$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: 6VitNQz20BNYQrzHKu9Xd/4A8mBSTI0mpbq1v9CZq84= Subject key identifier: 72:56:23:93:68:04:BF:C5:06:82:E7:26:14:F5:E4:FC:7F:16:00:49 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584E736A1CE32706C60E34230980 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1c:e3:27:06:c6:0e:34:23:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=3fc1c4c6-ddb4-4405-9cd1-4b160a58629a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:75:43:61:4a:d6:8f:71:f0:1d:b5:e7:83: 40:ba:03:21:35:4e:00:9c:e0:50:d3:16:f3:fa:7b: d6:9b:95:9c:5d:2a:29:b3:82:f8:87:6b:19:cb:14: b9:9e:12:55:21:a7:6f:4d:c0:66:7d:6a:b4:b2:ed: bf:98:6e:fa:7a:41:f0:ba:33:b8:59:47:c6:d6:9e: 7e:20:24:2a:b8:b4:38:76:1d:23:1c:04:28:cc:72: 77:a0:e9:a5:b7:f4:82:49:81:25:df:f6:3d:ed:96: 29:94:4e:48:1c:72:26:77:74:22:8d:ae:9b:d3:62: 5b:86:e8:56:7c:fc:89:d8:7a:22:82:ef:f8:5b:10: 42:d5:05:29:da:80:2a:09:62:f1:51:72:2f:44:f2: e1:3a:ac:19:76:39:f5:5f:f4:3f:8e:c9:3f:34:71: 0b:0b:5a:6d:13:6f:17:06:62:b6:e1:fb:5c:80:ef: b8:69:4a:27:87:33:93:69:91:5a:ff:15:45:75:f9: 22:b7:ff:77:0d:81:45:7e:ba:4b:21:da:9f:1a:da: 7f:4e:4c:ed:f0:13:85:b1:21:cd:1d:6f:2f:b5:45: 56:9d:fe:ae:b5:c9:cf:d0:7c:56:b7:3e:df:48:e3: 44:6e:95:54:7e:ab:d6:2f:dd:df:18:d6:01:7f:6b: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:23:93:68:04:BF:C5:06:82:E7:26:14:F5:E4:FC:7F:16:00:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:aa:b4:b6:b1:ef:62:79:b3:4b:7e:2c:69:8d:d9:de:db:f6: d1:90:fc:28:96:22:15:c2:d6:6b:5f:0a:b6:24:2d:d4:c9:db: 8f:52:6a:e9:23:95:7e:99:6e:07:85:4c:23:59:ef:03:a7:66: ee:21:db:60:d5:d7:57:88:06:9a:2c:fd:cd:88:1b:19:15:b2: e9:87:44:83:b6:8f:ef:35:1e:ab:44:72:67:3e:fb:a9:12:b8: 3a:17:84:05:4f:93:31:70:06:50:35:08:48:34:39:ff:06:15: 6d:ee:aa:4e:8b:d1:df:6f:c5:e3:16:e4:16:b1:69:eb:ba:37: 1b:5f:91:b3:eb:7c:24:ef:ab:31:91:54:ba:b1:3e:45:7b:26: 03:5c:93:44:4e:92:db:5f:cc:2d:ad:91:e4:2a:10:f6:cb:0e: f3:82:fb:1f:f2:d3:b3:af:2e:72:34:e8:dd:c3:14:a1:71:53: 61:8f:57:c1:32:5c:53:bd:82:1c:49:16:84:d2:3a:02:5c:c7: 9c:09:00:21:30:c6:af:9d:18:27:be:33:70:6a:c2:80:51:63: 41:e7:b3:bb:89:1a:06:98:17:c9:d1:5c:c7:f2:96:a5:f2:b5: 99:fd:c5:9a:4e:a7:bf:5c:4b:98:9b:35:34:df:08:91:23:48: 43:06:9e:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5zahzjJwbGDjQjCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk M2ZjMWM0YzYtZGRiNC00NDA1LTljZDEtNGIxNjBhNTg2MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4t1Q2FK1o9x8B2154NAugMhNU4AnOBQ0xbz +nvWm5WcXSops4L4h2sZyxS5nhJVIadvTcBmfWq0su2/mG76ekHwujO4WUfG1p5+ ICQquLQ4dh0jHAQozHJ3oOmlt/SCSYEl3/Y97ZYplE5IHHImd3Qija6b02JbhuhW fPyJ2Hoigu/4WxBC1QUp2oAqCWLxUXIvRPLhOqwZdjn1X/Q/jsk/NHELC1ptE28X BmK24ftcgO+4aUonhzOTaZFa/xVFdfkit/93DYFFfrpLIdqfGtp/Tkzt8BOFsSHN HW8vtUVWnf6utcnP0HxWtz7fSONEbpVUfqvWL93fGNYBf2vbeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJWI5NoBL/FBoLnJhT15Px/FgBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCqrS2se9iebNLfixpjdne2/bRkPwoliIVwtZrXwq2JC3UyduPUmrp I5V+mW4HhUwjWe8Dp2buIdtg1ddXiAaaLP3NiBsZFbLph0SDto/vNR6rRHJnPvup Erg6F4QFT5MxcAZQNQhINDn/BhVt7qpOi9Hfb8XjFuQWsWnrujcbX5Gz63wk76sx kVS6sT5FeyYDXJNETpLbX8wtrZHkKhD2yw7zgvsf8tOzry5yNOjdwxShcVNhj1fB MlxTvYIcSRaE0joCXMecCQAhMMavnRgnvjNwasKAUWNB57O7iRoGmBfJ0VzH8pal 8rWZ/cWaTqe/XEuYmzU03wiRI0hDBp4S -----END CERTIFICATE-----Generated at Fri Jul 24 01:41:57 2026 by rpki-client