$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json) Hash identifier: Ge6dk1JDCcucuzxOt+7f6OmzqzsJj0odTjX/xfEdX8w= Subject key identifier: 3F:58:A9:30:8B:77:26:B5:23:A5:04:0F:ED:81:B1:C7:AB:13:3E:C5 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F4328584DAC45807173167F30F9C65BE0 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 14866 IP address blocks: 2604:4280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:80:71:73:16:7f:30:f9:c6:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=875b48cd-e449-44ef-a6e0-55bc6c8110cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:2f:1f:8f:87:f1:b3:41:78:bc:fa:59:84: b1:02:b8:e2:33:8a:63:bf:7a:e5:c3:f8:d7:43:58: bc:d1:52:72:c0:d0:52:18:27:79:68:ef:ae:23:ae: 62:57:22:5f:1d:5a:9c:1f:a3:83:50:78:56:d6:13: 72:69:61:79:77:2a:78:24:5f:0b:5e:0f:62:32:7e: a4:3b:7f:d3:e8:e1:1b:24:9b:63:e8:b5:16:b5:18: 27:ed:46:62:42:07:0d:82:81:93:93:40:78:f9:f0: 16:cc:03:e2:45:0f:f5:1c:51:d4:4c:98:da:b8:32: 17:ec:3d:d7:aa:b0:d4:76:66:b9:8a:87:06:a1:2a: d9:bd:46:36:80:28:1e:d7:dd:ad:c0:ba:30:2b:34: fc:d8:28:92:7a:1c:4e:2e:60:df:24:66:af:5e:a8: 58:2d:c8:31:29:65:97:30:fc:a5:28:76:ea:18:19: f3:6d:76:1b:a2:3f:c5:2b:1c:ca:9d:33:a1:01:49: 66:a7:1b:b7:c5:06:e4:7b:d9:43:2c:8f:b7:da:6f: 82:0a:09:77:62:ac:b0:5a:f2:b2:dc:9c:be:a9:65: 91:d3:b1:c7:66:9c:f0:d2:0a:6d:a3:4d:33:a3:fe: 92:f5:0c:1c:b8:4b:be:55:c4:6c:e9:91:b2:ad:ed: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:58:A9:30:8B:77:26:B5:23:A5:04:0F:ED:81:B1:C7:AB:13:3E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv6: 2604:4280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f7:57:06:66:71:62:6f:e9:3d:36:31:08:b7:5d:5f:63:d7: 19:0c:3d:4b:21:d1:ec:2d:64:25:95:c5:f2:1e:e5:e4:1d:51: 05:a8:fb:6c:b4:31:49:bc:40:29:80:4c:1f:41:8d:9d:0c:53: 29:f2:de:c5:56:a6:5c:16:23:de:63:49:74:5d:41:19:3e:cb: 37:a9:cf:f7:d8:fe:78:70:b9:b9:77:56:57:c9:84:08:f7:56: 1e:26:70:19:a8:69:f6:ae:ba:b1:7a:b2:81:e8:0c:7e:6a:d9: 3b:bc:38:1d:b2:8a:b0:f2:3d:b5:67:00:bd:fc:b4:3e:ce:a1: 6b:ea:9c:58:99:ef:83:cd:4b:bd:66:be:57:c1:e9:54:52:4b: e3:89:34:cf:9f:97:2a:3b:e9:4c:1d:75:b3:d8:24:93:2e:a6: 73:4b:db:dc:16:73:fe:16:c3:17:5e:b6:53:72:79:0c:7a:fb: 83:63:29:1a:f0:31:b5:9f:79:44:62:92:bd:0b:5a:b2:43:21: bf:0a:fd:53:42:f4:6c:c9:e2:ec:ff:3a:21:36:f3:21:5b:94: f6:c9:a9:6d:a9:99:25:10:c6:2d:21:c3:71:3d:0d:05:8c:97: 33:49:5b:2f:5b:84:fe:18:6a:14:79:ef:6f:a0:bc:d6:d3:f4: e5:06:51:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRYBxcxZ/MPnGW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ODc1YjQ4Y2QtZTQ0OS00NGVmLWE2ZTAtNTViYzZjODExMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNYvH4+H8bNBeLz6WYSxArjiM4pjv3rlw/jX Q1i80VJywNBSGCd5aO+uI65iVyJfHVqcH6ODUHhW1hNyaWF5dyp4JF8LXg9iMn6k O3/T6OEbJJtj6LUWtRgn7UZiQgcNgoGTk0B4+fAWzAPiRQ/1HFHUTJjauDIX7D3X qrDUdma5iocGoSrZvUY2gCge192twLowKzT82CiSehxOLmDfJGavXqhYLcgxKWWX MPylKHbqGBnzbXYboj/FKxzKnTOhAUlmpxu3xQbke9lDLI+32m+CCgl3YqywWvKy 3Jy+qWWR07HHZpzw0gpto00zo/6S9QwcuEu+VcRs6ZGyre03wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD9YqTCLdya1I6UED+2BscerEz7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAk91cGZnFib+k9NjEIt11fY9cZDD1LIdHsLWQllcXyHuXkHVEFqPts tDFJvEApgEwfQY2dDFMp8t7FVqZcFiPeY0l0XUEZPss3qc/32P54cLm5d1ZXyYQI 91YeJnAZqGn2rrqxerKB6Ax+atk7vDgdsoqw8j21ZwC9/LQ+zqFr6pxYme+DzUu9 Zr5XwelUUkvjiTTPn5cqO+lMHXWz2CSTLqZzS9vcFnP+FsMXXrZTcnkMevuDYyka 8DG1n3lEYpK9C1qyQyG/Cv1TQvRsyeLs/zohNvMhW5T2yaltqZklEMYtIcNxPQ0F jJczSVsvW4T+GGoUee9voLzW0/TlBlGO -----END CERTIFICATE-----Generated at Wed May 13 05:05:14 2026 by rpki-client