$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa File: 3a40369b-9e90-3db3-b866-f8235d484158.roa (raw, json) Hash identifier: A81a/AFPDX6DlQRIkpd0IjRJZ51JCe7iNSU3sfd55T8= Subject key identifier: 3F:C7:04:70:F8:F6:D2:F3:BA:8A:E0:27:33:5D:4A:AE:D5:8A:87:8C Certificate issuer: /CN=1d65e3c3-96e5-425b-b926-48d278136d48 Certificate serial: 010D0C9F4328584EC7A1D4B73700EC509EBDE800 Authority key identifier: B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 10821 IP address blocks: 2604:7040::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d4:b7:37:00:ec:50:9e:bd:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65e3c3-96e5-425b-b926-48d278136d48 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=8bd87cab-a85a-484c-9214-9bed8c903289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:0e:84:ab:22:1d:a4:14:db:d2:ba:b0:83: b6:17:de:d9:e5:1a:4c:59:c1:4e:91:aa:52:19:2b: f6:7e:e0:9f:77:35:11:59:22:67:54:ae:15:ca:a7: 04:7f:03:44:d4:85:6d:06:c9:6a:70:a8:bf:00:9d: 7d:06:8a:b0:1a:50:bd:82:a0:7e:34:ce:29:7c:dc: 73:8f:df:55:26:84:47:46:56:d4:67:37:2d:0b:c2: 82:59:9b:1c:03:b8:21:15:ef:20:f6:59:ba:55:eb: eb:d7:62:8b:49:63:b6:96:23:4b:fd:d0:f7:29:b8: 8c:f6:42:f3:7c:72:cf:9e:64:87:0e:b2:c1:5b:dc: 6c:6d:28:61:7b:20:51:bd:05:75:a1:66:1d:dd:73: 26:33:89:db:84:18:cc:82:5b:f2:ef:5b:af:b7:87: d6:0e:58:50:a6:b8:50:df:67:eb:53:37:9d:e2:89: 3a:3f:e3:64:43:57:af:20:5c:81:a0:c6:f3:58:cd: ba:30:25:c3:f0:1c:03:3c:3d:43:2f:d1:f6:b6:f8: fb:63:a4:44:4f:dc:6e:c3:47:d4:df:82:06:31:6e: a2:32:15:5d:ef:af:64:2e:86:b2:30:67:21:56:40: 4a:85:5c:df:62:0d:98:a5:fc:bc:9f:32:e4:f8:e5: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C7:04:70:F8:F6:D2:F3:BA:8A:E0:27:33:5D:4A:AE:D5:8A:87:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/3a40369b-9e90-3db3-b866-f8235d484158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48/1d65e3c3-96e5-425b-b926-48d278136d48.crl X509v3 Authority Key Identifier: keyid:B6:29:12:87:2E:85:A6:50:6E:26:47:85:35:5D:A8:64:59:CC:81:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1d65e3c3-96e5-425b-b926-48d278136d48.cer sbgp-ipAddrBlock: critical IPv6: 2604:7040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:46:17:9b:3f:af:fd:83:e2:92:ef:1b:4e:0d:fa:3f:41:ea: 63:88:a5:2f:be:8a:3a:7f:df:f0:12:16:72:23:a3:d6:ab:39: 15:1e:b1:97:ca:3b:57:7d:53:9f:0d:22:d8:b1:b9:43:e9:51: be:01:19:98:36:bd:39:6c:a6:4f:b5:d6:de:5d:3d:f3:cd:4d: e0:d6:42:c5:79:b1:af:b8:9b:d2:16:cb:a5:23:ed:31:03:c0: ad:28:cf:a5:36:8c:c2:0d:ff:f8:df:0c:34:55:c2:6a:fc:2d: 26:7c:40:d6:64:63:53:3e:d4:63:c3:67:6a:aa:9f:5a:17:5e: 70:42:1e:14:f3:a1:45:38:d4:ad:96:b1:86:e2:78:4e:7f:9b: 9c:0e:f8:d4:a5:43:3d:19:fa:f3:74:43:32:55:5b:58:46:5e: c6:2b:23:39:59:a4:7f:85:24:01:5e:b5:54:16:d5:04:f8:8d: 35:e8:09:cc:d6:15:39:50:41:ae:17:fc:30:e2:00:29:69:a8: 1b:f5:5d:18:ff:e7:57:7b:9f:23:ff:2f:d3:b1:47:de:71:31: 3d:34:54:f4:4b:57:eb:bf:21:af:81:ef:6e:55:3b:e1:ee:48: 3c:d7:e8:72:f0:eb:bb:bf:10:53:db:47:91:33:3b:de:a7:f4: b8:ce:83:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7HodS3NwDsUJ696AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2NWUzYzMtOTZlNS00MjViLWI5MjYtNDhkMjc4MTM2 ZDQ4MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGJkODdjYWItYTg1YS00ODRjLTkyMTQtOWJlZDhjOTAzMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjAOhKsiHaQU29K6sIO2F97Z5RpMWcFOkapS GSv2fuCfdzURWSJnVK4VyqcEfwNE1IVtBslqcKi/AJ19BoqwGlC9gqB+NM4pfNxz j99VJoRHRlbUZzctC8KCWZscA7ghFe8g9lm6Vevr12KLSWO2liNL/dD3KbiM9kLz fHLPnmSHDrLBW9xsbShheyBRvQV1oWYd3XMmM4nbhBjMglvy71uvt4fWDlhQprhQ 32frUzed4ok6P+NkQ1evIFyBoMbzWM26MCXD8BwDPD1DL9H2tvj7Y6RET9xuw0fU 34IGMW6iMhVd769kLoayMGchVkBKhVzfYg2Ypfy8nzLk+OXm2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/HBHD49tLzuorgJzNdSq7VioeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZDY1 ZTNjMy05NmU1LTQyNWItYjkyNi00OGQyNzgxMzZkNDgvM2E0MDM2OWItOWU5MC0z ZGIzLWI4NjYtZjgyMzVkNDg0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWQ2NWUzYzMtOTZlNS00MjViLWI5 MjYtNDhkMjc4MTM2ZDQ4LzFkNjVlM2MzLTk2ZTUtNDI1Yi1iOTI2LTQ4ZDI3ODEz NmQ0OC5jcmwwHwYDVR0jBBgwFoAUtikShy6FplBuJkeFNV2oZFnMgXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZDY1ZTNjMy05NmU1LTQyNWItYjkyNi00OGQy NzgxMzZkNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrRhebP6/9g+KS7xtODfo/QepjiKUvvoo6f9/wEhZyI6PWqzkVHrGX yjtXfVOfDSLYsblD6VG+ARmYNr05bKZPtdbeXT3zzU3g1kLFebGvuJvSFsulI+0x A8CtKM+lNozCDf/43ww0VcJq/C0mfEDWZGNTPtRjw2dqqp9aF15wQh4U86FFONSt lrGG4nhOf5ucDvjUpUM9GfrzdEMyVVtYRl7GKyM5WaR/hSQBXrVUFtUE+I016AnM 1hU5UEGuF/ww4gApaagb9V0Y/+dXe58j/y/TsUfecTE9NFT0S1frvyGvge9uVTvh 7kg81+hy8Ou7vxBT20eRMzvep/S4zoPS -----END CERTIFICATE-----Generated at Fri Sep 18 18:39:04 2026 by rpki-client