$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa File: b774099a-dd3b-3026-8a7d-507329420ac7.roa (raw, json) Hash identifier: UIklJEmKTwYF3bZx9NFeLS03XUh40EY3bDdZU6I20zc= Subject key identifier: D3:52:34:72:4F:0F:19:F3:9D:B6:28:C4:C8:50:A1:6D:37:D4:2E:42 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584EA7948A9BCDA00EE827CA11B0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 211014 IP address blocks: 2604:f440:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:8a:9b:cd:a0:0e:e8:27:ca:11:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f7bf8f52-f5b5-4c01-84fc-165354ae9943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:ef:48:e7:b9:56:6d:ec:15:ca:15:9e:5e: f6:7a:22:49:1c:fd:6b:38:5c:fd:9f:04:2d:c1:a8: ce:f5:3d:0d:af:c5:81:63:58:c8:5f:ec:ae:e0:4b: 85:e0:da:d9:e3:c6:37:69:8f:12:7a:de:d6:d3:56: 6f:8b:c2:e9:95:21:a7:12:e7:df:97:06:80:1b:02: 4a:ab:df:0e:f6:e9:4e:db:2f:d8:51:54:c5:34:96: 4e:86:40:f7:cb:be:91:75:48:24:bd:e8:af:de:8a: 54:d6:46:0d:56:d6:b3:5b:13:77:e7:ce:c7:db:b4: 3c:3f:4c:05:70:5b:ba:d4:56:6b:b9:f5:b2:2b:3f: 62:5b:89:fa:71:06:bc:b0:e1:8a:d4:78:78:97:86: b6:aa:78:cf:66:cc:3a:88:69:72:92:22:cc:a7:ef: d6:05:7d:7b:6a:76:53:69:0d:af:b0:51:21:1b:c4: 77:33:5d:0c:0f:ef:61:b4:ac:49:d7:ed:a3:a1:3f: d6:f1:29:9f:da:54:c0:10:7c:55:71:13:a2:4a:52: 26:35:4e:ee:69:da:f2:9a:ea:53:98:99:4a:93:cc: f5:b6:ef:31:cb:10:c8:c3:b3:94:65:a3:dc:15:7a: ed:35:d7:26:f6:a7:1e:aa:c4:b9:56:45:c8:57:dc: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:34:72:4F:0F:19:F3:9D:B6:28:C4:C8:50:A1:6D:37:D4:2E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:fc:0e:ea:4e:f3:f5:29:7b:bf:e7:08:01:c1:7f:ec:16: b3:23:1d:b2:53:70:88:94:5a:68:a9:e7:c9:77:35:a9:c4:b5: 1a:08:d0:16:c9:67:c7:4e:64:a0:6b:13:dd:8c:07:e8:de:72: 66:7a:37:98:96:f5:60:ed:90:f8:9e:84:69:50:32:c2:de:38: bc:d1:cf:7d:a3:ac:76:e3:2e:68:cf:64:2e:0b:5b:1c:ed:fe: 73:d1:da:13:0c:3e:98:45:87:9e:aa:54:ab:d2:2f:1b:c3:b2: 7d:46:b8:9b:13:05:31:72:a3:b9:bb:a8:33:bb:b3:d4:15:b4: 3f:f6:dd:c8:84:98:7d:91:16:bf:87:b2:54:cb:d6:66:85:84: db:f8:f3:e1:c1:ec:4b:8f:ed:41:63:ac:27:09:0e:5d:b7:46: f9:96:3e:c2:6f:ed:8a:76:6d:b4:fb:d3:38:7b:7b:91:57:73: 64:46:a2:99:81:f7:ec:bf:fa:61:f4:03:21:b2:ad:52:8b:77: e0:d0:49:a6:ce:80:ac:71:1d:b7:31:5b:c8:64:96:19:ea:fe: c1:b7:11:b5:74:eb:4b:f7:3b:01:56:d0:3a:42:68:71:d9:50: 44:a5:d4:9c:a4:4d:1e:77:e4:e3:83:73:a3:fe:dd:55:34:4a: 49:fc:a4:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlIqbzaAO6CfKEbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjdiZjhmNTItZjViNS00YzAxLTg0ZmMtMTY1MzU0YWU5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/vSOe5Vm3sFcoVnl72eiJJHP1rOFz9nwQt wajO9T0Nr8WBY1jIX+yu4EuF4NrZ48Y3aY8Set7W01Zvi8LplSGnEufflwaAGwJK q98O9ulO2y/YUVTFNJZOhkD3y76RdUgkveiv3opU1kYNVtazWxN3587H27Q8P0wF cFu61FZrufWyKz9iW4n6cQa8sOGK1Hh4l4a2qnjPZsw6iGlykiLMp+/WBX17anZT aQ2vsFEhG8R3M10MD+9htKxJ1+2joT/W8Smf2lTAEHxVcROiSlImNU7uadrymupT mJlKk8z1tu8xyxDIw7OUZaPcFXrtNdcm9qceqsS5VkXIV9xDJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNSNHJPDxnznbYoxMhQoW031C5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYjc3NDA5OWEtZGQzYi0z MDI2LThhN2QtNTA3MzI5NDIwYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT0QAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAak/A7qTvP1KXu/5wgBwX/sFrMjHbJTcIiUWmip58l3NanEtRoI 0BbJZ8dOZKBrE92MB+jecmZ6N5iW9WDtkPiehGlQMsLeOLzRz32jrHbjLmjPZC4L Wxzt/nPR2hMMPphFh56qVKvSLxvDsn1GuJsTBTFyo7m7qDO7s9QVtD/23ciEmH2R Fr+HslTL1maFhNv48+HB7EuP7UFjrCcJDl23RvmWPsJv7Yp2bbT70zh7e5FXc2RG opmB9+y/+mH0AyGyrVKLd+DQSabOgKxxHbcxW8hklhnq/sG3EbV060v3OwFW0DpC aHHZUESl1JykTR535OODc6P+3VU0Skn8pB0= -----END CERTIFICATE-----Generated at Fri Sep 11 02:56:54 2026 by rpki-client