$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: i7Zr2vA1Ko2+YMA4jKzJK421Mz93DzQbfvFMxggZwuI= Subject key identifier: 5F:18:7F:1F:58:64:25:32:90:49:A7:00:12:F5:31:21:DF:A7:D7:20 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584F15CCE697CF0856FA03D03EC0 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e6:97:cf:08:56:fa:03:d0:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=d7f6097e-8dcf-40e7-af81-7188f1a3a879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:f5:be:f2:40:79:c3:66:62:64:39:f5:6d: 78:8b:9e:83:8f:15:05:02:92:a9:d8:69:ca:64:28: a7:e9:1d:2f:4e:64:c4:1b:39:b3:58:10:9f:28:dd: c6:38:66:d9:d5:4e:22:39:69:84:2e:96:81:6d:8b: ae:4b:3d:a6:7b:5c:87:bc:4f:f1:91:e7:40:ca:67: c8:54:57:02:3d:4b:4e:4e:5b:d5:74:aa:4d:d3:b6: 8b:ea:a6:98:c9:ce:e0:d4:79:93:f9:2a:fe:d4:cf: 93:e3:12:4f:39:bc:95:e6:06:f0:1d:36:1a:73:28: dd:16:e7:2e:6f:ef:1a:ab:8c:cc:d1:dd:96:ab:f8: 5b:df:3b:e6:e4:0b:c8:49:f4:fd:1b:f1:26:e1:da: 13:0a:dd:4b:c5:7d:23:29:fd:4e:fa:04:63:d6:bc: de:0b:e0:9f:2c:41:98:ee:f4:e3:36:ac:0d:39:9f: b8:74:cd:34:55:aa:1f:8d:d3:ba:06:d3:0a:17:4b: ed:09:9e:3b:eb:71:44:22:c5:56:3d:93:96:49:ac: 4f:d3:00:19:65:86:49:a3:7a:7b:c2:c8:96:3c:59: aa:bf:db:44:82:6a:da:92:eb:f3:a4:bd:b0:fa:bf: 01:0a:56:1b:cf:9b:28:0b:04:d8:1a:f9:53:80:9a: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:7F:1F:58:64:25:32:90:49:A7:00:12:F5:31:21:DF:A7:D7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:89:29:ce:13:9a:6f:0d:c6:f2:a5:8d:26:88:61:c0:e3:9d: 4c:02:80:37:42:d2:9b:07:5b:ad:24:0d:9f:74:d5:e8:38:1b: 95:66:85:a4:1f:76:44:06:6b:16:fe:c9:94:54:94:a9:de:50: 9a:96:96:fe:0d:d4:d4:83:9d:19:98:b8:ac:6b:33:a7:7f:4b: c7:cf:7e:c5:5e:e8:0c:54:20:22:85:06:3d:7d:c9:b0:f8:f4: 6a:4d:a3:7f:23:e7:1a:e0:e9:a2:1f:00:e2:3c:fb:fb:4b:34: 87:fa:c8:36:0a:3f:e2:e7:d1:b8:3f:53:05:75:0c:74:9f:a4: 92:a5:0b:de:1c:8f:f2:05:7a:44:bf:81:9f:73:4f:a9:8f:87: 55:c0:5e:47:13:27:41:8e:16:e8:a6:d8:9f:3e:ee:2b:be:64: f7:c4:a2:b2:3a:4a:eb:72:63:e0:e7:fd:e0:66:54:ef:59:de: 5e:97:ac:45:9e:45:ab:cd:5f:96:e8:82:70:49:e1:25:4f:08: 58:0d:ec:bd:45:8c:48:eb:14:73:ec:0a:62:2f:5a:3f:d2:3e: c9:8c:06:f6:38:35:22:7e:90:7f:67:4f:11:c9:b8:68:10:b6: 7a:9e:14:c9:f2:ac:e1:ac:f6:ff:f6:10:43:e7:38:5e:bc:f7: 58:36:f0:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8VzOaXzwhW+gPQPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDdmNjA5N2UtOGRjZi00MGU3LWFmODEtNzE4OGYxYTNhODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hH1vvJAecNmYmQ59W14i56DjxUFApKp2GnK ZCin6R0vTmTEGzmzWBCfKN3GOGbZ1U4iOWmELpaBbYuuSz2me1yHvE/xkedAymfI VFcCPUtOTlvVdKpN07aL6qaYyc7g1HmT+Sr+1M+T4xJPObyV5gbwHTYacyjdFucu b+8aq4zM0d2Wq/hb3zvm5AvISfT9G/Em4doTCt1LxX0jKf1O+gRj1rzeC+CfLEGY 7vTjNqwNOZ+4dM00VaofjdO6BtMKF0vtCZ4763FEIsVWPZOWSaxP0wAZZYZJo3p7 wsiWPFmqv9tEgmrakuvzpL2w+r8BClYbz5soCwTYGvlTgJp0RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF8Yfx9YZCUykEmnABL1MSHfp9cgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNiSnOE5pvDcbypY0miGHA451MAoA3QtKbB1utJA2fdNXoOBuVZoWk H3ZEBmsW/smUVJSp3lCalpb+DdTUg50ZmLisazOnf0vHz37FXugMVCAihQY9fcmw +PRqTaN/I+ca4OmiHwDiPPv7SzSH+sg2Cj/i59G4P1MFdQx0n6SSpQveHI/yBXpE v4Gfc0+pj4dVwF5HEydBjhboptifPu4rvmT3xKKyOkrrcmPg5/3gZlTvWd5el6xF nkWrzV+W6IJwSeElTwhYDey9RYxI6xRz7ApiL1o/0j7JjAb2ODUifpB/Z08Rybho ELZ6nhTJ8qzhrPb/9hBD5zhevPdYNvBu -----END CERTIFICATE-----Generated at Thu Sep 24 02:47:38 2026 by rpki-client