$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86460538-d104-3aae-bf57-243449fa604e.roa File: 86460538-d104-3aae-bf57-243449fa604e.roa (raw, json) Hash identifier: JIxK1NKyMC6ESvIOViD6KeCaeJrFOXU3mVk2FlRlInk= Subject key identifier: C5:50:1A:C8:EB:E2:24:DE:35:C0:E9:57:3E:13:20:44:EC:36:84:6A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA518434B057E05431FF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86460538-d104-3aae-bf57-243449fa604e.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 2600:2000:2220::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:51:84:34:b0:57:e0:54:31:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=894ffa50-b0f0-42e8-b2b6-500f15deba6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:06:06:72:be:5b:21:4a:4e:96:98:02:54: 29:49:99:59:4f:d2:9a:72:ab:4b:6d:f3:03:1f:4d: ee:16:55:7e:fd:c0:9b:a5:94:fb:67:ed:4e:cd:62: 84:3f:d3:01:4c:84:80:90:58:80:04:53:b9:61:62: 56:bd:c1:f1:81:6b:bb:f7:bb:c3:62:8e:51:23:49: d2:39:00:3e:26:6a:9a:86:e4:ce:cd:2f:ae:fd:d1: 33:14:5c:3f:00:bd:65:03:02:ad:1a:7c:d6:7c:d6: 88:5d:6b:fd:20:56:3d:e7:34:db:2e:2f:ed:13:bd: 5f:6a:e8:16:5b:bc:9a:25:1a:29:ed:dc:2e:b5:3d: e6:57:1c:56:13:dc:e1:fa:1a:6a:50:6a:5b:de:01: 3c:7f:8c:ea:32:a7:d6:86:ee:7e:a5:4a:80:cf:ef: da:21:99:aa:d3:59:d8:e2:2d:cd:e4:af:79:16:3d: 83:d4:79:d4:6c:74:5a:6e:21:19:26:11:3d:29:00: 43:8e:8f:85:59:26:54:29:b5:38:c3:ae:c3:53:ab: 83:3a:0d:d5:95:5a:f0:f7:c7:0b:95:3d:06:fd:5a: 87:c2:11:86:e7:10:cb:c4:ca:1f:52:46:be:6d:51: a0:e7:23:b7:80:29:25:c8:23:5b:aa:65:d1:cc:2b: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:1A:C8:EB:E2:24:DE:35:C0:E9:57:3E:13:20:44:EC:36:84:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86460538-d104-3aae-bf57-243449fa604e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2220::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:61:4f:cf:56:1a:fb:33:56:89:4a:40:53:f7:92:6c:28:49: 83:79:7e:40:27:56:a8:b5:e4:1f:4f:97:b4:4e:f8:d8:67:d4: 14:e2:0d:03:0d:98:2b:8a:91:22:cc:4c:d5:dd:33:ce:c7:a0: d6:32:5e:1c:e2:a2:83:7e:42:7a:64:08:3e:37:a2:36:99:63: c9:79:8b:e4:f7:96:68:0d:19:26:bd:bf:ac:82:49:77:aa:05: 5e:46:ed:f6:b1:e6:f0:8b:ef:ce:e4:c3:06:84:15:cb:90:e8: 72:6f:a7:bd:d8:5c:ab:e4:a2:0f:fd:b9:67:9e:15:0f:1f:20: 52:0c:34:fc:57:78:08:70:92:88:d9:a3:55:45:dd:b7:29:34: 8f:b1:4c:de:56:5f:30:4b:76:27:2c:8e:a9:66:66:e1:14:38: 37:8f:86:ca:e6:f5:7e:5a:4f:e2:c9:12:0f:ff:bb:e6:c5:c0: 14:81:5f:e2:ff:fe:42:5f:f9:3a:df:1f:2b:14:f3:6d:99:39: e6:d9:3d:b7:09:12:b7:4a:d1:c6:7f:0e:1f:09:ed:a7:39:69: b9:d4:7e:47:08:5c:b9:d8:6d:c1:2f:92:03:67:94:8b:0e:d5: b7:6f:02:bd:32:24:52:e0:bf:a8:9d:83:2c:71:89:a7:65:cd: 4f:6e:7e:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+lGENLBX4FQx/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk ODk0ZmZhNTAtYjBmMC00MmU4LWIyYjYtNTAwZjE1ZGViYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCAGBnK+WyFKTpaYAlQpSZlZT9KacqtLbfMD H03uFlV+/cCbpZT7Z+1OzWKEP9MBTISAkFiABFO5YWJWvcHxgWu797vDYo5RI0nS OQA+JmqahuTOzS+u/dEzFFw/AL1lAwKtGnzWfNaIXWv9IFY95zTbLi/tE71faugW W7yaJRop7dwutT3mVxxWE9zh+hpqUGpb3gE8f4zqMqfWhu5+pUqAz+/aIZmq01nY 4i3N5K95Fj2D1HnUbHRabiEZJhE9KQBDjo+FWSZUKbU4w67DU6uDOg3VlVrw98cL lT0G/VqHwhGG5xDLxMofUka+bVGg5yO3gCklyCNbqmXRzCuj3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVQGsjr4iTeNcDpVz4TIETsNoRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY0NjA1MzgtZDEwNC0z YWFlLWJmNTctMjQzNDQ5ZmE2MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxhT89WGvszVolKQFP3kmwoSYN5fkAnVqi15B9Pl7RO+Nhn1BTi DQMNmCuKkSLMTNXdM87HoNYyXhziooN+QnpkCD43ojaZY8l5i+T3lmgNGSa9v6yC SXeqBV5G7fax5vCL787kwwaEFcuQ6HJvp73YXKvkog/9uWeeFQ8fIFIMNPxXeAhw kojZo1VF3bcpNI+xTN5WXzBLdicsjqlmZuEUODePhsrm9X5aT+LJEg//u+bFwBSB X+L//kJf+TrfHysU822ZOebZPbcJErdK0cZ/Dh8J7ac5abnUfkcIXLnYbcEvkgNn lIsO1bdvAr0yJFLgv6idgyxxiadlzU9ufiE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:37:13 2026 by rpki-client