$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa File: 4738a0db-ee50-3a8a-9636-ac0584f52f61.roa (raw, json) Hash identifier: nqK0PRMthl19XYRYRAixiGME1QWvN6J6zkf0Q2SVN0E= Subject key identifier: 89:EB:A5:EC:0D:AC:B5:F5:B2:2A:D4:8F:BF:CA:63:F9:96:F4:47:57 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584EA798B3FBBC6EFFA454843098 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14325 IP address blocks: 2604:a700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:b3:fb:bc:6e:ff:a4:54:84:30:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3ffca72b-a953-4033-8568-7c53288c55ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:b5:c0:0d:47:cf:48:c5:8c:50:cb:91:99: 4b:97:91:cb:22:a6:e9:0d:bc:0d:18:b1:ae:a9:b9: e7:c6:ee:31:69:3e:7b:26:12:4b:f0:36:0b:8a:30: e0:de:05:33:df:0e:e4:84:a7:86:a6:3f:10:73:3d: 76:be:8e:e1:09:ef:6b:20:6a:b6:d0:d8:ee:8b:6f: 3c:e2:bb:8c:b2:71:bf:84:cf:a6:5c:d9:02:6c:cf: aa:fe:da:11:99:6b:99:db:30:03:d3:6f:88:d1:e2: fa:94:12:7c:ff:1e:c7:6f:99:31:fc:82:92:8a:a5: c0:95:d7:20:88:24:f7:d5:2b:97:91:7b:43:43:8b: b1:e9:92:76:19:c5:9a:08:c2:96:8e:b1:e6:24:4e: 5c:93:c8:9d:f8:26:70:c5:2c:b2:ae:0c:31:0d:cd: ea:cf:b6:44:61:28:55:48:4e:e8:d5:94:d7:8e:ec: c1:53:f6:99:11:b7:85:7b:71:74:20:2e:77:df:8f: aa:19:45:f8:20:f9:f8:20:f4:a5:66:86:fd:c6:86: 55:ec:ce:b4:4f:8e:67:26:0f:6b:ba:d0:60:58:d0: 08:f8:18:ea:72:13:88:39:63:61:b5:40:d4:e0:73: 7e:21:c2:62:d0:93:c9:ec:d3:60:8a:7a:23:2a:2c: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:A5:EC:0D:AC:B5:F5:B2:2A:D4:8F:BF:CA:63:F9:96:F4:47:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv6: 2604:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:58:d7:81:a6:29:6a:3a:78:f3:ea:4e:4a:48:61:77:91: 7a:a5:26:40:6a:66:09:43:55:8a:8a:7c:e0:2e:06:21:0a:42: e5:7f:41:e2:7b:92:5a:44:d7:de:4c:81:e6:6b:9c:c7:ad:eb: a3:aa:5a:c6:24:d8:88:19:50:98:81:ff:57:5a:fb:f6:f5:b0: 68:e3:a5:c9:64:42:d7:3b:f7:c9:97:7f:56:64:1d:b7:31:fb: c1:21:8f:d1:78:0a:91:3e:f4:a9:94:59:f5:65:23:f6:d3:bb: 49:11:4b:46:91:e4:51:90:ef:6a:a2:cf:61:45:6b:f1:24:b7: a8:28:89:1a:43:d1:70:ec:cb:25:3d:76:16:9d:c9:29:8b:91: 21:4b:cb:9e:0a:0d:e9:7f:4b:63:6b:ae:26:29:a7:d9:33:76: 65:c1:76:64:0c:f4:3e:28:76:23:3a:82:1d:d3:63:0f:24:73: cf:46:ab:bc:76:2c:53:04:b6:0c:2e:cb:40:66:75:08:49:aa: 37:c1:db:66:2e:f4:46:19:8c:99:92:d1:9f:5d:db:87:fe:b3: 1a:42:aa:91:17:38:33:7e:1f:33:70:6d:ef:e7:d4:d9:95:e7: 0b:9d:96:c0:8d:e5:06:e0:f9:5e:10:8d:f8:5f:11:29:3a:5f: 90:ec:d6:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nmLP7vG7/pFSEMJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2ZmY2E3MmItYTk1My00MDMzLTg1NjgtN2M1MzI4OGM1NWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHW1wA1Hz0jFjFDLkZlLl5HLIqbpDbwNGLGu qbnnxu4xaT57JhJL8DYLijDg3gUz3w7khKeGpj8Qcz12vo7hCe9rIGq20Njui288 4ruMsnG/hM+mXNkCbM+q/toRmWuZ2zAD02+I0eL6lBJ8/x7Hb5kx/IKSiqXAldcg iCT31SuXkXtDQ4ux6ZJ2GcWaCMKWjrHmJE5ck8id+CZwxSyyrgwxDc3qz7ZEYShV SE7o1ZTXjuzBU/aZEbeFe3F0IC5334+qGUX4IPn4IPSlZob9xoZV7M60T45nJg9r utBgWNAI+BjqchOIOWNhtUDU4HN+IcJi0JPJ7NNginojKixTSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFInrpewNrLX1sirUj7/KY/mW9EdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvNDczOGEwZGItZWU1MC0z YThhLTk2MzYtYWMwNTg0ZjUyZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA69VjXgaYpajp48+pOSkhhd5F6pSZAamYJQ1WKinzgLgYhCkLlf0Hi e5JaRNfeTIHma5zHreujqlrGJNiIGVCYgf9XWvv29bBo46XJZELXO/fJl39WZB23 MfvBIY/ReAqRPvSplFn1ZSP207tJEUtGkeRRkO9qos9hRWvxJLeoKIkaQ9Fw7Msl PXYWnckpi5EhS8ueCg3pf0tja64mKafZM3ZlwXZkDPQ+KHYjOoId02MPJHPPRqu8 dixTBLYMLstAZnUISao3wdtmLvRGGYyZktGfXduH/rMaQqqRFzgzfh8zcG3v59TZ lecLnZbAjeUG4PleEI34XxEpOl+Q7Nb+ -----END CERTIFICATE-----Generated at Wed Jul 29 09:29:27 2026 by rpki-client