$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa File: 17ab3a7c-33b1-34e1-940a-935a63494ab3.roa (raw, json) Hash identifier: grXvNlRRUViKY5IXdYyx+KcvQtAOoByA3J/K67qKMvI= Subject key identifier: B2:1A:2B:E1:BC:36:DE:61:E7:B6:85:6A:78:54:CF:27:42:0E:57:55 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E54B49774B0F9837E817B3D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 0 IP address blocks: 2607:ff00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:97:74:b0:f9:83:7e:81:7b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=e87c78cf-79ff-479a-a08d-15f034a003ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:99:2e:32:db:f4:dc:07:12:51:62:3d:19: a9:40:84:34:09:34:d2:e4:29:f5:24:f3:e0:d0:06: 7c:da:c8:80:1d:ac:ce:25:36:c4:31:5a:f5:31:92: d5:0b:f2:db:ec:06:c8:2c:ec:a5:9d:94:5a:35:0d: 81:d4:a3:d3:33:e7:e8:4f:d9:2e:75:db:e9:65:7e: 0e:a7:1d:c2:a2:a1:c8:05:a3:07:19:48:ac:55:ba: e1:88:08:fd:13:cf:dc:da:fe:51:a3:51:a9:c9:b9: 6d:a9:f9:1b:04:cc:88:45:03:cd:15:b3:51:b9:3d: dc:6f:48:7e:ae:1b:05:6d:e5:9d:cb:89:e5:ca:86: f0:69:c1:14:27:41:eb:87:52:f1:b5:4f:7e:b6:f7: ed:66:28:be:f2:f6:74:77:46:c2:0c:ef:7d:3f:8a: 86:4c:69:a1:20:99:5d:88:fd:1f:64:82:72:35:3a: 3a:89:3c:5d:cd:d9:b5:38:d6:6c:72:98:54:9b:ac: e9:7e:e4:89:e5:26:72:8c:e8:61:94:9f:57:e7:92: 93:ec:19:59:0d:0e:a3:b5:65:2c:6a:90:dc:6f:23: 35:fc:87:76:e5:3e:2d:0e:c4:0a:41:d4:9b:3c:f3: 8c:a9:c2:48:de:a1:5e:75:0f:a0:aa:82:8a:2e:b3: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1A:2B:E1:BC:36:DE:61:E7:B6:85:6A:78:54:CF:27:42:0E:57:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv6: 2607:ff00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:00:7b:b9:27:e2:49:19:c3:fa:5e:25:68:dd:33:9b:23:eb: bc:64:32:86:cb:44:12:f5:92:60:94:de:1c:ae:5c:d4:56:23: f5:f5:73:50:89:2d:77:0b:2e:f2:8f:b5:c4:fd:3a:24:6e:68: e1:bc:38:9d:80:3c:1f:89:ee:d9:74:fb:3e:94:c1:e4:cd:a3: e4:0b:9c:82:8f:7d:fe:0c:62:30:07:60:25:72:8b:5e:af:f2: 16:9e:a3:67:3c:5f:a4:11:89:56:f9:3b:b3:3c:93:71:38:70: 2d:55:e8:91:eb:b2:97:34:5e:50:50:72:f4:40:0f:37:72:3e: 50:6c:b6:ec:9e:30:f6:71:e0:0a:dc:f8:2b:b3:78:41:33:b3: ec:e2:a4:09:b8:b5:68:84:c9:97:e1:5b:e4:41:62:a7:73:06: 4f:29:35:17:d0:72:a0:ed:47:03:7c:fd:9d:b3:6f:4a:80:75: 1b:d1:d8:9f:c6:0d:ef:62:56:0c:a6:8c:60:6b:63:05:8c:ca: fd:02:17:eb:1c:8f:ed:cb:df:6e:52:3f:60:7f:ad:18:81:d3: 56:a8:d3:05:7c:75:bd:af:c2:12:d8:5f:ce:cb:82:bf:32:e5: 92:e1:cd:d9:46:0b:55:88:ed:ad:f4:61:05:25:3c:6c:78:72: ff:6d:2d:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5UtJd0sPmDfoF7PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk ZTg3Yzc4Y2YtNzlmZi00NzlhLWEwOGQtMTVmMDM0YTAwM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif2ZLjLb9NwHElFiPRmpQIQ0CTTS5Cn1JPPg 0AZ82siAHazOJTbEMVr1MZLVC/Lb7AbILOylnZRaNQ2B1KPTM+foT9kuddvpZX4O px3CoqHIBaMHGUisVbrhiAj9E8/c2v5Ro1GpybltqfkbBMyIRQPNFbNRuT3cb0h+ rhsFbeWdy4nlyobwacEUJ0Hrh1LxtU9+tvftZii+8vZ0d0bCDO99P4qGTGmhIJld iP0fZIJyNTo6iTxdzdm1ONZscphUm6zpfuSJ5SZyjOhhlJ9X55KT7BlZDQ6jtWUs apDcbyM1/Id25T4tDsQKQdSbPPOMqcJI3qFedQ+gqoKKLrMAVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLIaK+G8Nt5h57aFanhUzydCDldVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTdhYjNhN2MtMzNiMS0z NGUxLTk0MGEtOTM1YTYzNDk0YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf/ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4AHu5J+JJGcP6XiVo3TObI+u8ZDKGy0QS9ZJglN4crlzUViP19XNQ iS13Cy7yj7XE/TokbmjhvDidgDwfie7ZdPs+lMHkzaPkC5yCj33+DGIwB2Alcote r/IWnqNnPF+kEYlW+TuzPJNxOHAtVeiR67KXNF5QUHL0QA83cj5QbLbsnjD2ceAK 3Pgrs3hBM7Ps4qQJuLVohMmX4VvkQWKncwZPKTUX0HKg7UcDfP2ds29KgHUb0dif xg3vYlYMpoxga2MFjMr9AhfrHI/ty99uUj9gf60YgdNWqNMFfHW9r8IS2F/Oy4K/ MuWS4c3ZRgtViO2t9GEFJTxseHL/bS2k -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:32 2026 by rpki-client