$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa File: 644c461b-c7da-36b5-8d90-01885e089d23.roa (raw, json) Hash identifier: URp+IKWFVe6kBke1hXy6ceuwyeJlKQmt7bwoEKBFNio= Subject key identifier: 3E:52:ED:26:99:FE:6E:C1:73:9B:95:87:E1:A9:A6:31:0E:F3:3E:F6 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F498BBD61DCA3728DD18C2700 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23260 IP address blocks: 2604:8d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:bd:61:dc:a3:72:8d:d1:8c:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bfaa321a-209f-490d-b229-5710ba7568d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:36:89:12:d8:79:45:c7:45:89:70:97:6d: 48:03:1f:87:16:ee:f8:d2:41:f7:f4:0e:9e:3e:e5: cc:ff:e3:d5:22:df:3a:65:f0:25:5c:47:3e:76:5f: 0b:76:0c:70:6f:cb:eb:17:8d:7f:04:0d:ea:f5:89: de:a6:86:59:cd:24:91:08:90:af:17:c7:aa:04:ed: 8b:23:b2:14:ea:d3:49:5f:de:00:1a:40:65:2c:61: 4a:d9:70:2b:71:92:24:89:7e:17:5c:63:ec:0b:33: ee:93:9b:51:ae:93:7b:fd:4f:72:17:4f:fb:68:a1: ce:fe:13:9e:40:68:60:d2:96:b4:35:0c:32:f9:25: e7:d2:6a:3a:f7:5c:25:e0:7d:28:84:5c:b9:a0:67: b2:02:36:5f:9e:b9:7a:bc:56:fa:2d:d5:64:a5:b2: 06:4c:a0:dd:6b:34:c7:47:33:c6:35:ca:3a:20:61: 5b:fe:c8:82:28:01:f9:e3:65:1a:c3:c9:58:fd:4b: 27:18:19:ad:98:5f:79:ce:8e:1c:c3:b6:1f:8a:9a: d3:f2:4c:ee:53:ea:3d:22:83:b6:49:f5:e3:1b:28: 7c:a0:0a:6f:8c:85:8d:bf:b9:4d:8b:7a:fa:49:e9: b3:82:de:f4:4d:c1:ce:b7:fc:ec:8c:a6:c8:d7:f6: bc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:ED:26:99:FE:6E:C1:73:9B:95:87:E1:A9:A6:31:0E:F3:3E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:8d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:76:89:40:8e:09:83:42:d1:47:d3:55:9a:13:78:1f:bc: 6c:01:73:74:58:f4:4d:73:4f:0d:5a:04:ff:3b:eb:ee:56:e8: 68:64:b9:38:9f:fb:83:22:bf:41:e9:4b:bb:15:a2:33:f0:36: 14:37:70:9e:7a:60:6b:06:50:34:69:0c:15:b6:d6:27:59:3d: 5e:d5:13:96:03:ad:81:ed:f7:69:b3:e1:5c:6c:1c:b5:2e:61: eb:20:51:6f:11:eb:fb:c5:a4:ad:89:fb:7b:5e:34:14:ff:85: 82:8e:e1:5e:ff:08:5c:af:2d:57:5c:6f:ea:b9:54:15:8c:8b: 08:ce:e5:e8:ef:45:76:cd:10:0a:89:bf:11:92:8a:72:15:21: c1:00:79:14:41:e6:2a:6a:49:e0:e9:94:55:1a:f3:67:fc:30: 6d:76:e4:01:85:e2:52:b4:9e:e1:34:fb:45:c9:cc:2f:e5:9b: 87:47:31:8f:96:bb:96:5d:f6:5a:6e:45:5c:fd:74:df:8b:3c: 40:02:19:a7:df:38:38:65:73:fb:d6:95:9f:d8:c9:38:8b:ac: 64:1e:bc:ec:e4:5e:65:c0:4e:05:27:2e:97:cf:e6:09:ad:18: 12:6b:9b:7a:94:64:8d:ae:67:fd:db:19:74:c0:4c:64:8c:27: 72:7d:b0:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji71h3KNyjdGMJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmZhYTMyMWEtMjA5Zi00OTBkLWIyMjktNTcxMGJhNzU2OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsQ2iRLYeUXHRYlwl21IAx+HFu740kH39A6e PuXM/+PVIt86ZfAlXEc+dl8Ldgxwb8vrF41/BA3q9YnepoZZzSSRCJCvF8eqBO2L I7IU6tNJX94AGkBlLGFK2XArcZIkiX4XXGPsCzPuk5tRrpN7/U9yF0/7aKHO/hOe QGhg0pa0NQwy+SXn0mo691wl4H0ohFy5oGeyAjZfnrl6vFb6LdVkpbIGTKDdazTH RzPGNco6IGFb/siCKAH542Uaw8lY/UsnGBmtmF95zo4cw7YfiprT8kzuU+o9IoO2 SfXjGyh8oApvjIWNv7lNi3r6Semzgt70TcHOt/zsjKbI1/a86QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD5S7SaZ/m7Bc5uVh+GppjEO8z72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjQ0YzQ2MWItYzdkYS0z NmI1LThkOTAtMDE4ODVlMDg5ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSNQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBz3aJQI4Jg0LRR9NVmhN4H7xsAXN0WPRNc08NWgT/O+vuVuhoZLk4 n/uDIr9B6Uu7FaIz8DYUN3CeemBrBlA0aQwVttYnWT1e1ROWA62B7fdps+FcbBy1 LmHrIFFvEev7xaStift7XjQU/4WCjuFe/whcry1XXG/quVQVjIsIzuXo70V2zRAK ib8RkopyFSHBAHkUQeYqakng6ZRVGvNn/DBtduQBheJStJ7hNPtFycwv5ZuHRzGP lruWXfZabkVc/XTfizxAAhmn3zg4ZXP71pWf2Mk4i6xkHrzs5F5lwE4FJy6Xz+YJ rRgSa5t6lGSNrmf92xl0wExkjCdyfbAL -----END CERTIFICATE-----Generated at Sun Sep 27 21:21:05 2026 by rpki-client