$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa File: 497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa (raw, json) Hash identifier: gBhjLt95TafXnNgvIrzft5hbUf1hbTnLS14RpEpdM6g= Subject key identifier: BF:35:7A:27:D8:7A:61:29:D9:F5:F8:72:14:CE:D2:1B:48:E2:3B:4F Certificate issuer: /CN=865141a9-b215-47ce-b5f4-0c09bdeaba89 Certificate serial: 010D0C9F4328584EA787FF96DE8D480ED0F78F40 Authority key identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20473 IP address blocks: 2604:28e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:ff:96:de:8d:48:0e:d0:f7:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865141a9-b215-47ce-b5f4-0c09bdeaba89 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=292415b2-8115-43b0-9609-525daf4053e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:1f:80:1a:e5:78:11:2a:11:c2:2c:31:15: b8:42:ee:3f:c4:3e:b4:71:5c:6e:24:a6:c6:0f:10: 46:8d:dc:eb:15:0d:7d:ec:a7:73:01:d6:fc:75:88: ab:7e:ea:eb:69:4f:46:1c:35:9e:43:e6:f5:f2:fa: da:63:da:96:29:ea:e3:ce:21:43:9f:e7:80:1b:e2: b6:02:29:63:f6:05:98:ef:54:b6:2c:ec:b2:b3:9f: 88:16:a4:38:8b:be:7c:c8:bc:e6:40:6c:e1:ee:d5: 44:de:9f:dc:c7:6a:1c:e0:98:47:5d:51:82:16:8b: 40:81:0b:eb:63:86:d3:be:10:6d:d3:7c:ac:91:86: d9:c5:c7:85:76:f4:99:aa:25:58:d3:43:c9:ea:fc: 47:f8:98:f7:01:b1:60:aa:6e:e3:d1:26:92:a9:f7: ee:04:1e:98:33:90:a9:8c:0f:3e:bc:4a:38:12:8c: 56:83:64:ce:be:87:a4:52:53:85:45:1d:b2:95:1f: af:aa:62:d4:95:54:93:30:2f:b0:eb:86:7b:6f:b8: 6b:13:9f:f2:21:59:c6:e2:0e:62:f2:f3:18:13:25: c6:a9:16:e9:f7:b3:6d:81:bd:ae:be:a7:07:98:cf: 50:be:19:81:4b:7e:8e:50:12:87:b7:af:89:9a:5e: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:35:7A:27:D8:7A:61:29:D9:F5:F8:72:14:CE:D2:1B:48:E2:3B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.crl X509v3 Authority Key Identifier: keyid:EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer sbgp-ipAddrBlock: critical IPv6: 2604:28e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a7:80:b3:f1:24:4f:e8:55:73:eb:5b:02:74:28:28:25:ea: 85:c4:cc:6b:be:e8:ed:e6:df:26:34:a7:79:e6:98:d2:14:c7: d4:fc:c5:8c:92:2c:ac:16:fa:94:56:9a:e2:b1:4a:f8:0b:22: e1:b7:27:0a:11:dc:09:b0:19:48:41:5a:c2:8f:28:f8:0d:4c: 7d:79:6c:65:98:55:35:f7:bc:6a:93:0d:4e:6a:f3:bc:db:4e: d3:07:d0:67:55:14:55:fa:3d:46:10:29:4c:1c:73:76:94:f6: 74:2d:63:a6:c1:a3:f8:2b:7d:c9:48:45:bb:5a:f0:be:05:4d: 2b:39:e3:71:81:9e:99:3c:0f:09:fb:56:31:a6:d0:88:54:98: 60:f2:0f:49:e0:3e:b3:b8:d0:a5:3a:11:57:ac:40:ff:dc:25: 28:52:5a:f5:1c:77:f6:92:c0:09:fb:35:20:70:9f:19:7e:c2: ea:81:b9:64:15:53:fd:a8:66:ce:87:11:d5:7c:ee:17:8a:ce: 4a:36:71:0f:89:5c:72:50:12:9f:f2:ff:a7:ff:54:67:ad:61: c7:b4:88:48:22:23:11:f9:fc:b9:cd:33:d2:a4:e8:50:e0:d1: c9:f0:47:14:73:21:02:d5:90:6e:d8:ca:fd:63:49:a7:cc:bf: dc:35:4b:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nh/+W3o1IDtD3j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY1MTQxYTktYjIxNS00N2NlLWI1ZjQtMGMwOWJkZWFi YTg5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjkyNDE1YjItODExNS00M2IwLTk2MDktNTI1ZGFmNDA1M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrQfgBrleBEqEcIsMRW4Qu4/xD60cVxuJKbG DxBGjdzrFQ197KdzAdb8dYirfurraU9GHDWeQ+b18vraY9qWKerjziFDn+eAG+K2 Ailj9gWY71S2LOyys5+IFqQ4i758yLzmQGzh7tVE3p/cx2oc4JhHXVGCFotAgQvr Y4bTvhBt03yskYbZxceFdvSZqiVY00PJ6vxH+Jj3AbFgqm7j0SaSqffuBB6YM5Cp jA8+vEo4EoxWg2TOvoekUlOFRR2ylR+vqmLUlVSTMC+w64Z7b7hrE5/yIVnG4g5i 8vMYEyXGqRbp97Ntgb2uvqcHmM9QvhmBS36OUBKHt6+Jml6V0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL81eifYemEp2fX4chTO0htI4jtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NjUx NDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRlYWJhODkvNDk3ODc0ZGUtOWQyOC0z OWUwLThmZmUtNjljYmEwZGNmNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODY1MTQxYTktYjIxNS00N2NlLWI1 ZjQtMGMwOWJkZWFiYTg5Lzg2NTE0MWE5LWIyMTUtNDdjZS1iNWY0LTBjMDliZGVh YmE4OS5jcmwwHwYDVR0jBBgwFoAU7Puem6n4/4RzoisBJmkyqvJNZ+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5 YmRlYWJhODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQo4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAep4Cz8SRP6FVz61sCdCgoJeqFxMxrvujt5t8mNKd55pjSFMfU/MWM kiysFvqUVprisUr4CyLhtycKEdwJsBlIQVrCjyj4DUx9eWxlmFU197xqkw1OavO8 207TB9BnVRRV+j1GEClMHHN2lPZ0LWOmwaP4K33JSEW7WvC+BU0rOeNxgZ6ZPA8J +1YxptCIVJhg8g9J4D6zuNClOhFXrED/3CUoUlr1HHf2ksAJ+zUgcJ8ZfsLqgblk FVP9qGbOhxHVfO4Xis5KNnEPiVxyUBKf8v+n/1RnrWHHtIhIIiMR+fy5zTPSpOhQ 4NHJ8EcUcyEC1ZBu2Mr9Y0mnzL/cNUuM -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:59 2026 by rpki-client