$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa File: 41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa (raw, json) Hash identifier: ARl2Yl9eBLr7WrPJqGhjK4EjS470UnFxMWqXBWFP9FA= Subject key identifier: 10:F0:E8:2F:11:FD:56:49:42:B8:22:BC:98:B3:DA:D3:B3:63:D8:BE Certificate issuer: /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Certificate serial: 010D0C9F4328584EC20C6BB17BFDDEB60F601BC0 Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 32334 IP address blocks: 2620:17:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:6b:b1:7b:fd:de:b6:0f:60:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=f2dac4da-8495-44eb-bf56-3182943afe01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:f0:72:58:0c:0a:e1:ae:66:a4:0a:9b:4e: e3:ee:75:90:5c:33:ef:59:f7:1c:e2:ee:66:79:0f: 75:0a:f8:14:7e:32:d8:ea:da:94:39:c4:4e:c8:7b: 4c:7f:7c:ba:09:e9:81:b6:bc:fe:5e:68:38:67:c4: 4b:4c:4a:45:13:06:fe:56:d2:35:d9:a8:b0:d7:fd: b4:10:26:e3:84:b6:8e:55:0e:40:3a:61:78:73:6c: cc:62:72:ad:0c:51:62:90:dc:37:f3:41:fc:46:9e: 1a:dd:ac:19:50:8a:de:61:14:f1:42:74:22:63:e9: b6:68:ff:be:76:85:32:92:30:31:ff:b8:9c:77:6c: 76:06:1d:02:81:3c:d6:ad:42:2c:c8:02:bd:ac:13: ed:d2:f3:4b:34:86:66:a0:08:42:e9:58:88:4c:21: 42:65:f5:1d:50:01:01:23:96:51:7a:f5:87:c5:1d: 17:b1:ac:85:d6:e6:5c:1d:8a:3f:9b:fe:40:b1:95: fe:5a:4c:32:15:53:2f:36:80:00:8a:83:11:32:38: 86:b3:cb:83:2e:40:be:de:22:03:12:d3:01:7c:11: dc:56:c1:da:13:df:75:38:74:f5:a0:fe:c8:fa:5c: 29:76:05:b6:99:98:51:d5:98:aa:21:94:97:c0:dd: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:E8:2F:11:FD:56:49:42:B8:22:BC:98:B3:DA:D3:B3:63:D8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl X509v3 Authority Key Identifier: keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer sbgp-ipAddrBlock: critical IPv6: 2620:17:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fa:55:0f:a5:fb:11:13:8e:32:db:65:ae:34:5d:8e:5c:98: 10:d5:1e:76:f3:e4:0f:05:96:7e:69:d1:a5:4b:fe:0e:f2:c8: 78:9f:0d:82:03:42:94:2f:e7:6a:7f:37:5b:47:74:37:b1:ce: 0e:a4:ba:3b:c5:8d:5a:8a:d9:3b:76:ef:c3:9c:b7:f9:f2:6d: 65:88:1b:ea:5b:00:8e:e2:fc:c2:36:d6:aa:99:79:b0:ba:2b: 40:8d:f4:20:c0:a5:59:2e:d7:67:f8:da:18:3e:21:72:f8:80: ca:1e:fc:9b:29:b9:98:5c:95:69:bb:38:1d:dd:54:df:14:aa: 0e:20:db:8a:ef:f2:2b:57:20:5b:1a:c9:69:eb:27:ea:ba:34: 29:8f:9b:1e:8d:ce:6e:96:aa:4d:e7:d9:e9:cf:d3:f8:7e:76: 2b:c2:ae:7b:64:18:aa:06:f6:c5:be:af:78:7b:a4:25:b5:01: db:c3:67:3a:f3:0c:b1:0a:f5:b1:15:b3:05:16:ea:23:01:a4: 85:2e:4c:b9:03:0f:f8:a3:a2:48:c6:8f:b6:d4:b1:15:1e:15: 3c:af:12:d5:fd:83:4c:e2:4d:e4:13:0e:80:65:ca:72:ec:2a: 63:f8:92:67:35:d6:b7:d5:3b:5e:a5:82:4a:37:96:36:e6:08: 9d:a3:f5:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7CDGuxe/3etg9gG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0OTM0YzgtNWI3OC00OGQ2LWIyNjEtYjdhMGQxYmM0 YmI3MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ZjJkYWM0ZGEtODQ5NS00NGViLWJmNTYtMzE4Mjk0M2FmZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm87wclgMCuGuZqQKm07j7nWQXDPvWfcc4u5m eQ91CvgUfjLY6tqUOcROyHtMf3y6CemBtrz+Xmg4Z8RLTEpFEwb+VtI12aiw1/20 ECbjhLaOVQ5AOmF4c2zMYnKtDFFikNw380H8Rp4a3awZUIreYRTxQnQiY+m2aP++ doUykjAx/7icd2x2Bh0CgTzWrUIsyAK9rBPt0vNLNIZmoAhC6ViITCFCZfUdUAEB I5ZRevWHxR0XsayF1uZcHYo/m/5AsZX+WkwyFVMvNoAAioMRMjiGs8uDLkC+3iID EtMBfBHcVsHaE991OHT1oP7I+lwpdgW2mZhR1ZiqIZSXwN0wOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBDw6C8R/VZJQrgivJiz2tOzY9i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5 MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFiYzRiYjcvNDFkNWVkYjItMTBmNy0z ZTBhLWI3ZDMtN2FjMjg0MGI2N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ0OTM0YzgtNWI3OC00OGQ2LWIy NjEtYjdhMGQxYmM0YmI3LzJkNDkzNGM4LTViNzgtNDhkNi1iMjYxLWI3YTBkMWJj NGJiNy5jcmwwHwYDVR0jBBgwFoAUjaVzmWc3dFzU/MzrwMLF5wxUSeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2Ew ZDFiYzRiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAF6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAz6VQ+l+xETjjLbZa40XY5cmBDVHnbz5A8Fln5p0aVL/g7yyHif DYIDQpQv52p/N1tHdDexzg6kujvFjVqK2Tt278Oct/nybWWIG+pbAI7i/MI21qqZ ebC6K0CN9CDApVku12f42hg+IXL4gMoe/JspuZhclWm7OB3dVN8Uqg4g24rv8itX IFsayWnrJ+q6NCmPmx6Nzm6Wqk3n2enP0/h+divCrntkGKoG9sW+r3h7pCW1AdvD ZzrzDLEK9bEVswUW6iMBpIUuTLkDD/ijokjGj7bUsRUeFTyvEtX9g0ziTeQTDoBl ynLsKmP4kmc11rfVO16lgko3ljbmCJ2j9Rk= -----END CERTIFICATE-----Generated at Fri Aug 21 22:43:31 2026 by rpki-client