLTk4OWEtN2FiYzg2MTM5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALQa/kguxh7o/uSIhgp6R2paocD4Vrd5j2VftRk8L3j+JBJHrOZ5I svVlBMVYQCs77fcAzBUGCvQbsXy1Yi9sufvlOi2Iu2jxj9jAmR+9X84I00r3NNrY b++62jPi79mXS2fC3Mj7nahjgoSKxibcYwkdfYiLvt0WhP7pAaudYj18J4WYiHZM aEZtKASJB9ogleq1Ky7SGR5+TPwFrggO/ADcDpYLIHxmGu8e2LIKu+hKspi6zQm8 JenouWyjJYDoMg2l4wic5M8MVobYlJLe+72PAzeNZhhB+N+BSA/0xPO3MI9QfyN9 vSIQWKLGemnt1yVLfr7e2DhiRRmCOWCoIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:57 2026 by rpki-client