$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: Y7ofKRV1R24AE7x2cc9a1HY3ZVPxBpq6GbB+uroMmd4= Subject key identifier: AE:21:58:F8:4B:68:81:D4:E9:2E:3D:D9:8F:91:E9:F6:32:54:A1:F8 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584D93254384C9837FEFEBA31400 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:43:84:c9:83:7f:ef:eb:a3:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=c94e2248-752d-404e-b520-e2b53adcc34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:34:42:37:f7:46:ef:b2:40:81:50:e1:9e: b9:76:0f:67:e3:1e:9a:d1:45:d6:af:da:98:43:28: 11:bc:25:7c:ba:6b:20:8a:33:a3:2d:e2:37:28:8c: 6c:8a:5f:44:f6:9d:ec:ed:47:97:c1:45:0b:2b:9b: 6b:f9:c6:2d:27:20:df:6a:c7:85:88:65:fb:37:55: 3c:5f:39:e8:b2:89:50:c9:4f:9e:21:25:3f:18:f3: 93:b8:a9:32:3d:ec:9c:87:62:c2:80:a8:e7:92:a4: a0:ab:08:ef:b8:d6:b0:b2:07:44:8e:75:7c:51:90: 4b:48:53:f6:e4:96:24:10:79:09:cf:68:d3:3f:cf: 2a:1a:f8:ed:76:12:2b:8a:1a:a2:79:25:80:4d:f9: c0:70:20:51:f7:ad:2e:f6:95:78:93:56:40:e1:e2: 4d:c1:7a:6d:6b:d3:de:60:89:e5:de:1c:c7:8f:3c: 87:73:e9:9e:a7:a2:d5:8d:44:8b:da:29:d4:21:91: 13:cc:be:5b:ae:18:61:a7:b1:67:8e:7d:86:7f:ac: 8b:bd:13:e8:72:bb:7d:1b:cb:e4:f5:40:9d:de:5d: 97:70:4b:61:55:82:e8:6c:9c:cc:7d:f5:9a:8d:bd: af:4d:23:f8:98:a8:7d:f8:f6:05:c3:c9:67:73:a9: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:58:F8:4B:68:81:D4:E9:2E:3D:D9:8F:91:E9:F6:32:54:A1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:d9:77:85:e6:14:1f:f2:39:2b:d1:6e:78:65:06:7c:1b:b0: 2c:b8:56:4f:2e:8a:ba:94:9e:52:e1:41:5f:06:3c:ee:83:19: 3f:17:ff:df:c2:70:60:d6:c4:9d:1d:59:db:a1:05:18:48:f3: 47:bf:ab:3b:b1:83:12:6a:35:d3:8f:00:2a:2c:fa:0a:c7:bc: 56:d8:b5:59:df:df:01:53:17:c6:d3:30:4c:12:06:cd:9c:80: 2f:b2:ee:fe:ec:40:65:7f:89:37:fe:18:29:2e:8e:e5:48:92: 71:77:0a:d4:28:56:1f:c8:bf:cd:4f:26:6e:56:f3:46:a0:80: d9:50:ad:92:44:f6:3e:92:cd:48:d3:2a:e5:66:95:b9:f8:ef: cb:b1:b0:de:81:14:32:27:c3:4a:5d:5e:59:94:12:2c:53:33: 8f:1d:12:bd:60:13:ea:9a:4c:e3:59:17:b5:6f:2f:4f:29:fd: ee:81:3f:90:50:c2:8c:44:8c:6c:46:ad:0e:ee:b8:47:1a:e1: 2e:b0:8b:66:18:4e:7b:e9:3b:0f:b6:f8:d2:62:de:32:e8:02: 47:8b:5c:bf:f4:a8:73:47:3d:c4:11:63:e5:bd:c9:15:b0:de: 94:e8:c5:8d:d3:89:82:c7:9d:7f:84:89:26:a8:7c:65:97:78: 34:a7:8b:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2TJUOEyYN/7+ujFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk Yzk0ZTIyNDgtNzUyZC00MDRlLWI1MjAtZTJiNTNhZGNjMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslg0Qjf3Ru+yQIFQ4Z65dg9n4x6a0UXWr9qY QygRvCV8umsgijOjLeI3KIxsil9E9p3s7UeXwUULK5tr+cYtJyDfaseFiGX7N1U8 XznosolQyU+eISU/GPOTuKkyPeych2LCgKjnkqSgqwjvuNawsgdEjnV8UZBLSFP2 5JYkEHkJz2jTP88qGvjtdhIrihqieSWATfnAcCBR960u9pV4k1ZA4eJNwXpta9Pe YInl3hzHjzyHc+mep6LVjUSL2inUIZETzL5brhhhp7Fnjn2Gf6yLvRPocrt9G8vk 9UCd3l2XcEthVYLobJzMffWajb2vTSP4mKh9+PYFw8lnc6nH7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4hWPhLaIHU6S492Y+R6fYyVKH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDe2XeF5hQf8jkr0W54ZQZ8G7AsuFZPLoq6lJ5S4UFfBjzugxk/F//f wnBg1sSdHVnboQUYSPNHv6s7sYMSajXTjwAqLPoKx7xW2LVZ398BUxfG0zBMEgbN nIAvsu7+7EBlf4k3/hgpLo7lSJJxdwrUKFYfyL/NTyZuVvNGoIDZUK2SRPY+ks1I 0yrlZpW5+O/LsbDegRQyJ8NKXV5ZlBIsUzOPHRK9YBPqmkzjWRe1by9PKf3ugT+Q UMKMRIxsRq0O7rhHGuEusItmGE576TsPtvjSYt4y6AJHi1y/9KhzRz3EEWPlvckV sN6U6MWN04mCx51/hIkmqHxll3g0p4sg -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:35 2026 by rpki-client