$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa File: 15d81619-7dda-31a8-a0ce-5b5ababa717e.roa (raw, json) Hash identifier: La3Ck1TrR4/3U2RFq7R+kls4yexyRY43sgZayg2S7d0= Subject key identifier: 6A:7E:06:B4:D0:3D:B1:37:21:E6:04:7B:C6:E1:F0:A3:53:B0:18:44 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E8F54F5DEC310BA9D1F3FEA00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 30215 IP address blocks: 2620:101:200d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f5:de:c3:10:ba:9d:1f:3f:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=2d0a1ab1-d617-45be-a1b7-eeba68cd829d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d5:3d:a5:3a:5c:ff:b1:f3:4b:00:14:ac:0c: 4a:c5:14:10:b1:23:98:15:fe:82:02:2f:ae:42:6d: c4:2d:0c:65:7b:52:d1:4d:fe:eb:63:92:1f:0a:f4: 6b:c4:a7:76:43:2d:bc:84:e3:16:69:92:d0:80:8f: 79:19:0c:cc:0d:66:d6:90:e1:47:8d:66:4a:98:4e: 9a:ae:89:09:b7:8f:f5:c8:83:4c:35:a1:c6:56:1f: 25:7d:86:a1:9a:19:60:4c:65:c3:0f:60:ca:0e:fb: 26:ce:d0:fa:2c:d7:af:7f:ad:b8:74:34:2a:62:7c: 06:81:55:d0:ac:54:96:09:4b:5f:84:6c:7c:18:db: ab:a1:e3:2a:3f:4d:a5:09:4c:9d:eb:8b:67:13:ea: 7e:61:c3:a2:d0:b0:68:f3:44:79:4e:e6:76:fc:cf: f5:91:35:7f:5d:18:04:76:6a:38:f8:c9:80:88:47: 5b:ba:57:e1:5a:6d:54:9e:48:ad:69:51:94:db:ad: 82:24:97:52:8b:31:39:0e:5a:ea:fb:3d:02:bd:84: 94:12:11:67:78:f7:07:a4:9d:4b:40:d4:04:66:1b: c3:5e:43:55:55:47:bf:59:1a:cd:f6:85:c6:a7:2b: 3d:aa:2f:87:93:6a:1d:07:bf:36:38:a8:fa:d5:b1: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:06:B4:D0:3D:B1:37:21:E6:04:7B:C6:E1:F0:A3:53:B0:18:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:200d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:88:5d:3b:cb:da:4c:e2:64:1b:ec:09:e7:f1:fc:5a:24: dd:7a:1b:37:2f:1d:dc:f9:3a:7c:a4:e0:81:1f:99:16:7c:1c: 46:21:88:d9:a3:88:03:d5:15:07:b2:02:29:85:55:02:19:b8: ae:fa:f9:b7:64:4f:ef:2d:2d:df:f6:24:ef:57:eb:09:8a:f3: 93:7c:ea:7c:a7:ac:45:a1:55:38:ff:67:b7:ff:20:a6:b3:f5: 7e:8f:a2:08:0d:64:97:fd:ed:40:a8:1a:f2:0a:d0:ec:ad:4e: 66:af:00:a6:0b:76:8f:37:65:67:88:6b:10:82:e8:61:c3:b5: e7:d4:23:02:0c:ab:55:53:dd:65:13:79:86:9a:42:95:05:74: 89:2f:d8:d9:ba:23:8b:4b:d1:fe:64:10:b0:21:9a:2d:e3:8d: 84:a4:fa:ee:57:a4:01:14:4f:b7:a9:06:d7:81:5b:27:8e:7f: a6:cc:4b:ff:76:41:c2:c1:e2:98:54:e8:f2:f9:1e:64:06:76: 8b:cb:d2:c2:fd:cf:12:73:60:42:1f:26:c5:fa:7b:73:fc:65: 71:06:90:7d:70:65:22:ea:43:d8:24:cd:c1:f4:d2:27:a3:56: d4:82:02:44:3f:78:45:c3:48:e1:b7:6b:2e:9d:4d:a5:cf:96: cc:7a:54:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6PVPXewxC6nR8/6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MmQwYTFhYjEtZDYxNy00NWJlLWExYjctZWViYTY4Y2Q4MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NU9pTpc/7HzSwAUrAxKxRQQsSOYFf6CAi+u Qm3ELQxle1LRTf7rY5IfCvRrxKd2Qy28hOMWaZLQgI95GQzMDWbWkOFHjWZKmE6a rokJt4/1yINMNaHGVh8lfYahmhlgTGXDD2DKDvsmztD6LNevf624dDQqYnwGgVXQ rFSWCUtfhGx8GNuroeMqP02lCUyd64tnE+p+YcOi0LBo80R5TuZ2/M/1kTV/XRgE dmo4+MmAiEdbulfhWm1UnkitaVGU262CJJdSizE5Dlrq+z0CvYSUEhFnePcHpJ1L QNQEZhvDXkNVVUe/WRrN9oXGpys9qi+Hk2odB782OKj61bFr8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGp+BrTQPbE3IeYEe8bh8KNTsBhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTVkODE2MTktN2RkYS0z MWE4LWEwY2UtNWI1YWJhYmE3MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC4iF07y9pM4mQb7Ann8fxaJN16GzcvHdz5Onyk4IEfmRZ8HEYh iNmjiAPVFQeyAimFVQIZuK76+bdkT+8tLd/2JO9X6wmK85N86nynrEWhVTj/Z7f/ IKaz9X6PoggNZJf97UCoGvIK0OytTmavAKYLdo83ZWeIaxCC6GHDtefUIwIMq1VT 3WUTeYaaQpUFdIkv2Nm6I4tL0f5kELAhmi3jjYSk+u5XpAEUT7epBteBWyeOf6bM S/92QcLB4phU6PL5HmQGdovL0sL9zxJzYEIfJsX6e3P8ZXEGkH1wZSLqQ9gkzcH0 0iejVtSCAkQ/eEXDSOG3ay6dTaXPlsx6VCA= -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:48 2026 by rpki-client