$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa File: 2744f7f5-ab18-3de3-b244-bc520f20d607.roa (raw, json) Hash identifier: rdpsguPbABZbNGZNRxFYwC2wrECD/ybmhGubUjQMnAg= Subject key identifier: DF:24:51:77:2D:52:20:22:5C:4E:2C:1D:4A:30:5A:DF:5B:FE:84:43 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584E5A4A00231DA3BE6DC4B16800 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 40230 IP address blocks: 2604:cf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:00:23:1d:a3:be:6d:c4:b1:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=c036b6bb-451f-49af-898f-1a1a361c00c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:25:66:fd:0b:ec:48:99:96:fc:d4:30:7b: 47:b5:90:ef:a6:08:94:ef:28:d9:46:e2:a8:85:6c: 7c:13:86:c7:59:11:e9:80:39:63:d5:81:c4:aa:18: 09:4c:95:47:c9:e2:07:9c:e7:c0:c4:e9:bd:e8:b3: 25:4a:7d:75:80:5a:61:10:6b:97:05:8c:f7:6a:b0: 3b:30:09:02:43:59:b0:b9:6d:65:29:6a:e1:59:e2: 28:4c:75:5a:01:3d:95:5d:32:a6:5e:ab:e4:7e:9c: 7e:f6:3f:9a:07:b8:3e:e2:f3:b0:b7:ef:1b:7b:77: 0f:25:06:6c:74:5f:c0:ac:c7:92:15:fc:51:80:3a: a6:8d:fe:ee:76:54:eb:28:48:92:31:f8:c3:60:07: 67:91:c4:b4:c9:22:1e:38:1f:57:6d:e9:22:e1:e5: e2:d7:1b:87:c0:39:91:b1:42:b1:9c:a2:2c:3a:e2: 51:0e:07:bb:0b:6e:55:4a:1c:7f:51:4c:7b:9e:73: 92:5f:6f:e4:52:3f:98:ae:74:fc:96:91:39:06:bb: 45:13:b1:a6:1e:28:79:6e:37:b6:70:a0:cc:ed:a0: 97:af:ac:9f:fe:53:66:49:42:95:02:cd:0c:d7:a1: 97:8e:ea:75:31:e9:00:95:19:d7:05:1f:a3:65:5b: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:51:77:2D:52:20:22:5C:4E:2C:1D:4A:30:5A:DF:5B:FE:84:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:db:15:c6:cf:df:9f:3f:de:0a:08:e0:28:84:10:8d:ce:9d: 8d:d3:72:b3:6d:f8:e6:57:0d:70:54:18:3f:2a:f4:3f:47:61: fb:c0:a2:9b:f7:0e:83:6f:24:57:12:42:7b:0c:55:f9:04:10: be:47:bd:de:9f:62:48:5b:e6:d8:da:57:99:a7:ed:0d:ad:18: e4:aa:f8:39:34:80:6a:b2:1d:d2:79:ac:25:85:2d:9c:57:07: a6:54:3e:9e:27:49:c0:dc:96:d9:0a:4e:87:e9:17:6c:41:5c: 7e:dc:a1:ce:d8:94:13:19:4f:9a:c9:06:f5:98:38:38:d4:25: f0:05:30:a8:17:e5:45:02:5f:86:fa:15:df:da:c5:3d:5d:2b: f3:7c:63:c4:a8:36:06:38:b8:02:90:9d:79:4c:fb:2f:04:57: 56:07:13:49:fc:08:35:93:e5:3b:9a:a3:33:f9:35:72:54:08: 79:bd:19:11:54:38:b4:66:5c:9c:ef:7c:86:a6:19:f2:e0:21: 99:44:0c:8a:1a:27:73:9c:3f:47:7f:42:c7:31:c2:16:dd:41: c4:52:96:3d:e1:84:d8:a7:29:75:5e:f1:5e:85:0c:ee:4e:d8: 55:c8:a7:56:46:a1:50:fb:39:89:a0:a5:6c:7a:88:3b:c6:69: 6d:68:21:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5aSgAjHaO+bcSxaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YzAzNmI2YmItNDUxZi00OWFmLTg5OGYtMWExYTM2MWMwMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobglZv0L7EiZlvzUMHtHtZDvpgiU7yjZRuKo hWx8E4bHWRHpgDlj1YHEqhgJTJVHyeIHnOfAxOm96LMlSn11gFphEGuXBYz3arA7 MAkCQ1mwuW1lKWrhWeIoTHVaAT2VXTKmXqvkfpx+9j+aB7g+4vOwt+8be3cPJQZs dF/ArMeSFfxRgDqmjf7udlTrKEiSMfjDYAdnkcS0ySIeOB9Xbeki4eXi1xuHwDmR sUKxnKIsOuJRDge7C25VShx/UUx7nnOSX2/kUj+YrnT8lpE5BrtFE7GmHih5bje2 cKDM7aCXr6yf/lNmSUKVAs0M16GXjup1MekAlRnXBR+jZVuJdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN8kUXctUiAiXE4sHUowWt9b/oRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvMjc0NGY3ZjUtYWIxOC0z ZGUzLWIyNDQtYmM1MjBmMjBkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA42xXGz9+fP94KCOAohBCNzp2N03KzbfjmVw1wVBg/KvQ/R2H7wKKb 9w6DbyRXEkJ7DFX5BBC+R73en2JIW+bY2leZp+0NrRjkqvg5NIBqsh3SeawlhS2c VwemVD6eJ0nA3JbZCk6H6RdsQVx+3KHO2JQTGU+ayQb1mDg41CXwBTCoF+VFAl+G +hXf2sU9XSvzfGPEqDYGOLgCkJ15TPsvBFdWBxNJ/Ag1k+U7mqMz+TVyVAh5vRkR VDi0Zlyc73yGphny4CGZRAyKGidznD9Hf0LHMcIW3UHEUpY94YTYpyl1XvFehQzu TthVyKdWRqFQ+zmJoKVseog7xmltaCGw -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:53 2026 by rpki-client