$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa File: 1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa (raw, json) Hash identifier: XqSWGW8l6/HoIvX5ccqpXhj5MOT5BAztI9MPMWJd/v4= Subject key identifier: 25:99:58:9C:EA:D3:6B:1D:BC:B9:AC:18:C9:E6:72:D7:B9:7C:8E:5C Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584E921FA02D88893D8E83965B00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 2620:116:800c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a0:2d:88:89:3d:8e:83:96:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=a00db157-ab3e-4e2c-9383-2bc52f7da5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:5d:94:bf:6b:9b:15:e6:b9:56:fb:cd:bd: 69:1a:82:57:dd:f7:a3:39:e7:9f:15:27:34:66:3f: cc:9e:6a:cd:87:d3:8e:f5:20:15:8f:2c:1d:43:32: c7:09:e5:17:14:74:29:75:95:8c:f8:21:ef:e1:bb: c5:b8:c1:2b:21:27:8c:42:bf:ff:10:71:34:0a:ac: 4b:69:98:a5:52:f2:f8:7e:06:d1:a5:06:0b:dc:7b: 9d:90:ce:10:9f:e4:7f:d1:9e:d9:45:8e:18:99:54: f6:ce:d9:c8:50:fd:f6:f8:9d:bd:8a:62:9b:7c:64: 63:63:77:42:68:78:b3:5a:ff:6e:fc:23:b0:4f:1a: f6:f3:0e:78:b0:c1:da:1e:7f:a3:95:30:c0:76:62: 18:4f:d9:9c:d6:6c:01:7a:e8:60:da:fa:6d:62:61: e5:09:98:fc:56:01:57:94:8c:b5:8c:b4:63:23:23: d1:98:b6:75:1d:c6:01:87:eb:1c:27:03:f8:04:e3: e9:59:93:3d:5b:0c:88:f9:55:84:b4:3d:e4:05:8b: 8a:5d:69:39:73:47:dd:a9:c1:c6:40:d9:f9:d2:84: 11:51:ea:f6:98:aa:30:15:b8:97:13:56:d2:8c:4b: 3c:a7:f9:88:86:15:df:21:a8:bc:fe:78:a1:1a:94: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:99:58:9C:EA:D3:6B:1D:BC:B9:AC:18:C9:E6:72:D7:B9:7C:8E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:eb:12:54:3c:8a:13:e3:b0:24:72:ba:29:0e:2e:42:11:c1: 32:83:8e:1f:9c:44:b5:a0:4c:09:ad:3e:22:88:e1:10:23:ad: 83:b8:0c:04:1c:5b:a5:74:ac:f9:40:11:d4:65:ec:66:00:00: bc:ee:8e:cf:9b:53:1f:11:73:9d:67:50:29:c0:49:ef:78:f5: 24:5b:27:8b:54:5f:20:bb:d0:1d:e3:fc:78:ae:60:8c:d2:cb: d7:a9:a6:48:be:25:98:38:0a:b2:ec:67:69:eb:fb:7c:ad:05: f1:1d:2b:39:3d:6b:e2:ed:49:c1:de:c3:1c:3a:af:d2:35:66: 49:c2:2a:62:4b:39:3c:d5:73:03:8a:37:a8:26:4d:c5:39:a0: f8:ea:f1:ae:4c:40:29:09:96:0e:19:52:05:3a:2a:ec:6f:d2: 1d:d0:1b:dd:d7:83:8d:16:09:21:e2:65:0a:a8:c8:d1:af:6e: 9e:d2:80:73:bc:8f:9e:02:07:c4:9f:a2:3a:62:ac:92:eb:b2: f5:c7:0c:7c:d5:47:dc:df:b8:7b:74:a0:cd:b4:7e:37:91:17: 5b:5a:11:5d:ab:17:28:7f:4f:d0:2d:9d:44:97:05:93:57:6c: 23:3d:16:93:0f:54:97:a2:58:e8:90:ca:44:d5:fc:e3:97:78: d5:0a:2c:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6SH6AtiIk9joOWWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk YTAwZGIxNTctYWIzZS00ZTJjLTkzODMtMmJjNTJmN2RhNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFdlL9rmxXmuVb7zb1pGoJX3fejOeefFSc0 Zj/MnmrNh9OO9SAVjywdQzLHCeUXFHQpdZWM+CHv4bvFuMErISeMQr//EHE0CqxL aZilUvL4fgbRpQYL3HudkM4Qn+R/0Z7ZRY4YmVT2ztnIUP32+J29imKbfGRjY3dC aHizWv9u/COwTxr28w54sMHaHn+jlTDAdmIYT9mc1mwBeuhg2vptYmHlCZj8VgFX lIy1jLRjIyPRmLZ1HcYBh+scJwP4BOPpWZM9WwyI+VWEtD3kBYuKXWk5c0fdqcHG QNn50oQRUer2mKowFbiXE1bSjEs8p/mIhhXfIai8/nihGpT7QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWZWJzq02sdvLmsGMnmcte5fI5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMWU4YzdjMjctNDA4Ny0z Y2YzLThmNWYtZjRhNjlkM2I0YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPrElQ8ihPjsCRyuikOLkIRwTKDjh+cRLWgTAmtPiKI4RAjrYO4 DAQcW6V0rPlAEdRl7GYAALzujs+bUx8Rc51nUCnASe949SRbJ4tUXyC70B3j/Hiu YIzSy9eppki+JZg4CrLsZ2nr+3ytBfEdKzk9a+LtScHewxw6r9I1ZknCKmJLOTzV cwOKN6gmTcU5oPjq8a5MQCkJlg4ZUgU6Kuxv0h3QG93Xg40WCSHiZQqoyNGvbp7S gHO8j54CB8SfojpirJLrsvXHDHzVR9zfuHt0oM20fjeRF1taEV2rFyh/T9AtnUSX BZNXbCM9FpMPVJeiWOiQykTV/OOXeNUKLN8= -----END CERTIFICATE-----Generated at Fri Jul 24 19:09:34 2026 by rpki-client