$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa File: cb396975-c95e-3a31-ba3b-e1d1a955c922.roa (raw, json) Hash identifier: uYVilaGJ/BsB60q4hTJgZNAQtOYaS0P6oBJgAJ39xJ8= Subject key identifier: E5:BA:99:32:85:58:01:35:64:9B:CF:4D:32:B0:E1:67:FB:66:C5:C4 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584EE38CA62419FCEFDDCFB85580 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 2607:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a6:24:19:fc:ef:dd:cf:b8:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=1928fa07-2f25-42ae-b0c0-70363ecd88ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:3b:9a:50:a9:5b:2e:fc:12:18:fb:79:13: de:35:24:4a:42:40:43:34:43:cc:0e:2a:9d:69:62: 55:c2:e0:d1:07:82:90:8f:ab:1e:06:c9:d1:f9:60: 6e:50:2a:eb:04:4c:56:d4:93:ae:d0:cd:19:d3:0c: c8:16:bf:7a:b3:81:ab:e5:73:74:1d:f1:9b:05:fc: ea:b7:66:aa:ee:34:7d:48:00:5a:0f:ee:5b:0c:b8: f1:b4:3b:f5:8f:99:b0:e6:da:87:a9:26:27:d4:9c: 0d:73:90:23:2c:3a:19:aa:03:34:c4:d4:eb:ff:a4: 65:b3:25:c9:f5:eb:91:18:10:c9:af:0a:7d:78:7c: 4c:96:27:d0:5b:86:b9:88:72:d7:0d:7f:b4:42:5f: 14:cf:ee:5c:03:d9:3d:33:6a:fa:61:a8:dc:48:48: eb:c5:5e:d7:97:c5:61:76:3b:53:31:eb:05:59:da: 96:42:78:b0:be:12:a6:23:fe:0d:7b:ed:98:e8:61: 87:47:54:8d:de:b2:8f:72:f8:8b:11:61:9b:61:c2: a9:ea:3c:fc:c9:fc:52:3e:40:18:3d:3b:9f:8e:de: b7:a7:0e:ff:1a:36:19:52:5e:88:11:e6:6c:68:2f: 21:45:b0:5b:d9:fd:4f:2a:10:fb:3e:f2:f1:9d:32: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:99:32:85:58:01:35:64:9B:CF:4D:32:B0:E1:67:FB:66:C5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cb396975-c95e-3a31-ba3b-e1d1a955c922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:a640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:33:ff:d5:bc:72:ca:01:46:e8:9c:86:32:90:ed:8d:77:73: e2:cd:a2:28:3b:81:fe:11:94:ea:21:a9:a2:5b:18:c7:69:0e: a7:5c:b0:56:b3:03:7c:fc:a0:2b:41:c2:17:49:4c:0d:28:52: e0:fa:64:7f:45:0f:76:83:02:be:2e:f5:c9:5b:f4:e5:d9:40: 8a:f7:0c:46:fa:f5:b6:fe:7c:78:bd:fa:ae:63:69:df:31:eb: cf:b8:dc:d8:b3:3a:d9:d0:c3:d2:d2:19:8f:ae:cc:0e:98:67: 6a:a0:a1:1c:1e:40:38:18:69:6e:5b:e1:f1:44:27:b1:92:11: 95:ec:28:b7:36:42:0c:59:d8:09:92:0d:ba:c1:e8:38:e4:36: ae:ef:17:33:f2:50:0e:11:7a:e4:fa:14:4c:5c:0d:e0:b4:91: f2:98:2a:84:3b:f7:90:b9:8c:ed:a4:32:61:7d:ae:ff:de:f0: d0:33:a6:1f:09:ca:80:6f:a3:56:b5:53:95:62:00:b2:b9:0e: 32:35:29:65:6c:17:60:6a:e3:19:90:6e:0f:6f:a9:c5:4f:89: e8:1f:36:16:68:cc:74:ca:52:9d:11:04:81:8c:63:e8:ad:23: 96:1f:c6:2d:1e:77:c9:90:3a:02:6b:d4:6c:c2:84:e9:f1:52: a7:f0:0d:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7jjKYkGfzv3c+4VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MTkyOGZhMDctMmYyNS00MmFlLWIwYzAtNzAzNjNlY2Q4OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YI7mlCpWy78Ehj7eRPeNSRKQkBDNEPMDiqd aWJVwuDRB4KQj6seBsnR+WBuUCrrBExW1JOu0M0Z0wzIFr96s4Gr5XN0HfGbBfzq t2aq7jR9SABaD+5bDLjxtDv1j5mw5tqHqSYn1JwNc5AjLDoZqgM0xNTr/6RlsyXJ 9euRGBDJrwp9eHxMlifQW4a5iHLXDX+0Ql8Uz+5cA9k9M2r6YajcSEjrxV7Xl8Vh djtTMesFWdqWQniwvhKmI/4Ne+2Y6GGHR1SN3rKPcviLEWGbYcKp6jz8yfxSPkAY PTufjt63pw7/GjYZUl6IEeZsaC8hRbBb2f1PKhD7PvLxnTIvaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOW6mTKFWAE1ZJvPTTKw4Wf7ZsXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2IzOTY5NzUtYzk1ZS0z YTMxLWJhM2ItZTFkMWE5NTVjOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOM//VvHLKAUbonIYykO2Nd3PizaIoO4H+EZTqIamiWxjHaQ6nXLBW swN8/KArQcIXSUwNKFLg+mR/RQ92gwK+LvXJW/Tl2UCK9wxG+vW2/nx4vfquY2nf MevPuNzYszrZ0MPS0hmPrswOmGdqoKEcHkA4GGluW+HxRCexkhGV7Ci3NkIMWdgJ kg26weg45Dau7xcz8lAOEXrk+hRMXA3gtJHymCqEO/eQuYztpDJhfa7/3vDQM6Yf CcqAb6NWtVOVYgCyuQ4yNSllbBdgauMZkG4Pb6nFT4noHzYWaMx0ylKdEQSBjGPo rSOWH8YtHnfJkDoCa9RswoTp8VKn8A1m -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:41 2026 by rpki-client