$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json) Hash identifier: KJp1mvEKWTmNdPoc0LRzzUjYwKhcPymYuZunUKatSXg= Subject key identifier: 09:67:61:46:FE:4F:C7:6C:9E:B0:C7:35:11:B9:40:31:AA:AB:BE:47 Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Certificate serial: 010D0C9F4328584E8C8A4A151EB9F60DE676BF80 Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 399494 IP address blocks: 2604:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:4a:15:1e:b9:f6:0d:e6:76:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=da4d8217-6c22-4afe-9d4c-d544f9e8c5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:8c:73:17:3f:9d:ba:aa:e7:ff:50:b5:02: eb:0f:90:91:32:5a:44:01:74:ae:29:08:44:62:05: b6:43:d6:bb:35:94:78:5c:c2:a0:f6:79:85:04:b9: 35:05:4c:11:38:6d:42:18:e1:36:97:6d:72:ca:e1: 36:1f:f4:88:56:27:48:d0:0b:34:74:3f:27:29:52: c5:29:47:e0:50:c7:a3:47:01:24:6d:a0:25:27:50: 01:62:a5:39:8a:cd:8a:30:dd:78:0e:f8:95:14:ba: 49:b7:c1:1e:d4:e5:08:ba:1f:3f:7f:7b:48:87:95: c6:4c:9c:36:d2:f4:29:95:e8:8a:29:71:f6:c7:2c: bf:0e:e1:f5:49:7d:6d:15:a0:c2:70:71:1c:fa:3d: f8:9a:d6:eb:6c:57:7f:45:cd:fa:aa:cf:0c:38:28: 11:b8:0c:f8:f9:94:29:18:97:cf:a4:b2:db:b3:ec: 21:3e:f3:1f:cf:d7:78:6f:cb:d5:ce:be:d5:65:0e: 09:1c:28:74:40:de:96:32:0b:90:cd:96:52:64:9a: bd:56:11:64:a1:08:3c:5d:19:48:5d:48:57:ea:93: d8:84:31:7b:a9:4b:6e:af:e9:3b:81:3d:a2:28:7e: 25:61:04:e5:fb:b8:1f:bd:c7:4f:8d:b1:a1:72:56: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:61:46:FE:4F:C7:6C:9E:B0:C7:35:11:B9:40:31:AA:AB:BE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl X509v3 Authority Key Identifier: keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer sbgp-ipAddrBlock: critical IPv6: 2604:3b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:39:bf:54:e0:c4:44:5e:da:ef:3f:ec:d0:ed:03:e8:94: 9f:86:44:6d:fd:7f:50:af:bf:da:08:a9:c8:d9:f3:ae:64:bd: 73:0c:10:76:42:f1:b7:54:25:b9:40:5a:37:a5:d4:31:fa:c9: 48:cf:fe:90:23:b0:f2:54:1a:93:2c:25:c3:51:44:c2:d1:4e: 7f:1a:b3:e9:87:bd:dd:c9:48:ed:8a:ee:8b:74:04:46:b1:a0: 90:1a:34:43:e0:ed:d9:f0:7a:2d:ba:07:23:d7:29:b8:08:00: ed:91:72:17:d1:d9:1b:59:5f:4e:2b:55:d2:89:a6:aa:8d:d7: ed:19:a6:f0:41:7a:0b:6d:27:d4:c2:2d:58:a6:d8:57:1d:eb: a9:bf:ce:b1:6d:98:ac:c6:be:01:ab:14:c8:95:8a:ec:68:81: 85:5c:ea:c0:30:2c:b7:e4:a4:ea:eb:14:07:ef:36:32:4a:df: f0:4f:36:18:05:17:2b:c4:82:67:b6:97:bb:c7:93:cd:43:9b: a4:4e:1a:c9:c5:00:89:d1:1f:84:60:bd:b1:26:c0:e5:64:d0: 98:d1:25:f0:32:1a:33:d9:8e:da:18:4b:00:5f:c5:35:8d:7c: a8:ed:e8:65:95:89:93:a3:41:a1:b1:49:63:e9:17:95:5b:89: 46:a3:50:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6MikoVHrn2DeZ2v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYjM4OTctZmQxNC00OGVlLWFkODQtODEyYzQwOGNm NDZlMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk ZGE0ZDgyMTctNmMyMi00YWZlLTlkNGMtZDU0NGY5ZThjNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCuMcxc/nbqq5/9QtQLrD5CRMlpEAXSuKQhE YgW2Q9a7NZR4XMKg9nmFBLk1BUwROG1CGOE2l21yyuE2H/SIVidI0As0dD8nKVLF KUfgUMejRwEkbaAlJ1ABYqU5is2KMN14DviVFLpJt8Ee1OUIuh8/f3tIh5XGTJw2 0vQpleiKKXH2xyy/DuH1SX1tFaDCcHEc+j34mtbrbFd/Rc36qs8MOCgRuAz4+ZQp GJfPpLLbs+whPvMfz9d4b8vVzr7VZQ4JHCh0QN6WMguQzZZSZJq9VhFkoQg8XRlI XUhX6pPYhDF7qUtur+k7gT2iKH4lYQTl+7gfvcdPjbGhclYxKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAlnYUb+T8dsnrDHNRG5QDGqq75HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Zi Mzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJjNDA4Y2Y0NmUvNDEwYjc0NjctOGRjMS0z NDNkLWJlNjItNmVjYTU5NTQxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNmYjM4OTctZmQxNC00OGVlLWFk ODQtODEyYzQwOGNmNDZlL2MzZmIzODk3LWZkMTQtNDhlZS1hZDg0LTgxMmM0MDhj ZjQ2ZS5jcmwwHwYDVR0jBBgwFoAUgZwK5yjcYjVE9BCFuNcSWRpX3fYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2ZiMzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJj NDA4Y2Y0NmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgsjm/VODERF7a7z/s0O0D6JSfhkRt/X9Qr7/aCKnI2fOuZL1zDBB2 QvG3VCW5QFo3pdQx+slIz/6QI7DyVBqTLCXDUUTC0U5/GrPph73dyUjtiu6LdARG saCQGjRD4O3Z8Hotugcj1ym4CADtkXIX0dkbWV9OK1XSiaaqjdftGabwQXoLbSfU wi1YpthXHeupv86xbZisxr4BqxTIlYrsaIGFXOrAMCy35KTq6xQH7zYySt/wTzYY BRcrxIJntpe7x5PNQ5ukThrJxQCJ0R+EYL2xJsDlZNCY0SXwMhoz2Y7aGEsAX8U1 jXyo7ehllYmTo0GhsUlj6ReVW4lGo1BD -----END CERTIFICATE-----Generated at Sat Jul 25 02:05:08 2026 by rpki-client