$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d504a8b4-1dcb-3cd6-860c-b8175689a0f7.roa File: d504a8b4-1dcb-3cd6-860c-b8175689a0f7.roa (raw, json) Hash identifier: HkedQcgT2FncjGpRHpW4nAGOMiOXL73aKv5dRJyz9iE= Subject key identifier: AF:E8:80:A8:CF:9A:B4:18:B3:87:08:A3:EE:6B:29:25:90:E4:E9:78 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBC02E6DDB423E50B543D9C40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d504a8b4-1dcb-3cd6-860c-b8175689a0f7.roa Signing time: Wed 05 Aug 2026 09:06:20 +0000 ROA not before: Wed 05 Aug 2026 09:06:20 +0000 ROA not after: Tue 03 Nov 2026 10:06:20 +0000 asID: 19148 IP address blocks: 2607:f5b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:02:e6:dd:b4:23:e5:0b:54:3d:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 09:06:20 2026 GMT Not After : Nov 3 10:06:20 2026 GMT Subject: CN=d4dd5195-f7c6-4d7b-94b9-959a1ba1cff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:95:11:42:4d:93:69:7c:aa:07:70:8c:79: 3f:21:bb:72:59:aa:64:94:e7:fb:c9:05:a5:cc:9c: f8:5e:2f:55:06:4d:0e:27:42:18:7f:a1:39:0d:6a: a5:3d:b4:5b:8a:25:72:e3:38:54:28:1d:39:eb:03: b8:59:0b:3a:c8:cd:b8:00:08:4f:6f:26:81:eb:7f: 9f:b2:65:b4:e2:43:4d:0b:1f:8d:65:4c:5d:ad:f7: 17:fc:a5:62:20:5d:99:56:a1:1d:90:20:17:eb:cf: c9:77:72:3e:e3:d2:bc:30:f6:a1:39:7f:de:d5:32: 3e:a5:44:cd:40:87:a1:15:c2:90:c6:f4:a2:f9:01: 70:47:ca:19:e2:ca:a6:21:02:da:26:b1:3d:95:e4: bb:88:c1:56:f0:d7:f7:3c:25:ce:de:ba:fa:12:9f: e7:fd:d0:8b:41:ab:7b:e9:6b:f4:db:ae:0c:70:24: 8c:7a:48:9d:be:3e:41:37:33:fe:54:a4:2a:80:0a: 6e:86:d7:94:b7:41:6f:81:30:91:27:68:64:93:e5: e9:f9:2a:54:24:ca:e4:1b:f0:99:fd:da:fb:a0:17: f9:90:3a:db:26:74:7a:47:ef:af:cf:5b:e8:91:62: 1b:e4:dc:ac:fa:6e:d6:49:94:04:b2:8a:c2:b2:ce: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:80:A8:CF:9A:B4:18:B3:87:08:A3:EE:6B:29:25:90:E4:E9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d504a8b4-1dcb-3cd6-860c-b8175689a0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2c:76:69:e4:7d:39:78:bd:ef:df:20:bc:4a:ba:cf:52:1a: 9a:63:1f:f7:1a:37:80:4e:97:67:e3:75:f4:ba:c8:72:b1:6d: 10:4c:17:02:aa:46:08:88:a5:67:9f:24:ca:ce:4a:ec:31:8b: 72:ee:6f:cd:91:b1:5d:0f:35:77:87:8d:84:05:a5:cf:3b:8a: ea:c9:47:6c:a3:c7:36:ba:9a:cd:41:dd:63:e4:77:1a:39:03: 7f:5d:95:45:fc:4d:e5:b6:c7:42:13:7c:49:38:76:41:0b:c7: 75:a5:56:bd:b6:8b:fc:05:3b:e9:f4:ec:b9:ee:c7:c7:6d:67: af:2f:49:80:8e:72:d7:00:87:63:21:5d:ab:4b:f0:23:af:b3: 05:46:79:90:66:49:a7:19:11:fe:18:3a:03:57:bb:08:4d:f3: a7:94:e4:19:bc:53:ff:c7:4a:86:9f:fe:50:bb:17:ae:44:07: ed:d6:1a:2d:8d:3b:2d:ae:62:32:23:19:18:f4:68:93:ab:99: 91:2a:e6:4b:82:be:5a:76:12:e1:95:f0:48:d3:f8:a6:1e:6d: f4:1a:ef:16:04:b1:d8:4e:75:01:3d:da:8f:77:7d:0a:53:b8: d8:ce:2b:8f:d3:a8:d9:fe:38:1a:e5:7c:e3:99:b9:4e:5a:06: 24:69:04:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE68AubdtCPlC1Q9nEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTA5MDYyMFoXDTI2MTEwMzEwMDYyMFowLzEtMCsGA1UEAxMk ZDRkZDUxOTUtZjdjNi00ZDdiLTk0YjktOTU5YTFiYTFjZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGeVEUJNk2l8qgdwjHk/IbtyWapklOf7yQWl zJz4Xi9VBk0OJ0IYf6E5DWqlPbRbiiVy4zhUKB056wO4WQs6yM24AAhPbyaB63+f smW04kNNCx+NZUxdrfcX/KViIF2ZVqEdkCAX68/Jd3I+49K8MPahOX/e1TI+pUTN QIehFcKQxvSi+QFwR8oZ4sqmIQLaJrE9leS7iMFW8Nf3PCXO3rr6Ep/n/dCLQat7 6Wv0264McCSMekidvj5BNzP+VKQqgApuhteUt0FvgTCRJ2hkk+Xp+SpUJMrkG/CZ /dr7oBf5kDrbJnR6R++vz1vokWIb5Nys+m7WSZQEsorCss65KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/ogKjPmrQYs4cIo+5rKSWQ5Ol4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDUwNGE4YjQtMWRjYi0z Y2Q2LTg2MGMtYjgxNzU2ODlhMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGLHZp5H05eL3v3yC8SrrPUhqaYx/3GjeATpdn43X0ushysW0QTBcC qkYIiKVnnyTKzkrsMYty7m/NkbFdDzV3h42EBaXPO4rqyUdso8c2uprNQd1j5Hca OQN/XZVF/E3ltsdCE3xJOHZBC8d1pVa9tov8BTvp9Oy57sfHbWevL0mAjnLXAIdj IV2rS/Ajr7MFRnmQZkmnGRH+GDoDV7sITfOnlOQZvFP/x0qGn/5QuxeuRAft1hot jTstrmIyIxkY9GiTq5mRKuZLgr5adhLhlfBI0/imHm30Gu8WBLHYTnUBPdqPd30K U7jYziuP06jZ/jga5XzjmblOWgYkaQQS -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:40 2026 by rpki-client