$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa File: 2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa (raw, json) Hash identifier: uZroszHZ8oTAmXzvguJWTfVd/0o+GWUmychDynxjUxw= Subject key identifier: CA:52:21:78:36:A9:25:24:C1:85:61:6B:FF:9D:29:C3:15:FF:E0:DE Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584E858F876ED5E872C0FF1F32C0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 22709 IP address blocks: 2631:9000::/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:87:6e:d5:e8:72:c0:ff:1f:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=cd226c03-8011-4caa-bd9b-41600f6aee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:33:f9:20:e4:31:25:8b:ea:ae:50:f0:eb: 3b:e8:8e:f9:4d:a5:61:7b:ba:2b:fb:8c:ce:a6:f1: 8c:1b:9d:f5:ba:d7:6d:d1:26:7f:1a:31:25:09:94: d2:1e:5a:12:4c:36:f6:47:60:be:13:30:d9:91:f9: 4d:d8:f0:23:f4:b4:17:15:42:d1:ec:91:1f:b7:3d: 35:94:c0:63:e9:cd:ad:44:4e:1d:e1:7f:91:3f:85: 1e:72:ef:34:a3:1e:b0:d3:a9:af:16:34:99:40:21: 3d:b2:76:fb:93:a2:8b:b5:b5:b6:f4:12:da:47:01: b1:ca:c0:cc:26:eb:53:f7:c5:ec:e5:51:07:17:aa: 76:4b:a2:88:04:96:65:9c:5c:0c:e9:45:4a:8f:e4: 3a:34:cd:a1:4b:3f:30:46:eb:1a:2e:0f:21:7b:f4: 39:95:5c:94:2d:a4:7a:62:26:8a:ff:fd:c3:fc:8a: bd:63:cd:42:9b:1e:6f:17:88:42:c5:23:75:3a:f7: 35:66:c6:77:c7:a7:5c:58:1a:68:b7:fe:73:ce:49: 88:33:64:fc:7c:49:3c:f5:90:75:74:e3:c8:c5:17: 94:fe:15:74:e0:37:c2:b5:b0:ed:49:18:13:97:d9: 47:ee:a9:a3:e7:86:09:d5:9e:65:ac:e9:88:67:a6: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:21:78:36:A9:25:24:C1:85:61:6B:FF:9D:29:C3:15:FF:E0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv6: 2631:9000::/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:73:f0:19:aa:fd:fc:23:a5:8f:d4:57:3a:d3:5d:44:f6:91: 0e:ac:e8:67:4c:d7:d8:5c:2f:7f:5f:60:87:dc:5e:95:d1:1a: 6d:d5:59:1c:92:0b:e2:29:36:e5:f2:26:67:df:6a:3a:87:67: ec:e7:39:fd:5b:35:14:5c:c9:36:de:2e:f1:f6:77:ef:64:7e: 28:bd:01:b2:83:9f:d5:c6:51:0a:bb:34:eb:d3:56:b9:9c:08: 34:c6:c1:48:37:b2:66:f6:1e:f6:53:24:2d:6c:36:50:d7:72: 7b:b5:ca:7d:78:4d:c9:d2:cc:7b:2f:20:2c:2d:cb:1b:c6:b8: 90:0b:73:d1:90:79:2c:b6:c6:21:2f:96:08:74:a2:2d:f7:55: 60:35:33:45:34:b1:93:57:4a:67:e6:e0:50:7d:fa:b0:5d:5a: 07:f0:33:5d:0c:ee:ae:76:6c:e0:0d:66:65:2d:9d:72:48:7f: 91:d6:cc:e8:4b:bc:4d:ba:08:f1:9d:87:40:33:aa:e9:aa:23: c9:b9:3b:53:2b:00:3b:40:a4:b7:3e:60:50:3f:b1:e1:7d:71: 51:37:cf:af:eb:ea:f3:4d:0e:b5:ba:27:9f:3b:6c:91:52:9c: 8c:f5:ec:87:64:e1:48:a9:ae:9f:5a:7f:9e:70:34:84:87:2a: 2c:e3:76:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj4du1ehywP8fMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk Y2QyMjZjMDMtODAxMS00Y2FhLWJkOWItNDE2MDBmNmFlZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMwz+SDkMSWL6q5Q8Os76I75TaVhe7or+4zO pvGMG531utdt0SZ/GjElCZTSHloSTDb2R2C+EzDZkflN2PAj9LQXFULR7JEftz01 lMBj6c2tRE4d4X+RP4Uecu80ox6w06mvFjSZQCE9snb7k6KLtbW29BLaRwGxysDM JutT98Xs5VEHF6p2S6KIBJZlnFwM6UVKj+Q6NM2hSz8wRusaLg8he/Q5lVyULaR6 YiaK//3D/Iq9Y81Cmx5vF4hCxSN1Ovc1ZsZ3x6dcWBpot/5zzkmIM2T8fEk89ZB1 dOPIxReU/hV04DfCtbDtSRgTl9lH7qmj54YJ1Z5lrOmIZ6aNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpSIXg2qSUkwYVha/+dKcMV/+DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMmY3YTExN2MtOWU2ZS0z MDE3LTk2ZmMtNjcxMWU2YzNjMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAJjGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZz8Bmq/fwjpY/UVzrTXUT2kQ6s6GdM19hcL39fYIfcXpXRGm3VWRyS C+IpNuXyJmffajqHZ+znOf1bNRRcyTbeLvH2d+9kfii9AbKDn9XGUQq7NOvTVrmc CDTGwUg3smb2HvZTJC1sNlDXcnu1yn14TcnSzHsvICwtyxvGuJALc9GQeSy2xiEv lgh0oi33VWA1M0U0sZNXSmfm4FB9+rBdWgfwM10M7q52bOANZmUtnXJIf5HWzOhL vE26CPGdh0AzqumqI8m5O1MrADtApLc+YFA/seF9cVE3z6/r6vNNDrW6J587bJFS nIz17Idk4Uiprp9af55wNISHKizjdkU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:01 2026 by rpki-client