$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa File: f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa (raw, json) Hash identifier: 7CfRVPQ82eS7NKssfJmjdaPdd2Q8mO2QrdehlD74zcc= Subject key identifier: E8:48:2A:0D:67:43:9F:FF:85:3E:0C:2B:15:B1:82:3F:FA:66:2D:9E Certificate issuer: /CN=9e34b68f-7f51-4c55-942a-9eae39c2faa2 Certificate serial: 010D0C9F4328584EAD1C6D7A1584E42AF82F3DF0 Authority key identifier: FF:2A:5A:0F:2A:02:AE:AD:C9:A7:35:A1:45:29:FD:CA:44:A6:DC:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 53873 IP address blocks: 2604:520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:6d:7a:15:84:e4:2a:f8:2f:3d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b68f-7f51-4c55-942a-9eae39c2faa2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=f9d9ea96-4910-4c42-8f35-2471125b3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:1b:09:f7:ab:22:34:e2:d2:68:bd:81:27: 2c:e4:28:3b:94:b8:2c:50:71:20:5e:e0:53:c8:6c: 19:87:57:c1:cb:97:8a:3a:8c:79:bf:b4:e5:db:ba: 59:60:52:10:1f:d3:81:7e:b1:39:ab:9d:e0:58:7c: 16:6b:66:50:57:83:44:03:d5:53:d9:6f:95:e1:86: 63:01:2a:1b:8d:60:d7:bb:0f:ed:b7:ed:00:9a:bb: b0:b6:16:52:a7:8e:76:fc:0f:84:3a:30:43:c5:51: 74:db:10:9d:44:69:5e:01:19:06:b6:42:46:2e:23: ff:39:4f:a8:37:2f:4a:ae:b1:84:fb:63:c5:45:34: 0b:e0:88:9e:6b:d2:ff:18:f0:f6:bc:fc:2a:b4:55: 44:20:4e:95:30:ef:57:00:f3:a7:cb:05:1e:31:2c: 2d:55:92:78:cc:23:cc:b3:82:1f:c4:45:96:13:b3: a2:61:9b:1f:9a:9c:79:79:4b:4f:a0:66:43:8e:fb: 90:2a:0c:13:db:ab:0b:b8:be:d8:c6:b2:48:72:26: b4:5b:54:e2:70:00:48:b0:17:15:a7:6d:3d:c2:4b: 12:24:5c:94:1f:20:a4:03:99:ea:8f:9c:ac:40:e8: 49:f3:b6:31:26:e6:32:2a:75:22:41:d7:f3:2b:4d: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:2A:0D:67:43:9F:FF:85:3E:0C:2B:15:B1:82:3F:FA:66:2D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.crl X509v3 Authority Key Identifier: keyid:FF:2A:5A:0F:2A:02:AE:AD:C9:A7:35:A1:45:29:FD:CA:44:A6:DC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer sbgp-ipAddrBlock: critical IPv6: 2604:520::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0e:38:91:d7:2c:20:c1:32:ed:c2:f5:78:f1:75:a1:cf:c8: b1:96:49:c8:6f:dc:d0:db:ae:49:76:7b:27:9b:16:be:7a:fa: e3:5d:8b:0f:cd:a6:a8:da:bf:8c:e2:a7:44:c1:a8:48:b5:05: 90:77:71:f7:9b:2f:8a:a1:86:c5:36:70:fe:cd:b2:54:b3:74: 3c:ab:0a:93:52:81:74:1f:d5:75:41:7c:07:c8:48:4e:b1:90: 5f:b6:3c:76:87:8d:e2:a3:9c:aa:f8:4f:61:e8:d5:a7:2e:a9: b9:3d:cb:c6:9f:28:ca:27:59:9b:4b:63:c4:4b:1d:98:96:bf: 42:86:99:77:bc:51:5d:9d:2a:df:7c:31:2f:94:2f:20:27:30: c5:26:d1:b9:0a:51:b7:5e:c8:e7:19:f4:f7:f2:e8:77:a9:be: b2:5e:53:85:a5:11:10:e4:37:09:6c:cf:e7:86:a5:01:2c:12: be:32:0c:89:04:1e:95:6f:82:6c:a5:bb:6a:a2:76:3d:b5:30: 16:b6:47:ea:d8:60:d6:21:35:9a:a7:3d:d1:b5:a2:26:60:91: 16:49:74:bc:01:d2:73:10:bf:ff:06:b3:d2:be:33:c9:e0:fc: 7f:23:e0:95:d4:87:b5:c9:18:36:e3:c8:e1:a7:86:fb:f8:d2: ce:27:9d:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6tHG16FYTkKvgvPfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNGI2OGYtN2Y1MS00YzU1LTk0MmEtOWVhZTM5YzJm YWEyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZjlkOWVhOTYtNDkxMC00YzQyLThmMzUtMjQ3MTEyNWIzZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsgbCferIjTi0mi9gScs5Cg7lLgsUHEgXuBT yGwZh1fBy5eKOox5v7Tl27pZYFIQH9OBfrE5q53gWHwWa2ZQV4NEA9VT2W+V4YZj ASobjWDXuw/tt+0AmruwthZSp452/A+EOjBDxVF02xCdRGleARkGtkJGLiP/OU+o Ny9KrrGE+2PFRTQL4Iiea9L/GPD2vPwqtFVEIE6VMO9XAPOnywUeMSwtVZJ4zCPM s4IfxEWWE7OiYZsfmpx5eUtPoGZDjvuQKgwT26sLuL7YxrJIcia0W1TicABIsBcV p209wksSJFyUHyCkA5nqj5ysQOhJ87YxJuYyKnUiQdfzK02yGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOhIKg1nQ5//hT4MKxWxgj/6Zi2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZTM0 YjY4Zi03ZjUxLTRjNTUtOTQyYS05ZWFlMzljMmZhYTIvZjFkYWZlYWYtYmQzZC0z NmJmLWFkNjItNmE2Zjk3YmRmNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWUzNGI2OGYtN2Y1MS00YzU1LTk0 MmEtOWVhZTM5YzJmYWEyLzllMzRiNjhmLTdmNTEtNGM1NS05NDJhLTllYWUzOWMy ZmFhMi5jcmwwHwYDVR0jBBgwFoAU/ypaDyoCrq3JpzWhRSn9ykSm3HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZTM0YjY4Zi03ZjUxLTRjNTUtOTQyYS05ZWFl MzljMmZhYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvDjiR1ywgwTLtwvV48XWhz8ixlknIb9zQ265Jdnsnmxa+evrjXYsP zaao2r+M4qdEwahItQWQd3H3my+KoYbFNnD+zbJUs3Q8qwqTUoF0H9V1QXwHyEhO sZBftjx2h43io5yq+E9h6NWnLqm5PcvGnyjKJ1mbS2PESx2Ylr9Chpl3vFFdnSrf fDEvlC8gJzDFJtG5ClG3XsjnGfT38uh3qb6yXlOFpREQ5DcJbM/nhqUBLBK+MgyJ BB6Vb4JspbtqonY9tTAWtkfq2GDWITWapz3RtaImYJEWSXS8AdJzEL//BrPSvjPJ 4Px/I+CV1Ie1yRg248jhp4b7+NLOJ53n -----END CERTIFICATE-----Generated at Sat Sep 5 06:21:39 2026 by rpki-client