$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: gTzR9QG6B3gXQo5JDSGAA+dTgZdiS3sxEVIvCyrfoPU= Subject key identifier: CE:74:D6:58:74:0A:F4:B8:32:B8:79:A4:97:AF:F4:8F:0C:9F:0F:38 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584EBB11BC6717432444633F1920 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:bc:67:17:43:24:44:63:3f:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=0463b101-4a2d-4c7f-9c23-b71c7a67c4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:f3:99:51:d6:19:7c:12:13:ec:b7:6f:94: 1c:cc:0f:e1:57:e1:13:f1:03:9e:81:fb:8a:29:fb: 69:51:4c:25:50:43:01:88:fb:06:1a:91:b5:3f:37: 7e:73:ed:dc:c4:8e:db:8b:fe:2c:3f:59:c4:38:50: 3c:3c:ef:c5:63:46:31:b4:04:2e:e5:f6:08:73:46: 28:1d:6e:79:94:29:09:55:ff:99:10:a5:c7:1d:e0: bb:4b:a5:b4:c7:30:c6:4a:e9:c7:1b:50:81:aa:8e: 80:f8:e3:5d:56:fc:0f:b8:5b:7c:0e:85:62:4a:9b: 4c:b6:08:4e:bb:56:73:9f:06:83:73:89:61:55:ee: 73:67:e1:17:20:99:26:29:af:ea:68:ab:50:28:e6: 7c:b3:4a:fd:f0:aa:8f:2c:ee:b6:bc:e9:e8:67:45: 57:63:32:4d:db:04:ae:ac:c5:55:90:0f:d2:f1:6c: 10:d4:b4:09:3d:7c:d1:7f:74:63:aa:2b:2a:e7:60: 0b:45:ee:61:32:9f:23:d0:52:97:fe:fc:3b:fd:00: 4b:4c:a9:22:19:16:d3:fe:71:aa:1f:4e:79:98:ad: ca:ee:7b:b2:e3:1f:63:d0:b2:67:40:77:2a:ee:95: 3d:ea:0d:6a:cb:c9:55:1c:d6:95:9c:30:52:f3:c7: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:74:D6:58:74:0A:F4:B8:32:B8:79:A4:97:AF:F4:8F:0C:9F:0F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:bd:dd:2b:ef:75:e3:95:d8:d7:cf:9a:1c:9f:77:2c:50:37: 08:67:ed:ab:f1:8b:ee:5b:e4:7e:60:76:b4:05:d4:96:82:f0: 13:6c:37:f9:c4:ac:fc:20:b0:a9:5f:ba:56:98:4b:28:0f:03: 30:5b:ac:25:8b:f0:c6:36:cb:10:c2:7e:d3:26:74:56:d1:49: be:9d:98:93:99:6f:4e:8b:7f:da:0e:fb:e9:0e:85:e6:1c:e0: b6:28:7c:0e:59:4d:f9:fc:fb:fa:34:0b:9c:57:44:5f:b1:f6: d0:d8:f5:7c:6a:ed:7b:3f:3b:b1:3f:0d:82:3f:0b:5d:70:aa: 9e:1c:5b:be:ed:57:d6:43:53:b4:d0:3b:0c:97:d5:2f:b9:5b: 1c:16:c2:9d:b1:f8:24:31:ff:8a:ea:af:3a:08:81:c4:24:3a: 83:fc:b7:61:b8:75:53:da:ad:50:16:13:0b:d6:d3:42:19:4d: c0:fb:3e:d7:61:2a:1a:7a:93:57:83:d2:a6:ba:cd:c9:11:32: 92:07:30:17:bd:80:e4:88:98:0c:23:d6:e7:2c:62:d8:88:58: 26:fe:b9:4e:86:d4:b5:6b:e6:d9:44:66:8e:ee:b3:a0:08:1d: 2b:53:8a:e6:ad:5e:34:6f:5d:36:bf:cb:04:16:d4:d8:a5:4e: ef:c4:d9:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EbxnF0MkRGM/GSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDQ2M2IxMDEtNGEyZC00YzdmLTljMjMtYjcxYzdhNjdjNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjujzmVHWGXwSE+y3b5QczA/hV+ET8QOegfuK KftpUUwlUEMBiPsGGpG1Pzd+c+3cxI7bi/4sP1nEOFA8PO/FY0YxtAQu5fYIc0Yo HW55lCkJVf+ZEKXHHeC7S6W0xzDGSunHG1CBqo6A+ONdVvwPuFt8DoViSptMtghO u1ZznwaDc4lhVe5zZ+EXIJkmKa/qaKtQKOZ8s0r98KqPLO62vOnoZ0VXYzJN2wSu rMVVkA/S8WwQ1LQJPXzRf3Rjqisq52ALRe5hMp8j0FKX/vw7/QBLTKkiGRbT/nGq H055mK3K7nuy4x9j0LJnQHcq7pU96g1qy8lVHNaVnDBS88cb+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM501lh0CvS4Mrh5pJev9I8Mnw84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALi93SvvdeOV2NfPmhyfdyxQNwhn7avxi+5b5H5gdrQF1JaC8BNs N/nErPwgsKlfulaYSygPAzBbrCWL8MY2yxDCftMmdFbRSb6dmJOZb06Lf9oO++kO heYc4LYofA5ZTfn8+/o0C5xXRF+x9tDY9Xxq7Xs/O7E/DYI/C11wqp4cW77tV9ZD U7TQOwyX1S+5WxwWwp2x+CQx/4rqrzoIgcQkOoP8t2G4dVParVAWEwvW00IZTcD7 PtdhKhp6k1eD0qa6zckRMpIHMBe9gOSImAwj1ucsYtiIWCb+uU6G1LVr5tlEZo7u s6AIHStTiuatXjRvXTa/ywQW1NilTu/E2bI= -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:39 2026 by rpki-client