$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: KyGAy5FOgBQRvMvm1HlxZY8ncwKUR5DjV04eYbBKumU= Subject key identifier: C8:8A:CA:11:67:D3:9E:09:1F:88:09:49:0A:40:52:62:74:6C:34:BC Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584E8C8A4AED64B1120459615380 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:4a:ed:64:b1:12:04:59:61:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=2919c368-f99e-4262-a154-500baecd6f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:9e:e9:34:41:9e:13:b3:ff:fc:e2:c7:88: c5:41:01:6e:2a:87:e4:0c:d2:e6:1f:31:01:78:65: bf:f5:ea:d0:6c:0c:b5:42:eb:37:09:80:95:86:0c: a7:78:4f:6e:1f:db:6b:1f:a3:91:af:a4:85:d0:6d: 09:2c:15:e9:eb:12:cd:ee:d6:bc:bf:2e:e7:95:b5: 01:80:64:c2:ce:00:15:06:ee:88:2e:3b:a8:ca:63: eb:0a:9e:5b:1a:61:38:4b:4a:b3:85:9a:86:b2:ef: 84:34:a6:86:08:c0:0c:80:a0:bb:33:06:1f:67:d2: 41:5f:f5:a4:f4:2f:41:d6:70:0f:03:9c:40:0a:21: 11:8b:a8:d2:64:ba:20:86:55:12:45:59:ec:10:1d: c3:03:23:50:ec:98:3a:b0:49:ee:b6:cb:21:a7:99: 3d:d7:92:94:e2:04:47:3b:0a:af:7b:bc:8d:96:93: e4:75:ee:ef:a7:67:78:74:68:bd:cb:33:1f:91:2e: 0f:43:12:e2:16:cb:16:7f:1c:e8:a9:18:d6:68:b5: 7f:98:45:8d:41:19:0f:a1:2a:ae:6d:bf:f0:32:18: 9b:4c:83:b5:1b:0b:1e:0a:70:04:08:ba:71:2e:63: 24:e2:6f:d9:19:67:7a:bd:a7:8e:92:f8:dc:e2:c1: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:CA:11:67:D3:9E:09:1F:88:09:49:0A:40:52:62:74:6C:34:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ea:4f:dc:38:42:ad:89:f6:6d:c0:a1:4d:1f:d4:8f:3b:e5: 84:85:90:88:4c:b7:87:31:ad:1f:29:16:5f:61:f9:63:48:b9: b0:45:2c:d5:97:2d:5e:75:f9:92:8e:b7:58:42:62:e7:36:17: 71:db:d3:8e:59:38:e9:b8:f2:d0:de:fe:84:ae:8b:9c:70:06: 64:8d:88:fc:7a:02:7f:30:94:19:7b:47:16:6f:82:bc:db:7c: 4c:73:be:9b:57:36:20:2d:b0:ff:f4:25:b5:f1:1e:d2:cf:44: 2b:16:ee:d0:19:4a:94:cc:55:70:fd:6b:fc:dd:93:de:64:73: 90:ec:bd:2b:a9:c3:e4:82:d4:d5:f4:c6:e2:5f:ab:ba:62:0e: 09:7a:38:b4:d5:b2:8a:e8:88:4a:67:d9:83:0f:9b:d7:ea:d2: b0:85:0c:c0:ba:ff:16:1a:9b:8a:fe:87:31:21:9d:a8:eb:3f: 14:d1:0e:b8:95:80:f7:b4:87:3b:a7:d2:85:6f:a8:4f:2e:4f: cb:db:0b:7a:8b:71:49:be:78:0a:16:8e:79:cb:d4:b0:0a:8f: df:28:a0:c5:fb:87:58:a3:cf:ec:39:70:08:32:82:57:f3:55: 35:ff:a0:71:75:32:77:ac:96:87:2f:7c:2e:ce:57:20:a0:99: 12:96:21:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6MikrtZLESBFlhU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk MjkxOWMzNjgtZjk5ZS00MjYyLWExNTQtNTAwYmFlY2Q2Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxqe6TRBnhOz//zix4jFQQFuKofkDNLmHzEB eGW/9erQbAy1Qus3CYCVhgyneE9uH9trH6ORr6SF0G0JLBXp6xLN7ta8vy7nlbUB gGTCzgAVBu6ILjuoymPrCp5bGmE4S0qzhZqGsu+ENKaGCMAMgKC7MwYfZ9JBX/Wk 9C9B1nAPA5xACiERi6jSZLoghlUSRVnsEB3DAyNQ7Jg6sEnutsshp5k915KU4gRH Owqve7yNlpPkde7vp2d4dGi9yzMfkS4PQxLiFssWfxzoqRjWaLV/mEWNQRkPoSqu bb/wMhibTIO1GwseCnAECLpxLmMk4m/ZGWd6vaeOkvjc4sENrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMiKyhFn054JH4gJSQpAUmJ0bDS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa6k/cOEKtifZtwKFNH9SPO+WEhZCITLeHMa0fKRZfYfljSLmwRSzV ly1edfmSjrdYQmLnNhdx29OOWTjpuPLQ3v6ErouccAZkjYj8egJ/MJQZe0cWb4K8 23xMc76bVzYgLbD/9CW18R7Sz0QrFu7QGUqUzFVw/Wv83ZPeZHOQ7L0rqcPkgtTV 9MbiX6u6Yg4Jeji01bKK6IhKZ9mDD5vX6tKwhQzAuv8WGpuK/ocxIZ2o6z8U0Q64 lYD3tIc7p9KFb6hPLk/L2wt6i3FJvngKFo55y9SwCo/fKKDF+4dYo8/sOXAIMoJX 81U1/6BxdTJ3rJaHL3wuzlcgoJkSliHB -----END CERTIFICATE-----Generated at Fri Jul 24 04:34:10 2026 by rpki-client