$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff2262a-2759-3eff-809e-2ae7248aaa82.roa File: 3ff2262a-2759-3eff-809e-2ae7248aaa82.roa (raw, json) Hash identifier: D8YVrLSNuI/Fr1RJx+JLOuEKaQGNDMw5HsgB9IDVrk8= Subject key identifier: D4:97:23:7B:6E:5F:62:94:38:43:F9:F0:26:03:DD:08:0D:7B:65:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A19B012F716ECC2BD680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff2262a-2759-3eff-809e-2ae7248aaa82.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 2601:40b::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a1:9b:01:2f:71:6e:cc:2b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f4007c64-b638-403a-8ec3-ee6ddba533c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:ec:ea:3e:77:d2:7b:0f:c8:24:56:a4:b3: 91:9a:b7:0e:59:cc:bd:34:fe:81:aa:a2:a5:aa:17: bd:30:a4:b9:ea:45:8f:b8:90:6d:34:e5:99:08:27: 0f:e0:f1:e8:8f:60:4f:17:13:42:57:2c:f4:cc:17: a1:92:eb:e2:e9:01:41:df:83:70:fd:c6:44:4b:64: a2:23:ef:3f:40:42:d0:88:8f:02:22:e4:b7:83:80: 5c:1b:ce:f8:f0:f0:d3:77:e4:76:f5:47:1a:86:47: a0:42:34:b5:96:8d:e7:01:b6:e2:4b:20:0c:dd:22: cf:21:e1:b6:0b:b4:fb:10:6f:76:2b:e8:3c:8d:07: 9b:13:15:c2:9f:7b:8b:1b:2c:04:ea:85:1d:0b:46: 22:0e:df:84:f3:e1:96:7b:7b:e2:aa:df:03:3b:d7: 0f:f1:4a:0b:20:37:44:a4:0d:9f:e9:2b:2d:f1:f6: 73:46:a2:cc:8b:7c:68:24:4c:aa:04:ea:2d:64:1a: 41:ce:54:25:ce:86:b2:d7:d6:f8:26:50:8d:cf:28: 4a:42:0b:d9:3e:24:16:3b:81:5d:01:91:bb:14:23: 9f:1b:51:fc:a5:23:73:fd:7b:d4:ae:ad:49:d4:ae: 80:3c:d8:b2:4a:a7:45:85:3e:7a:67:38:ac:88:da: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:23:7B:6E:5F:62:94:38:43:F9:F0:26:03:DD:08:0D:7B:65:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff2262a-2759-3eff-809e-2ae7248aaa82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:40b::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4b:9b:f6:7b:a6:9b:ed:ff:43:fb:11:87:17:7f:1a:4a:25: 1b:ab:9d:85:5d:b8:d6:79:51:ef:8e:7c:30:d8:cd:ae:e4:88: 98:a0:c2:59:f4:44:14:5c:c2:32:ea:83:67:bc:fb:c6:27:05: 0c:70:67:3a:2f:99:f6:e1:2a:2f:5a:fe:c4:2e:2e:28:5c:33: 7f:84:a6:d4:22:98:45:ab:49:96:a2:03:df:bc:be:bf:92:ce: cc:1b:71:ad:b1:da:35:28:3a:32:6d:3c:1e:e2:84:9e:b2:9b: 0b:46:17:84:e9:06:03:af:6f:49:0c:f8:2d:4b:db:97:8d:e7: da:8f:7a:48:78:b2:55:69:3d:ab:71:b9:8d:12:67:a0:2e:30: e1:28:3a:88:16:82:27:b5:35:e3:19:dd:ba:e4:09:5c:d1:8d: 2c:8f:b2:6d:f3:9d:57:78:d9:c8:22:19:30:a8:f7:fc:01:f9: be:46:32:b0:89:ad:4e:b7:ca:a7:44:e1:36:ca:87:6a:e5:fd: 3d:22:df:eb:fa:0d:e9:78:30:65:3e:8a:ec:01:9b:fa:cf:bb: ae:96:78:c3:d0:13:03:b6:e3:14:fd:ba:21:86:e6:b5:1f:1f: 5c:4c:2c:07:7f:2a:a8:9a:b7:e7:3a:07:f2:d9:3a:08:9c:6a: d6:0a:00:9d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7YYqGbAS9xbswr1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjQwMDdjNjQtYjYzOC00MDNhLThlYzMtZWU2ZGRiYTUzM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87js6j530nsPyCRWpLORmrcOWcy9NP6BqqKl qhe9MKS56kWPuJBtNOWZCCcP4PHoj2BPFxNCVyz0zBehkuvi6QFB34Nw/cZES2Si I+8/QELQiI8CIuS3g4BcG8748PDTd+R29UcahkegQjS1lo3nAbbiSyAM3SLPIeG2 C7T7EG92K+g8jQebExXCn3uLGywE6oUdC0YiDt+E8+GWe3viqt8DO9cP8UoLIDdE pA2f6Sst8fZzRqLMi3xoJEyqBOotZBpBzlQlzoay19b4JlCNzyhKQgvZPiQWO4Fd AZG7FCOfG1H8pSNz/XvUrq1J1K6APNiySqdFhT56ZzisiNrTOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNSXI3tuX2KUOEP58CYD3QgNe2U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZmMjI2MmEtMjc1OS0z ZWZmLTgwOWUtMmFlNzI0OGFhYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEECwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACUub9numm+3/Q/sRhxd/GkolG6udhV241nlR7458MNjNruSImKDC WfREFFzCMuqDZ7z7xicFDHBnOi+Z9uEqL1r+xC4uKFwzf4Sm1CKYRatJlqID37y+ v5LOzBtxrbHaNSg6Mm08HuKEnrKbC0YXhOkGA69vSQz4LUvbl43n2o96SHiyVWk9 q3G5jRJnoC4w4Sg6iBaCJ7U14xnduuQJXNGNLI+ybfOdV3jZyCIZMKj3/AH5vkYy sImtTrfKp0ThNsqHauX9PSLf6/oN6XgwZT6K7AGb+s+7rpZ4w9ATA7bjFP26IYbm tR8fXEwsB38qqJq35zoH8tk6CJxq1goAnQ== -----END CERTIFICATE-----Generated at Tue Sep 1 12:37:05 2026 by rpki-client