$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/dd80968e-9cfb-3fc5-ac05-e810aee470b8.roa File: dd80968e-9cfb-3fc5-ac05-e810aee470b8.roa (raw, json) Hash identifier: Lq7v1aKn+fBsJHSV2+7Il3UFYSi3t+/l2erA/bg1oHg= Subject key identifier: 71:E9:C1:58:EA:A9:A5:87:71:1E:86:AC:74:9F:EE:14:22:40:A9:96 Certificate issuer: /CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Certificate serial: 010D0C9F4328584EA17A9B9782DD33D2FD6C9180 Authority key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/dd80968e-9cfb-3fc5-ac05-e810aee470b8.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 36086 IP address blocks: 2604:3440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:9b:97:82:dd:33:d2:fd:6c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=86ed4663-b692-4efc-b665-2b28c8027571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:d6:1e:fa:11:a4:53:31:b5:9a:39:e0:91: 7b:de:cb:7e:c6:08:f3:6d:5e:7c:26:6a:2f:85:a2: 08:11:0b:50:75:65:32:53:a9:de:f0:6a:1c:12:01: 55:95:5a:cd:58:aa:ca:47:c1:38:0f:7b:7b:c6:64: ec:6c:b9:e6:5b:36:85:5e:dc:4c:f0:94:cb:73:54: bc:ab:92:4f:01:2c:d3:20:e2:d7:7e:6b:4c:93:d4: 91:72:0e:d5:a8:6c:6c:a3:6f:41:7d:66:ba:89:57: 67:2d:dd:95:4a:19:0e:20:11:5c:7d:2f:ac:4f:88: 91:b2:9b:25:60:16:b0:4d:f1:ca:35:70:12:30:8e: 20:af:1d:4b:30:89:24:d3:49:79:16:b1:f3:e7:bb: 57:a7:aa:5d:55:52:6c:ce:6a:fc:93:2c:94:7a:bf: d5:57:4d:33:02:fa:ad:26:41:a2:c1:52:25:e9:b8: ea:b0:3d:12:65:9c:84:9e:99:44:8c:5b:01:9b:44: f9:01:31:b9:cd:d2:7c:d7:4f:9e:c3:da:9c:92:97: 38:ad:8e:b7:78:bc:af:54:2f:bd:38:ae:43:f4:69: d5:cb:e4:a4:e8:16:1d:78:b1:2f:b7:4e:ce:a5:85: 41:32:0f:95:95:17:22:f3:c5:98:8b:85:10:9d:37: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:C1:58:EA:A9:A5:87:71:1E:86:AC:74:9F:EE:14:22:40:A9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/dd80968e-9cfb-3fc5-ac05-e810aee470b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl X509v3 Authority Key Identifier: keyid:18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer sbgp-ipAddrBlock: critical IPv6: 2604:3440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ee:5f:f9:81:dd:51:9b:d0:9b:65:fc:e9:74:da:76:e1:ac: 57:79:36:b5:f4:d3:ad:0d:3a:af:d6:d9:e3:2e:b4:e8:16:ec: e3:61:58:9e:d4:64:f7:74:cd:0e:6c:90:78:fa:a9:16:ef:83: c2:65:8b:96:cc:fa:73:f3:6b:66:e2:6f:d9:15:29:84:e0:10: ad:d2:ec:1f:ac:ac:d1:a6:a1:f1:31:93:a1:79:88:44:0d:f0: 6f:79:f3:83:38:fe:65:75:a3:42:24:f4:dc:89:24:55:ef:c2: 6f:f6:fd:79:b7:45:c7:34:f9:ed:5e:f6:a7:92:82:68:ea:18: 95:59:74:dd:8e:1c:80:17:e0:83:32:d6:8e:90:72:22:cf:e6: 86:13:4d:bb:db:bb:86:aa:a6:30:ed:f6:e8:f0:52:e6:77:bc: 8f:92:e3:bb:d0:22:97:fd:06:18:fb:a6:75:e6:f7:85:93:b1: 8f:27:b7:49:72:59:40:a3:d3:ea:f7:86:7f:b3:10:ce:2e:f6: 13:d0:d6:5e:ff:c9:da:17:b4:0c:f9:bb:24:23:28:1b:7d:8a: 8d:d1:19:ec:7d:c3:62:e4:aa:2b:b7:49:37:94:84:89:c6:ce: dc:52:12:5a:04:01:f3:fe:0d:0f:c4:45:6f:52:4a:d4:ff:50: 90:fd:e9:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6hepuXgt0z0v1skYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDExM2M5MzUtZDI5ZC00MWI1LWJlYzAtYTczOTViZGVh Yzk5MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ODZlZDQ2NjMtYjY5Mi00ZWZjLWI2NjUtMmIyOGM4MDI3NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVPWHvoRpFMxtZo54JF73st+xgjzbV58Jmov haIIEQtQdWUyU6ne8GocEgFVlVrNWKrKR8E4D3t7xmTsbLnmWzaFXtxM8JTLc1S8 q5JPASzTIOLXfmtMk9SRcg7VqGxso29BfWa6iVdnLd2VShkOIBFcfS+sT4iRspsl YBawTfHKNXASMI4grx1LMIkk00l5FrHz57tXp6pdVVJszmr8kyyUer/VV00zAvqt JkGiwVIl6bjqsD0SZZyEnplEjFsBm0T5ATG5zdJ810+ew9qckpc4rY63eLyvVC+9 OK5D9GnVy+Sk6BYdeLEvt07OpYVBMg+VlRci88WYi4UQnTcxsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHHpwVjqqaWHcR6GrHSf7hQiQKmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTEz YzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJkZWFjOTkvZGQ4MDk2OGUtOWNmYi0z ZmM1LWFjMDUtZTgxMGFlZTQ3MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDExM2M5MzUtZDI5ZC00MWI1LWJl YzAtYTczOTViZGVhYzk5LzQxMTNjOTM1LWQyOWQtNDFiNS1iZWMwLWE3Mzk1YmRl YWM5OS5jcmwwHwYDVR0jBBgwFoAUGDDRaqH477+3IU5sD/F6UFmYDsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5 NWJkZWFjOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCv7l/5gd1Rm9CbZfzpdNp24axXeTa19NOtDTqv1tnjLrToFuzjYVie 1GT3dM0ObJB4+qkW74PCZYuWzPpz82tm4m/ZFSmE4BCt0uwfrKzRpqHxMZOheYhE DfBvefODOP5ldaNCJPTciSRV78Jv9v15t0XHNPntXvankoJo6hiVWXTdjhyAF+CD MtaOkHIiz+aGE02727uGqqYw7fbo8FLmd7yPkuO70CKX/QYY+6Z15veFk7GPJ7dJ cllAo9Pq94Z/sxDOLvYT0NZe/8naF7QM+bskIygbfYqN0RnsfcNi5Kort0k3lISJ xs7cUhJaBAHz/g0PxEVvUkrU/1CQ/ekb -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:27 2026 by rpki-client