$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa File: cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa (raw, json) Hash identifier: ZMcOQd1/o5oq5RSAsyYw8fsjhrXFqDuifQ6YUOVC8HQ= Subject key identifier: 72:E8:53:9F:35:C0:3E:67:F4:EF:E1:5A:ED:C4:36:78:15:D1:EE:A2 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584EA791B08F3C92EE61F7590900 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399728 IP address blocks: 2620:98:e005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b0:8f:3c:92:ee:61:f7:59:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=35435241-9e8f-4089-b026-aca988fe0a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:2f:e7:84:64:a0:cc:a7:3a:69:d1:17:61: 9e:a1:64:ad:86:2e:0e:02:1b:11:3c:ee:44:df:41: 48:45:da:c8:7c:39:fa:b1:f4:bf:cf:f0:70:3d:15: cf:e1:d8:4b:91:25:52:10:88:84:22:bd:70:e3:e8: 20:4f:e4:68:6a:37:b4:87:d2:92:e7:bf:64:f7:36: 55:c5:1f:ac:7f:26:90:f0:a9:4c:c5:ff:eb:c0:6d: 44:b5:c2:68:6a:db:07:2a:87:42:b6:62:e6:23:74: 92:c6:92:fd:89:64:5e:ea:9a:7b:2f:4a:85:8c:2e: 6f:d0:2d:78:0a:a7:18:b9:7f:31:a9:3d:21:73:5b: 13:4f:52:3c:73:0a:a8:e4:24:da:c6:25:65:17:71: 56:92:3d:51:0b:62:f3:90:75:04:32:67:a8:30:01: bc:03:72:b6:fc:b8:ae:2e:1c:ec:f6:45:fb:80:f1: 72:1c:75:72:dc:70:56:fd:5e:e3:1c:97:ae:b7:fa: 11:ae:5c:04:e4:c0:4c:1f:69:ae:8b:88:f7:3c:eb: 38:3c:23:e7:55:0a:7c:0b:54:af:f4:d0:84:34:56: 23:f6:df:00:a7:31:6a:10:13:da:71:58:4c:10:28: 43:7d:2b:1d:8f:8e:59:96:c0:bf:19:75:6d:05:09: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E8:53:9F:35:C0:3E:67:F4:EF:E1:5A:ED:C4:36:78:15:D1:EE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/cf3d9baa-657b-33cf-b578-ed0fe73e45a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e3:b2:2c:59:1b:a1:04:85:ca:26:a9:68:88:ab:6d:81:eb: 49:01:cd:69:5d:43:bc:79:95:d9:90:7c:d6:c0:d0:35:42:99: 08:6e:38:b8:a1:f1:b3:2e:ab:7c:d1:00:0e:79:4d:9b:8d:6b: e3:74:d1:06:8f:40:ab:c5:bf:a0:8c:7f:b1:61:ed:20:fa:10: d4:a9:65:f3:c8:e4:db:75:7c:61:0e:74:a9:70:4b:7e:b1:4b: 78:87:b6:e4:c5:50:a0:14:eb:6f:89:f1:72:87:19:26:dc:12: b3:a7:fa:3d:27:1f:4d:13:ba:00:54:2f:bd:28:88:04:14:6b: 09:40:2c:df:08:84:47:9f:a0:81:ea:7d:e8:13:c2:9d:07:b2: 44:bb:8b:49:af:66:40:99:bb:ec:2c:cb:89:8d:d2:8f:f8:e2: cb:a2:43:c3:a4:80:7c:58:af:c8:ef:90:5c:d3:5d:17:fd:bc: f5:04:40:17:8c:ab:b8:8b:02:73:63:d4:10:e9:d3:ad:a7:c2: 24:05:d2:df:c0:9d:db:3c:27:20:c6:83:c5:8a:d5:d5:f4:49: 8f:ac:32:c9:39:81:60:18:f0:f9:b2:9b:86:77:e7:8d:26:fe: fb:c8:06:ba:f2:13:b9:9a:0a:53:38:fd:1c:0a:12:fc:7a:7d: d8:c0:40:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkbCPPJLuYfdZCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzU0MzUyNDEtOWU4Zi00MDg5LWIwMjYtYWNhOTg4ZmUwYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS0v54RkoMynOmnRF2GeoWSthi4OAhsRPO5E 30FIRdrIfDn6sfS/z/BwPRXP4dhLkSVSEIiEIr1w4+ggT+Roaje0h9KS579k9zZV xR+sfyaQ8KlMxf/rwG1EtcJoatsHKodCtmLmI3SSxpL9iWRe6pp7L0qFjC5v0C14 CqcYuX8xqT0hc1sTT1I8cwqo5CTaxiVlF3FWkj1RC2LzkHUEMmeoMAG8A3K2/Liu Lhzs9kX7gPFyHHVy3HBW/V7jHJeut/oRrlwE5MBMH2mui4j3POs4PCPnVQp8C1Sv 9NCENFYj9t8ApzFqEBPacVhMEChDfSsdj45ZlsC/GXVtBQm2ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLoU581wD5n9O/hWu3ENngV0e6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvY2YzZDliYWEtNjU3Yi0z M2NmLWI1NzgtZWQwZmU3M2U0NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPjsixZG6EEhcomqWiIq22B60kBzWldQ7x5ldmQfNbA0DVCmQhu OLih8bMuq3zRAA55TZuNa+N00QaPQKvFv6CMf7Fh7SD6ENSpZfPI5Nt1fGEOdKlw S36xS3iHtuTFUKAU62+J8XKHGSbcErOn+j0nH00TugBUL70oiAQUawlALN8IhEef oIHqfegTwp0HskS7i0mvZkCZu+wsy4mN0o/44suiQ8OkgHxYr8jvkFzTXRf9vPUE QBeMq7iLAnNj1BDp062nwiQF0t/Ands8JyDGg8WK1dX0SY+sMsk5gWAY8Pmym4Z3 540m/vvIBrryE7maClM4/RwKEvx6fdjAQLw= -----END CERTIFICATE-----Generated at Fri Sep 11 15:13:18 2026 by rpki-client