$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa File: ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa (raw, json) Hash identifier: Kb09GBFeo2NBgtBJbWZUge2G54/GnRnV7vOZct2cN/w= Subject key identifier: 46:A3:6A:24:4C:9F:44:AF:22:37:F1:DD:85:39:16:C6:0C:6D:63:72 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584EA786EC684BF760A1C3E69A00 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6208 IP address blocks: 2604:fcc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ec:68:4b:f7:60:a1:c3:e6:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=62e1853e-771f-4a1a-b921-cf9b64755040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:0f:2c:53:28:54:47:83:6f:b2:d0:44:ce: 35:86:54:41:d9:72:a0:6f:d1:3b:41:48:78:a9:df: b9:bf:a0:22:68:d8:e0:43:4c:94:d9:0c:5c:c7:43: 35:0c:29:ca:70:36:98:e7:61:5a:73:f0:d5:ac:18: fe:33:42:58:bb:79:41:24:43:0e:6e:68:fe:3c:c2: 23:11:a7:25:ce:71:09:bd:e6:30:0b:ee:13:2a:40: 59:c5:0c:ff:b9:db:a6:7e:82:98:04:c3:d5:82:1c: 9a:c3:0a:72:f4:0e:1d:74:07:58:82:f5:95:82:28: 37:a5:55:2b:b1:ef:a9:be:46:6f:0d:9f:c6:a3:5c: 2f:4b:0d:b8:75:6b:5d:da:29:81:55:3a:6f:a8:f4: 59:f2:54:95:91:bd:6d:cd:00:9b:02:49:ab:79:c3: 37:43:55:3a:4e:0f:2e:a9:68:5f:13:bf:72:5e:c2: 78:4d:d9:33:14:53:f0:23:20:8f:0b:bd:98:f2:2b: cd:37:3d:4b:08:f0:15:fc:c3:80:79:60:c6:9c:3b: 3c:33:dc:a0:39:9d:46:52:c3:43:7e:15:1a:8d:c4: 25:24:5c:ef:ac:ba:5b:ae:0d:28:13:13:95:38:3c: eb:5c:f5:16:7d:31:7f:ce:b5:5b:5c:9c:55:18:a3: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A3:6A:24:4C:9F:44:AF:22:37:F1:DD:85:39:16:C6:0C:6D:63:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ff13f8f7-3fd1-398b-ad32-69e951ae8a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv6: 2604:fcc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:20:28:6f:3e:bb:87:b7:88:3a:06:50:e7:de:91:7b:1a:36: 1c:59:56:00:d1:22:03:39:2c:00:0b:0a:68:b5:bd:d0:57:65: 0b:f8:f7:19:38:29:36:51:8a:d9:76:98:81:a3:24:a2:cf:69: fd:82:9f:73:c8:47:34:62:68:20:12:25:e1:20:73:c7:61:9b: c4:1b:b0:cd:bf:b9:ba:25:ca:f8:1e:5f:18:70:79:55:7a:7e: 4b:b8:db:af:ae:80:cc:18:51:b3:fe:6c:ba:01:72:89:5c:f5: 3f:c9:d2:6b:1f:f7:e7:25:92:93:61:ad:7b:12:9a:d0:10:88: 59:da:48:cc:56:b2:83:d2:e3:a1:25:52:9f:8b:88:01:22:fc: e9:e4:65:46:1f:86:00:14:cb:8a:9a:51:71:9b:a4:92:ed:76: 42:4e:7e:8b:d0:41:b0:36:0f:89:29:c9:85:cc:06:b7:d4:3b: 71:8f:b3:e6:1e:30:e2:6f:55:dc:c5:18:e8:f7:f0:de:e9:da: e9:21:c5:45:c7:a9:99:35:d8:b8:23:41:31:eb:5a:76:7e:fe: af:32:c6:15:89:01:53:ba:67:18:3d:fc:7a:17:9d:c0:36:d4: 05:6b:8f:2f:0e:f3:bc:cb:d7:cc:5a:27:b5:02:7a:3d:6c:4e: 90:f0:a0:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nhuxoS/dgocPmmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjJlMTg1M2UtNzcxZi00YTFhLWI5MjEtY2Y5YjY0NzU1MDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1gPLFMoVEeDb7LQRM41hlRB2XKgb9E7QUh4 qd+5v6AiaNjgQ0yU2Qxcx0M1DCnKcDaY52Fac/DVrBj+M0JYu3lBJEMObmj+PMIj EaclznEJveYwC+4TKkBZxQz/udumfoKYBMPVghyawwpy9A4ddAdYgvWVgig3pVUr se+pvkZvDZ/Go1wvSw24dWtd2imBVTpvqPRZ8lSVkb1tzQCbAkmrecM3Q1U6Tg8u qWhfE79yXsJ4TdkzFFPwIyCPC72Y8ivNNz1LCPAV/MOAeWDGnDs8M9ygOZ1GUsND fhUajcQlJFzvrLpbrg0oExOVODzrXPUWfTF/zrVbXJxVGKN+nwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEajaiRMn0SvIjfx3YU5FsYMbWNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZmYxM2Y4ZjctM2ZkMS0z OThiLWFkMzItNjllOTUxYWU4YTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT8wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC9IChvPruHt4g6BlDn3pF7GjYcWVYA0SIDOSwACwpotb3QV2UL+PcZ OCk2UYrZdpiBoySiz2n9gp9zyEc0YmggEiXhIHPHYZvEG7DNv7m6Jcr4Hl8YcHlV en5LuNuvroDMGFGz/my6AXKJXPU/ydJrH/fnJZKTYa17EprQEIhZ2kjMVrKD0uOh JVKfi4gBIvzp5GVGH4YAFMuKmlFxm6SS7XZCTn6L0EGwNg+JKcmFzAa31Dtxj7Pm HjDib1XcxRjo9/De6drpIcVFx6mZNdi4I0Ex61p2fv6vMsYViQFTumcYPfx6F53A NtQFa48vDvO8y9fMWie1Ano9bE6Q8KA1 -----END CERTIFICATE-----Generated at Wed Jul 29 07:13:25 2026 by rpki-client