$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa File: a20c2df9-68c3-3920-812e-1578e81c4ea6.roa (raw, json) Hash identifier: RjU0hf/0SMhLNL1LeRJfmVgVedV2LSPhF4Skv4yCCtM= Subject key identifier: 5E:02:D3:42:8C:EA:5A:64:99:5A:E6:C5:22:B1:5F:53:19:2D:25:45 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584E7FFA36CD06FB988B882A1190 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 397423 IP address blocks: 2604:7580:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:36:cd:06:fb:98:8b:88:2a:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=efbe4fe4-ae31-496b-bde4-f7dc0910e0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:29:63:a7:39:49:c1:7d:99:65:1e:82:4a:0c: 09:7c:c6:0a:d8:1d:29:63:09:8d:98:02:b2:23:e9: 7a:e6:82:fb:34:c6:88:61:0f:e5:c2:f4:99:6e:54: 17:93:a7:d3:ea:42:0f:da:f2:66:4b:e9:97:19:ca: 99:82:2a:75:c6:d3:5e:bc:2e:98:1a:96:71:e2:11: 60:72:a9:9f:67:ff:2a:3f:5a:32:e1:62:73:56:0b: 6a:72:1a:76:a4:be:b7:6c:85:ea:1b:a5:66:40:f0: d2:a3:cd:52:0b:fd:69:55:d1:5f:cb:b1:09:b6:ed: 75:e0:f6:73:9b:aa:88:9a:ed:3e:f0:ef:f5:ed:44: 07:cf:5b:68:62:28:06:40:ca:fa:7e:20:ea:99:11: 5f:80:73:80:9d:b3:70:02:02:bb:41:b4:6b:8b:3a: eb:ff:34:ba:b6:e9:2a:95:2d:05:d6:01:59:42:f1: 74:85:b9:4d:be:71:be:9f:e3:84:eb:d5:14:38:da: a9:0f:d5:e4:d8:69:ca:2a:60:ea:63:27:4f:da:49: 81:ed:82:03:af:44:47:5e:5f:b0:a9:4d:fd:04:d4: 9e:74:6c:15:71:2b:5d:78:1a:86:d6:3f:9f:33:75: 17:4a:25:31:8d:06:18:d7:8c:6c:16:65:21:49:6a: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:D3:42:8C:EA:5A:64:99:5A:E6:C5:22:B1:5F:53:19:2D:25:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3c:8e:db:cc:f3:76:6a:6e:b4:28:82:11:7e:16:aa:7e:e1: d4:22:7a:c0:06:83:5e:dd:d4:e2:99:10:09:27:94:93:81:d6: 4a:b8:85:c3:36:43:02:1c:b8:f8:fc:55:6b:4b:35:2d:39:e4: 17:c1:83:ee:1a:4f:98:75:de:3b:82:fe:36:0b:91:68:95:90: 04:b5:8d:1f:7e:5b:6b:a6:f3:74:4c:3b:b5:cf:b2:b2:8c:68: c2:8e:04:ed:6e:57:4c:1b:09:2b:38:ae:b6:f5:62:43:28:0b: ad:f4:77:b0:f5:b4:3f:2a:6e:65:15:ac:90:65:55:0e:ac:f1: 73:da:79:70:b3:c5:4b:f9:22:5a:c6:60:b9:da:91:bf:03:9c: d5:98:e7:3b:bd:c8:74:fb:d3:01:44:99:83:03:52:1d:e3:ca: 49:bb:35:52:53:4d:89:2e:3e:8c:03:53:28:0c:de:b5:6a:11: f4:6b:9c:08:a6:8e:09:5c:16:42:85:1e:07:1d:9e:b9:b6:05: 21:87:30:cd:ac:b0:0a:11:f8:83:75:bb:f2:c5:b6:0f:e1:14: d1:3d:16:15:ed:2e:79:8c:f4:d2:87:1d:81:86:3d:15:77:90: 82:eb:a2:09:f1:c2:51:0e:00:bc:5c:34:2b:93:00:c8:7f:9e: d2:0d:57:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+jbNBvuYi4gqEZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk ZWZiZTRmZTQtYWUzMS00OTZiLWJkZTQtZjdkYzA5MTBlMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiljpzlJwX2ZZR6CSgwJfMYK2B0pYwmNmAKy I+l65oL7NMaIYQ/lwvSZblQXk6fT6kIP2vJmS+mXGcqZgip1xtNevC6YGpZx4hFg cqmfZ/8qP1oy4WJzVgtqchp2pL63bIXqG6VmQPDSo81SC/1pVdFfy7EJtu114PZz m6qImu0+8O/17UQHz1toYigGQMr6fiDqmRFfgHOAnbNwAgK7QbRrizrr/zS6tukq lS0F1gFZQvF0hblNvnG+n+OE69UUONqpD9Xk2GnKKmDqYydP2kmB7YIDr0RHXl+w qU39BNSedGwVcStdeBqG1j+fM3UXSiUxjQYY14xsFmUhSWpsWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4C00KM6lpkmVrmxSKxX1MZLSVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTIwYzJkZjktNjhjMy0z OTIwLTgxMmUtMTU3OGU4MWM0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI8jtvM83ZqbrQoghF+Fqp+4dQiesAGg17d1OKZEAknlJOB1kq4 hcM2QwIcuPj8VWtLNS055BfBg+4aT5h13juC/jYLkWiVkAS1jR9+W2um83RMO7XP srKMaMKOBO1uV0wbCSs4rrb1YkMoC630d7D1tD8qbmUVrJBlVQ6s8XPaeXCzxUv5 IlrGYLnakb8DnNWY5zu9yHT70wFEmYMDUh3jykm7NVJTTYkuPowDUygM3rVqEfRr nAimjglcFkKFHgcdnrm2BSGHMM2ssAoR+IN1u/LFtg/hFNE9FhXtLnmM9NKHHYGG PRV3kILrognxwlEOALxcNCuTAMh/ntINV38= -----END CERTIFICATE-----Generated at Fri Jul 24 03:18:05 2026 by rpki-client