$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa File: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json) Hash identifier: 3J2gRRlWx2ztO4dEakmAdNWnPvwQXObZv9zE2GQ2foU= Subject key identifier: 04:4C:AB:7F:DB:E1:D0:18:F9:3B:6B:C1:D2:E1:F7:96:61:03:33:4F Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584E7E94EAA89426F88642E2F900 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 25968 IP address blocks: 2620:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ea:a8:94:26:f8:86:42:e2:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=24465630-4429-425a-bd2e-49c5f24a3af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:02:7b:98:67:dd:f1:53:08:df:13:ca:c1:a0: a6:25:b9:a9:23:de:cb:dd:31:eb:47:63:74:f2:8b: b3:21:80:2e:46:d8:9e:a1:a1:4d:9c:d8:9e:5e:00: 84:d5:d6:fd:61:92:eb:96:68:f1:9f:3e:c6:13:02: 91:ea:a4:8c:05:78:e7:90:d7:ff:df:11:77:b2:74: 7f:94:e1:f1:78:b2:38:0b:ec:89:32:93:d9:95:58: 1a:7c:1d:da:a2:7f:1b:d8:d0:c9:e0:28:c0:91:e7: 0d:df:73:9f:10:2e:74:1b:6b:ed:c9:0b:1b:c4:b7: be:d2:55:29:eb:93:0e:32:65:3d:3d:4c:a1:f5:78: 42:74:97:a5:ae:2c:e6:e6:73:cb:de:29:aa:91:f5: 2f:d0:6c:d1:ae:bf:d6:e6:19:52:8b:5a:54:80:8a: 6a:79:cf:94:be:77:1f:3e:29:c7:43:8a:f4:fa:38: 0a:f2:f0:31:6c:db:35:8e:e3:e9:20:02:52:19:d9: c5:33:5a:32:62:cb:4c:6f:3f:ad:40:68:d3:4f:9c: ee:cd:32:d3:18:13:f5:d1:8e:7a:f5:1b:47:65:90: 81:4a:02:90:d5:32:e1:ff:1a:f5:b3:33:9f:7c:29: 58:43:d8:cf:79:31:8e:72:b4:99:5d:a9:ea:09:a3: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:AB:7F:DB:E1:D0:18:F9:3B:6B:C1:D2:E1:F7:96:61:03:33:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0d:35:e7:2f:ce:f6:92:71:73:be:4b:ab:83:b5:28:de:fa: 13:8c:96:0d:da:77:cb:6f:32:91:4a:6b:77:2f:c8:da:22:b8: df:ad:81:fa:44:6e:92:86:f4:8a:58:e1:88:12:74:62:0f:8f: 2d:de:58:d6:ab:9c:6f:16:7a:ac:44:5d:0c:de:c7:0a:90:55: 32:4b:d0:95:bf:f2:ca:c5:aa:a4:73:95:43:e6:3f:31:85:96: c7:69:76:c0:5e:9d:af:51:00:3d:e4:e1:e5:28:3f:88:02:d3: d9:1a:69:9c:19:47:45:49:99:f8:ca:2a:f3:e3:e2:92:83:ca: c7:c3:a7:1a:fc:d1:bd:eb:79:98:10:10:60:29:cc:ee:56:52: 59:94:74:9a:b2:3e:7a:9b:01:89:8f:ae:06:60:5c:b9:e8:36: 6f:41:77:3c:60:39:e3:a7:5a:3d:a7:b4:b1:31:c3:c6:4b:89: 8d:51:25:ef:9a:a0:46:ae:e7:d1:69:44:23:0f:37:23:f6:52: c0:c1:89:1e:ca:13:a4:bf:91:1f:43:87:4d:b8:c8:a4:7f:e0: aa:fc:00:ad:92:0b:9a:c5:fb:66:9e:ee:4e:f9:d5:a2:0a:5d: 19:00:d5:e4:36:ff:94:26:9a:e6:5b:bc:9e:1f:d2:45:91:0c: 78:ce:d1:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lOqolCb4hkLi+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjQ0NjU2MzAtNDQyOS00MjVhLWJkMmUtNDljNWYyNGEzYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJ7mGfd8VMI3xPKwaCmJbmpI97L3THrR2N0 8ouzIYAuRtieoaFNnNieXgCE1db9YZLrlmjxnz7GEwKR6qSMBXjnkNf/3xF3snR/ lOHxeLI4C+yJMpPZlVgafB3aon8b2NDJ4CjAkecN33OfEC50G2vtyQsbxLe+0lUp 65MOMmU9PUyh9XhCdJelrizm5nPL3imqkfUv0GzRrr/W5hlSi1pUgIpqec+Uvncf PinHQ4r0+jgK8vAxbNs1juPpIAJSGdnFM1oyYstMbz+tQGjTT5zuzTLTGBP10Y56 9RtHZZCBSgKQ1TLh/xr1szOffClYQ9jPeTGOcrSZXanqCaMzBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARMq3/b4dAY+TtrwdLh95ZhAzNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvYzMyMmJjYjItMWVkOC0z MTMyLTk5OWEtYjIxOWU5ZjZmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAewAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKINNecvzvaScXO+S6uDtSje+hOMlg3ad8tvMpFKa3cvyNoiuN+t gfpEbpKG9IpY4YgSdGIPjy3eWNarnG8WeqxEXQzexwqQVTJL0JW/8srFqqRzlUPm PzGFlsdpdsBena9RAD3k4eUoP4gC09kaaZwZR0VJmfjKKvPj4pKDysfDpxr80b3r eZgQEGApzO5WUlmUdJqyPnqbAYmPrgZgXLnoNm9BdzxgOeOnWj2ntLExw8ZLiY1R Je+aoEau59FpRCMPNyP2UsDBiR7KE6S/kR9Dh024yKR/4Kr8AK2SC5rF+2ae7k75 1aIKXRkA1eQ2/5QmmuZbvJ4f0kWRDHjO0dQ= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:34 2026 by rpki-client