$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: DhdAvK78zRcuvrHs4Cv8G2XKaJK7NYh1dBdQkj5kAnI= Subject key identifier: F3:B4:98:4B:CC:A2:A2:AC:D7:02:83:26:C1:B6:3B:FE:C9:E5:28:4B Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E8DEFA1382C1D4F5FE73AD880 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a1:38:2c:1d:4f:5f:e7:3a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=fa07e0d3-3779-4466-95f3-d64e7d7c225b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:39:0c:62:7b:5b:a1:a0:48:3c:c9:fc:ba: 4a:1d:90:20:af:37:c4:0e:7a:59:e8:68:26:56:fb: fa:70:27:d7:da:ca:d6:96:f6:30:55:4e:3f:33:fe: aa:a8:ec:8f:ab:a8:43:af:0e:35:3d:74:4d:e6:34: cb:4a:f4:f2:d9:da:e9:2c:1e:af:0a:26:95:5c:83: 1c:d7:89:33:71:51:26:d5:20:a6:b7:f1:32:db:b7: 7d:7b:de:b0:87:1e:0c:a2:d4:8e:3d:05:4a:fc:48: 89:c1:0e:44:8d:b3:f5:a5:74:4b:0d:7d:a7:4b:7b: 47:00:71:17:7b:e6:54:22:89:89:3d:f1:ed:5c:00: a6:d1:7b:95:72:a7:19:fa:85:1e:16:e4:1d:12:97: bd:1c:b8:00:5e:31:a2:bd:32:22:8a:3e:5a:8f:6d: 09:e3:9c:f6:70:6a:17:97:38:9d:a1:bc:8a:ae:e4: 7d:6e:2f:f2:b0:37:77:17:08:42:c5:b2:c8:e7:e0: 88:02:89:4d:83:d4:9f:97:1d:f5:ea:e8:18:f8:59: b6:6b:77:d8:99:61:7a:c0:d6:99:83:a1:b7:c1:e5: 28:11:03:73:37:7f:f5:8c:8a:29:a5:68:42:44:c6: 8a:be:25:cd:36:c6:1d:a5:d3:20:f4:b9:fb:c4:39: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B4:98:4B:CC:A2:A2:AC:D7:02:83:26:C1:B6:3B:FE:C9:E5:28:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e5:78:61:f3:dd:5f:c1:07:f4:f1:63:25:f3:be:d1:f5:30: e3:26:47:e2:12:2a:fe:07:16:7d:07:06:c9:f0:03:b9:35:a8: d2:a0:9f:3c:7c:fc:f6:2a:68:d5:51:77:3c:86:70:93:0f:8a: 8b:5e:fc:c7:3b:24:1e:01:62:b6:43:98:67:b6:ec:8b:dd:96: 6a:f4:5d:24:2a:10:1d:00:c3:bb:4a:fd:fb:d6:52:e2:56:0b: ab:9a:57:49:6f:34:1a:72:dc:64:86:2c:50:2c:31:6c:ea:bd: 13:0a:b9:9b:b1:26:30:8b:7c:d6:93:d0:0c:2b:ee:dd:52:3b: 4f:c5:41:30:33:52:43:cb:8d:3b:44:68:55:14:4d:5c:37:84: 05:14:31:d0:dd:b6:25:50:89:9b:76:ef:91:ef:d4:52:23:c7: 05:a9:47:79:08:35:de:e9:02:83:bb:db:f4:5c:2e:b6:78:31: d3:a5:05:45:a4:af:20:9d:47:80:43:90:af:25:ec:79:53:a2: d8:6d:ee:5f:96:db:aa:3a:7a:4a:74:af:b4:75:9d:ab:aa:48: ee:de:82:52:bc:74:cb:09:14:b0:b9:72:ea:85:6b:d2:b0:a9: bd:37:ed:82:7f:bb:e8:73:42:ea:c5:86:aa:b3:ac:8c:ab:d5: 86:38:67:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6N76E4LB1PX+c62IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmEwN2UwZDMtMzc3OS00NDY2LTk1ZjMtZDY0ZTdkN2MyMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgg5DGJ7W6GgSDzJ/LpKHZAgrzfEDnpZ6Ggm Vvv6cCfX2srWlvYwVU4/M/6qqOyPq6hDrw41PXRN5jTLSvTy2drpLB6vCiaVXIMc 14kzcVEm1SCmt/Ey27d9e96whx4MotSOPQVK/EiJwQ5EjbP1pXRLDX2nS3tHAHEX e+ZUIomJPfHtXACm0XuVcqcZ+oUeFuQdEpe9HLgAXjGivTIiij5aj20J45z2cGoX lzidobyKruR9bi/ysDd3FwhCxbLI5+CIAolNg9Sflx316ugY+Fm2a3fYmWF6wNaZ g6G3weUoEQNzN3/1jIoppWhCRMaKviXNNsYdpdMg9Ln7xDmEdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPO0mEvMoqKs1wKDJsG2O/7J5ShLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCT5Xhh891fwQf08WMl877R9TDjJkfiEir+BxZ9BwbJ8AO5NajSoJ88 fPz2KmjVUXc8hnCTD4qLXvzHOyQeAWK2Q5hntuyL3ZZq9F0kKhAdAMO7Sv371lLi VgurmldJbzQactxkhixQLDFs6r0TCrmbsSYwi3zWk9AMK+7dUjtPxUEwM1JDy407 RGhVFE1cN4QFFDHQ3bYlUImbdu+R79RSI8cFqUd5CDXe6QKDu9v0XC62eDHTpQVF pK8gnUeAQ5CvJex5U6LYbe5fltuqOnpKdK+0dZ2rqkju3oJSvHTLCRSwuXLqhWvS sKm9N+2Cf7voc0LqxYaqs6yMq9WGOGdu -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:17 2026 by rpki-client