$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: M4fPjRes6DAdBDtYAkxoUsJCVEGmdBTdmRjsxsg6VaY= Subject key identifier: 8E:58:7A:09:F1:E8:B7:28:EF:B9:91:6C:0C:A5:78:FE:75:13:30:1B Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584F02422558363DCF6172392E80 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:25:58:36:3d:cf:61:72:39:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=c526ef9b-4f9b-49dc-8d00-ea7a8cf70645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:96:e9:f5:ab:02:ad:bd:37:21:26:ca:04: 70:9e:88:4d:e7:0f:c4:85:b5:a6:57:02:90:0e:20: c4:70:42:48:42:c3:f2:31:5c:a9:cd:88:b2:cc:71: a0:eb:b8:a2:02:96:ba:7e:20:3d:88:1b:fa:d1:c2: a3:8f:48:82:33:5b:18:6b:db:53:e4:42:0e:0e:32: b5:2c:96:c0:f8:0f:3e:9f:94:0c:e5:75:f9:cb:24: f6:e6:c0:88:58:95:eb:4b:08:93:01:da:1c:7d:fe: 6f:2c:dd:5a:a0:35:a6:c4:b9:ce:eb:ac:84:26:13: f7:b3:f2:ba:fc:21:79:c6:a2:9a:25:42:a9:10:39: 82:a3:f9:2e:2b:ed:77:f3:7c:38:9e:52:d9:73:86: 95:42:39:f8:65:ac:b8:53:d6:76:80:1a:6c:0c:fb: be:f0:23:71:ed:3e:6f:9a:df:a2:50:74:8c:ed:82: ed:b8:74:51:6a:32:d8:70:a5:4b:68:0e:62:15:ae: 5e:64:af:7a:f4:72:b9:8a:79:51:07:b1:37:51:f4: 63:55:a4:31:19:f5:f9:fd:ae:20:f3:36:47:51:17: 45:39:09:fd:c3:5b:f2:9c:40:11:29:24:72:4a:13: fc:6d:fb:69:00:1b:c2:9a:38:6a:6f:73:3c:86:e0: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:7A:09:F1:E8:B7:28:EF:B9:91:6C:0C:A5:78:FE:75:13:30:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8e:4c:ee:bc:0e:81:f5:e4:9f:bd:a3:65:bf:2e:bc:1c:81: 26:79:08:9d:c7:06:ff:b0:e5:12:02:7b:00:f1:24:eb:d7:c3: 3c:de:cf:6d:57:98:ec:53:4b:29:36:ac:53:78:15:bc:41:ca: 69:11:6c:ab:45:65:6a:eb:16:00:3c:ee:e8:3b:04:93:44:ee: 2d:19:2e:7a:76:42:6b:a7:7c:07:52:25:0b:4f:44:a3:3b:9e: 77:9b:6b:e0:9a:78:08:d2:91:52:64:af:0c:5b:b2:be:74:1d: 49:f7:7d:3c:48:c8:4b:5c:3b:f8:3d:ff:43:5f:9b:e7:af:ae: 83:9f:72:a9:91:09:d0:75:a9:d6:7b:87:2e:d0:33:48:db:8c: 3d:8d:3e:58:86:56:ab:bc:be:66:d7:31:cc:42:52:34:2c:83: 3f:83:cb:1a:91:f6:9d:b8:20:39:16:7c:5f:92:2e:b3:6a:f3: 53:6e:b0:71:59:f8:d5:33:1e:cf:e9:f3:27:a4:14:a3:a2:83: 58:1e:ea:20:8a:ac:90:18:93:3c:5c:d4:eb:c4:64:20:bf:e7: 98:60:ae:e3:3d:74:56:b1:5a:b3:85:91:b6:67:89:3e:8f:6c: a0:47:41:be:96:c7:a3:78:39:44:5b:1d:cf:76:9b:48:dd:13: b5:23:f6:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8CQiVYNj3PYXI5LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YzUyNmVmOWItNGY5Yi00OWRjLThkMDAtZWE3YThjZjcwNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBaW6fWrAq29NyEmygRwnohN5w/EhbWmVwKQ DiDEcEJIQsPyMVypzYiyzHGg67iiApa6fiA9iBv60cKjj0iCM1sYa9tT5EIODjK1 LJbA+A8+n5QM5XX5yyT25sCIWJXrSwiTAdocff5vLN1aoDWmxLnO66yEJhP3s/K6 /CF5xqKaJUKpEDmCo/kuK+1383w4nlLZc4aVQjn4Zay4U9Z2gBpsDPu+8CNx7T5v mt+iUHSM7YLtuHRRajLYcKVLaA5iFa5eZK969HK5inlRB7E3UfRjVaQxGfX5/a4g 8zZHURdFOQn9w1vynEARKSRyShP8bftpABvCmjhqb3M8huB1WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5Yegnx6Lco77mRbAyleP51EzAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUjkzuvA6B9eSfvaNlvy68HIEmeQidxwb/sOUSAnsA8STr18M83s9t V5jsU0spNqxTeBW8QcppEWyrRWVq6xYAPO7oOwSTRO4tGS56dkJrp3wHUiULT0Sj O553m2vgmngI0pFSZK8MW7K+dB1J9308SMhLXDv4Pf9DX5vnr66Dn3KpkQnQdanW e4cu0DNI24w9jT5YhlarvL5m1zHMQlI0LIM/g8sakfaduCA5Fnxfki6zavNTbrBx WfjVMx7P6fMnpBSjooNYHuogiqyQGJM8XNTrxGQgv+eYYK7jPXRWsVqzhZG2Z4k+ j2ygR0G+lsejeDlEWx3PdptI3RO1I/bW -----END CERTIFICATE-----Generated at Thu Sep 24 11:05:10 2026 by rpki-client