$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa File: 2744f7f5-ab18-3de3-b244-bc520f20d607.roa (raw, json) Hash identifier: +HibQHLdrLmr/n7w4mjRdN5poa8wADs9vSWlEBeWFKI= Subject key identifier: 7C:C4:84:CF:4E:CC:8D:57:78:4C:B1:68:CA:F5:23:21:53:69:08:23 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584EFCACCAF3E3EE2C03B8F0BC80 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 40230 IP address blocks: 2604:cf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ca:f3:e3:ee:2c:03:b8:f0:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=859bd584-793b-44a0-8d1c-42e5ad3a2394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:70:d6:d3:92:52:fc:b1:40:0d:cd:a9:ba: 3d:95:50:93:eb:15:5a:ef:66:74:ce:60:3a:ae:ae: c8:dd:8e:73:39:b7:5e:ae:1f:17:54:3a:50:02:80: 12:87:80:71:98:b1:3c:e6:38:ed:23:cd:7f:61:a1: 3e:db:94:5c:38:64:1b:cd:2b:a2:95:f4:a8:80:15: c1:3f:fd:d9:ff:ca:0e:8c:5e:2c:6a:b4:e0:49:68: e6:b0:94:04:d1:51:d6:d0:8c:40:f0:26:4b:3c:b3: c8:b0:5a:3e:29:87:5a:33:c2:1d:73:4a:ab:47:00: 02:e3:48:7d:7a:a2:8f:76:ec:f5:fb:de:0d:ad:b8: 8b:18:a0:22:4e:8e:97:07:66:e3:16:60:95:57:02: 1e:cb:4f:00:dc:9a:76:d0:22:12:aa:69:ef:5f:f0: 1c:bc:72:4d:17:df:41:bc:37:17:16:4f:f9:62:01: 09:a6:69:09:a5:41:2d:d2:b3:f1:cd:62:1f:10:9c: ff:b3:e2:94:f9:f8:d6:ec:42:09:b5:be:ed:c9:06: ca:95:fc:ba:3e:f8:93:0e:29:7f:3a:3f:58:9d:9d: cb:a4:a9:02:31:17:a9:e5:29:3f:af:9a:d0:b6:f4: a5:f8:15:10:29:bb:d8:2e:1c:d6:eb:98:00:8d:5a: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C4:84:CF:4E:CC:8D:57:78:4C:B1:68:CA:F5:23:21:53:69:08:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:51:9c:f3:f1:85:35:e2:7a:b7:bf:c0:39:92:f9:79:30:96: 2e:cd:c3:50:51:4f:47:01:d4:24:1e:65:36:aa:f6:44:d0:cd: 7f:bb:5d:29:d4:10:1c:16:d8:2e:92:6c:44:92:40:eb:79:5b: 7b:fd:dd:06:35:a7:21:6d:64:7a:a1:bb:80:47:7e:1a:b6:30: 91:d2:00:19:9b:34:57:67:ee:63:22:1c:b6:95:fd:50:97:77: 37:b2:8d:f5:da:e0:c9:61:81:a4:84:11:a1:94:51:de:5b:32: 4a:ac:c2:69:e3:da:73:c9:15:92:4d:88:47:94:72:21:ba:97: 70:f2:7d:5c:16:28:68:8e:2a:65:a0:0f:d0:e3:48:e5:38:0e: df:a0:27:7c:81:eb:e1:e5:c7:f9:cc:52:f9:97:c6:3c:18:fa: 26:3e:0c:03:24:62:c9:3a:c4:79:f5:6d:07:63:80:e7:8f:b2: ed:52:fc:d8:b6:cd:f4:75:10:ee:92:b4:c5:63:67:ca:f7:2f: 12:6e:0a:57:d1:52:d4:ba:66:7f:a3:ef:b3:ce:a2:a8:ed:9f: 41:6e:40:45:80:68:ba:c2:b3:d0:d8:92:f5:30:6a:a9:19:4f: a4:88:de:25:b9:39:ee:57:21:37:bb:43:c0:4b:7e:1c:aa:16: 19:ea:24:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMrz4+4sA7jwvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODU5YmQ1ODQtNzkzYi00NGEwLThkMWMtNDJlNWFkM2EyMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrZw1tOSUvyxQA3Nqbo9lVCT6xVa72Z0zmA6 rq7I3Y5zObderh8XVDpQAoASh4BxmLE85jjtI81/YaE+25RcOGQbzSuilfSogBXB P/3Z/8oOjF4sarTgSWjmsJQE0VHW0IxA8CZLPLPIsFo+KYdaM8Idc0qrRwAC40h9 eqKPduz1+94NrbiLGKAiTo6XB2bjFmCVVwIey08A3Jp20CISqmnvX/AcvHJNF99B vDcXFk/5YgEJpmkJpUEt0rPxzWIfEJz/s+KU+fjW7EIJtb7tyQbKlfy6PviTDil/ Oj9YnZ3LpKkCMRep5Sk/r5rQtvSl+BUQKbvYLhzW65gAjVpOdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHzEhM9OzI1XeEyxaMr1IyFTaQgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvMjc0NGY3ZjUtYWIxOC0z ZGUzLWIyNDQtYmM1MjBmMjBkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGUZzz8YU14nq3v8A5kvl5MJYuzcNQUU9HAdQkHmU2qvZE0M1/u10p 1BAcFtgukmxEkkDreVt7/d0GNachbWR6obuAR34atjCR0gAZmzRXZ+5jIhy2lf1Q l3c3so312uDJYYGkhBGhlFHeWzJKrMJp49pzyRWSTYhHlHIhupdw8n1cFihojipl oA/Q40jlOA7foCd8gevh5cf5zFL5l8Y8GPomPgwDJGLJOsR59W0HY4Dnj7LtUvzY ts30dRDukrTFY2fK9y8SbgpX0VLUumZ/o++zzqKo7Z9BbkBFgGi6wrPQ2JL1MGqp GU+kiN4luTnuVyE3u0PAS34cqhYZ6iTi -----END CERTIFICATE-----Generated at Wed Sep 23 08:04:20 2026 by rpki-client