$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa File: dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa (raw, json) Hash identifier: KXzey76BP+SMPsYL8cwmHUJQoJp5CZt42zvfziWxzjQ= Subject key identifier: C8:E3:8B:1F:01:11:63:87:EE:A4:F7:08:2D:60:CA:F8:4E:68:27:2F Certificate issuer: /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d Certificate serial: 010D0C9F4328584E5A49F0DC658033A5F031BE80 Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 401880 IP address blocks: 2602:f5b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f0:dc:65:80:33:a5:f0:31:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=776fae25-ef38-4372-bcf0-fbf96457f753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:97:e3:66:f5:f8:ce:a9:4a:65:8f:2d:9d: b9:74:85:26:10:e8:f7:01:a6:62:76:3f:d6:b9:c3: ea:9b:55:a8:b3:c0:2b:b9:97:9e:c9:26:e7:08:ac: 30:7b:03:02:53:d4:81:a1:0a:41:db:a2:21:09:84: 63:a9:39:97:10:8b:cb:8e:59:0f:47:dc:ac:e5:49: 9c:e3:89:ae:f7:d0:d1:e5:fb:03:b0:21:ff:01:4f: 84:35:78:cd:92:0c:4a:ea:7b:82:a8:3b:e2:d0:a9: 62:9d:60:2e:58:cc:7f:72:43:40:ca:3c:51:89:96: 87:e5:36:6d:71:67:0d:a4:57:a0:fc:33:42:e5:2a: 57:6a:25:ab:a6:9a:d1:99:66:fa:56:f5:4d:33:36: 32:aa:ad:bb:72:18:71:5b:95:1f:6a:91:93:86:a8: d4:27:84:7b:94:a5:56:35:b4:85:7e:57:62:86:02: 4d:0b:99:53:c1:9d:98:30:3b:18:df:e7:8e:81:a4: 40:8a:1d:0c:28:0c:0b:25:74:3c:0b:86:8e:b5:74: e7:89:58:6e:41:c2:9e:1c:32:85:a3:9e:69:84:59: cd:56:9b:66:d5:ac:4e:59:34:8d:a8:52:ef:c4:aa: af:c8:4d:3e:fc:cb:8c:ca:a5:c9:5d:3b:0c:ec:35: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:8B:1F:01:11:63:87:EE:A4:F7:08:2D:60:CA:F8:4E:68:27:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl X509v3 Authority Key Identifier: keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2d:1d:de:6c:92:b0:d9:12:27:d7:a2:95:be:ef:50:22:04: a3:16:8e:b5:92:a3:38:71:67:bc:31:f0:2a:3a:42:b4:6f:59: ba:b7:c8:dc:e7:01:2f:ef:af:71:03:bb:5f:6a:bf:20:34:26: a0:32:24:6b:e9:2c:f7:b4:73:c1:8c:ba:af:63:d0:f2:f9:69: 58:9d:9b:d7:0f:33:51:09:fc:72:b7:7c:f5:5a:12:68:29:f4: 57:dd:aa:54:2b:ac:9b:9c:ca:7a:ac:97:70:6e:58:f2:e7:af: 0d:ab:02:4f:5f:c8:0d:ba:ba:bc:db:06:cb:b9:87:57:da:0f: 9e:d2:36:90:5d:89:bd:94:e7:75:7d:21:34:e4:1d:8b:4f:7e: 95:a8:82:4e:76:ee:03:5c:05:3f:5f:79:c5:85:cd:ca:0c:fa: 97:41:da:f6:69:f5:5d:29:62:e4:68:b7:09:fa:05:91:78:36: ff:56:85:54:80:65:61:77:5b:77:d8:5b:89:69:aa:8f:fd:62: b8:10:c1:c5:0d:6a:0a:3b:ec:29:0f:8d:73:fb:cd:7d:5b:e6: 9b:65:27:4a:ea:35:f1:12:51:7e:6a:98:82:cc:dc:a4:4e:24: 95:26:43:c8:50:75:3a:94:d4:55:a0:13:9f:7d:da:10:a5:5b: 82:68:af:94 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5aSfDcZYAzpfAxvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwYWMwMjMtYzMzNC00YmJlLWJhYjMtYWZiNzY2MmJl ODNkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk Nzc2ZmFlMjUtZWYzOC00MzcyLWJjZjAtZmJmOTY0NTdmNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxeX42b1+M6pSmWPLZ25dIUmEOj3AaZidj/W ucPqm1Wos8AruZeeySbnCKwwewMCU9SBoQpB26IhCYRjqTmXEIvLjlkPR9ys5Umc 44mu99DR5fsDsCH/AU+ENXjNkgxK6nuCqDvi0KlinWAuWMx/ckNAyjxRiZaH5TZt cWcNpFeg/DNC5SpXaiWrpprRmWb6VvVNMzYyqq27chhxW5UfapGThqjUJ4R7lKVW NbSFfldihgJNC5lTwZ2YMDsY3+eOgaRAih0MKAwLJXQ8C4aOtXTniVhuQcKeHDKF o55phFnNVptm1axOWTSNqFLvxKqvyE0+/MuMyqXJXTsM7DWfjwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMjjix8BEWOH7qT3CC1gyvhOaCcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBh YzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3NjYyYmU4M2QvZGJmNDBmZGYtMmM3ZC0z ZDcwLThjZTgtMWUzMTYzYjc4ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGUwYWMwMjMtYzMzNC00YmJlLWJh YjMtYWZiNzY2MmJlODNkLzBlMGFjMDIzLWMzMzQtNGJiZS1iYWIzLWFmYjc2NjJi ZTgzZC5jcmwwHwYDVR0jBBgwFoAU6yCFl6bIMynVCOYJufQwC7463CkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBhYzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3 NjYyYmU4M2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1swAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQC0d3mySsNkSJ9eilb7vUCIEoxaOtZKjOHFnvDHwKjpCtG9ZurfI 3OcBL++vcQO7X2q/IDQmoDIka+ks97RzwYy6r2PQ8vlpWJ2b1w8zUQn8crd89VoS aCn0V92qVCusm5zKeqyXcG5Y8uevDasCT1/IDbq6vNsGy7mHV9oPntI2kF2JvZTn dX0hNOQdi09+laiCTnbuA1wFP195xYXNygz6l0Ha9mn1XSli5Gi3CfoFkXg2/1aF VIBlYXdbd9hbiWmqj/1iuBDBxQ1qCjvsKQ+Nc/vNfVvmm2UnSuo18RJRfmqYgszc pE4klSZDyFB1OpTUVaATn33aEKVbgmivlA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:31:35 2026 by rpki-client