$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa File: 54a4332a-b65d-3502-aaa9-76ed79433c4f.roa (raw, json) Hash identifier: DIBNdmgHXvpgHmMtwEwn4stVSzNBFH1Aq0mx+GuXQWY= Subject key identifier: F2:37:A4:0E:C7:FB:FF:0C:86:53:E5:0E:F0:97:D7:CC:FF:F2:13:51 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F5E62C544C4B44F82B7430BC0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 33724 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c5:44:c4:b4:4f:82:b7:43:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=1afcfd02-1b42-46e2-8b99-6c18a971f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:73:80:d6:03:e5:6d:8c:6f:cb:6d:d8:87: 6d:35:d7:17:1d:7d:59:2f:1a:67:ca:9a:79:97:02: c4:be:37:d7:10:3e:f2:96:96:6b:8c:e7:3d:ee:e9: 57:db:60:a1:e8:a1:02:30:dd:b9:52:06:fa:84:55: bd:b8:c5:3f:f1:95:f8:19:c4:9c:9e:32:7a:db:d0: 3b:58:e7:28:76:0a:3a:0d:c9:e4:7e:23:88:62:ce: 98:b5:e3:55:b5:23:61:89:f0:b4:21:f2:26:79:51: 88:26:29:9c:cb:47:80:f7:c9:c4:a5:00:46:66:a6: 15:47:e3:9b:2d:e4:69:43:7a:68:a0:bc:37:1d:1c: d7:ec:c9:8c:62:29:43:50:65:e2:de:77:90:f8:73: 75:32:67:34:4f:20:d3:25:72:4a:1a:c5:a1:df:7e: 51:d1:75:91:02:39:13:2b:ae:53:42:72:a2:b0:9b: cb:f3:8d:88:31:fe:9d:dc:18:bb:71:f7:4c:3a:9d: 6b:2e:e3:77:f7:56:59:26:48:60:8d:46:02:6c:46: c7:9c:91:9b:57:2b:5a:9f:28:98:d3:01:1c:a3:b5: cd:fa:cf:b5:77:8a:c4:da:91:96:cb:79:47:0e:4c: 09:6a:0e:b6:e9:89:e9:c0:14:81:50:71:ea:9f:50: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:A4:0E:C7:FB:FF:0C:86:53:E5:0E:F0:97:D7:CC:FF:F2:13:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:78:57:9b:c5:10:3d:95:0a:fd:d2:b9:f8:bb:bb:7d:71:a7: f5:94:d9:25:b1:25:e8:14:88:9c:b7:70:8c:18:c9:a8:89:07: ea:39:cf:b0:11:b0:65:77:0f:23:e7:9f:46:79:7b:d8:97:9e: 5c:2a:8d:d4:11:17:f8:c1:97:a7:17:7d:86:26:d9:45:be:83: b1:db:40:ef:a4:dd:0a:4e:b6:5b:4b:49:df:af:0f:28:fc:aa: 52:dd:b0:d3:5f:f2:29:ca:4d:96:6f:31:ea:24:6c:9b:f4:53: 12:00:f9:55:0a:b9:b6:42:77:56:33:07:e7:ce:76:a0:63:b2: fc:f9:74:3d:74:f7:6b:04:18:53:3c:ed:7e:5b:7c:50:d9:b4: 26:f4:4c:75:61:c3:72:e4:76:99:fb:db:36:41:36:0e:2e:f6: 66:07:e6:21:c7:35:a0:0c:1e:81:f8:e1:64:b6:c7:39:82:66: 97:f7:5c:be:65:f0:7e:9e:44:d3:a2:1b:d8:93:6f:00:9a:d9: 0a:21:16:b4:00:92:3f:fd:59:61:3f:af:9a:f0:e7:8b:77:94: a4:8a:ff:2e:24:0b:a6:20:84:92:a2:46:d3:fe:26:46:07:bf: 7d:d6:76:0c:e8:b8:a8:d1:d8:31:ee:6f:af:c4:ad:94:97:9f: 9b:a2:09:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9eYsVExLRPgrdDC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MWFmY2ZkMDItMWI0Mi00NmUyLThiOTktNmMxOGE5NzFmNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ1zgNYD5W2Mb8tt2IdtNdcXHX1ZLxpnypp5 lwLEvjfXED7ylpZrjOc97ulX22Ch6KECMN25Ugb6hFW9uMU/8ZX4GcScnjJ629A7 WOcodgo6DcnkfiOIYs6YteNVtSNhifC0IfImeVGIJimcy0eA98nEpQBGZqYVR+Ob LeRpQ3pooLw3HRzX7MmMYilDUGXi3neQ+HN1Mmc0TyDTJXJKGsWh335R0XWRAjkT K65TQnKisJvL842IMf6d3Bi7cfdMOp1rLuN391ZZJkhgjUYCbEbHnJGbVytanyiY 0wEco7XN+s+1d4rE2pGWy3lHDkwJag626YnpwBSBUHHqn1ChOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPI3pA7H+/8MhlPlDvCX18z/8hNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNTRhNDMzMmEtYjY1ZC0z NTAyLWFhYTktNzZlZDc5NDMzYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNeFebxRA9lQr90rn4u7t9caf1lNklsSXoFIict3CMGMmoiQfqOc+w EbBldw8j559GeXvYl55cKo3UERf4wZenF32GJtlFvoOx20DvpN0KTrZbS0nfrw8o /KpS3bDTX/Ipyk2WbzHqJGyb9FMSAPlVCrm2QndWMwfnznagY7L8+XQ9dPdrBBhT PO1+W3xQ2bQm9Ex1YcNy5HaZ+9s2QTYOLvZmB+YhxzWgDB6B+OFktsc5gmaX91y+ ZfB+nkTTohvYk28AmtkKIRa0AJI//VlhP6+a8OeLd5Skiv8uJAumIISSokbT/iZG B7991nYM6Lio0dgx7m+vxK2Ul5+bogkH -----END CERTIFICATE-----Generated at Tue Oct 13 09:13:33 2026 by rpki-client