$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa File: f85def6b-09ba-3066-8e65-6b86437e8e5d.roa (raw, json) Hash identifier: lv559wbDvxoYB80nnhqrcl3Ek3/9Yuj6PhDGtEZO9O4= Subject key identifier: 97:56:D4:74:C5:1C:19:E7:85:99:E5:44:8C:C0:71:D1:01:CF:AE:66 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584EE4F1EDBD31CE0D1B3CF36400 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 401714 IP address blocks: 2620:98:e00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:ed:bd:31:ce:0d:1b:3c:f3:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=4d164164-e432-4194-8e54-0a0d8da3d9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:c8:16:32:6b:82:bc:7c:88:92:4f:a1:73: f4:ff:41:bf:7e:ca:4f:f6:79:63:21:08:2b:8d:06: 77:e9:d1:75:c9:57:f2:64:5a:82:80:87:df:61:c5: 06:fc:c4:d3:70:4e:b3:43:2a:ef:21:9d:69:a6:cb: de:e4:0d:f1:22:67:55:f6:f0:c7:2d:af:73:07:98: 43:18:4f:78:23:49:0e:6a:d3:35:b8:b8:43:e5:c3: 00:66:b7:b1:9c:cf:32:cf:5d:e5:45:75:40:6d:11: 3c:26:db:c6:29:c3:a2:37:2d:d3:8f:0b:d8:b9:8a: 11:1c:59:bb:40:ce:33:9e:f8:28:50:11:0c:84:0a: d0:94:d7:23:d1:36:57:a9:af:8a:e4:0a:e0:bd:dc: b7:ff:9b:34:98:52:65:69:65:22:87:e1:7a:7b:ef: bd:a0:e2:0d:ad:e8:41:16:60:eb:c7:21:f2:c7:10: d1:26:58:f4:7e:6d:d3:2f:e3:a2:0d:bf:29:cb:cd: d6:41:30:66:cf:12:5c:0d:af:91:4d:59:aa:a3:43: fb:14:33:cf:39:9a:ae:b3:a2:57:7f:23:b6:99:7d: b6:8e:77:bf:2d:63:06:5d:5c:f8:8b:5d:85:b6:e1: 05:2f:b6:4b:29:6a:e1:7a:6c:74:db:4c:99:37:b3: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:56:D4:74:C5:1C:19:E7:85:99:E5:44:8C:C0:71:D1:01:CF:AE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:99:f2:3a:76:df:4c:0d:0c:b6:6f:e3:f6:b0:d7:ca:9e:e4: e4:61:95:d1:50:47:e7:a1:27:59:ed:0e:5d:6e:e5:eb:5f:79: 6c:eb:3f:da:ff:bb:69:d7:fb:c0:6d:55:f0:5d:fc:b8:bb:54: f8:8f:bc:28:d4:de:a2:e6:8d:3c:f6:99:87:82:81:39:8d:de: 55:c3:8d:94:9a:c9:1f:7a:7f:7b:fc:f9:ad:d3:5e:63:57:a0: 00:76:ff:48:36:84:ab:12:d9:0a:13:37:92:29:9b:fa:97:90: 93:c1:71:3a:51:be:14:62:9b:1b:06:a0:65:92:43:e9:ee:74: 92:3c:33:49:aa:9d:40:90:3b:e4:93:ba:7f:da:da:27:ea:ed: b9:1c:12:4f:29:25:97:85:eb:7b:09:17:44:a2:bc:c0:cd:e3: 27:4e:47:0b:66:96:d6:fc:e8:b6:b6:63:12:3b:97:a4:ac:b7: be:11:be:c7:f7:bf:3d:e8:bf:04:ce:6f:5b:18:84:44:22:fd: 9a:20:94:a2:a8:c7:4b:f9:3f:be:01:68:eb:71:74:7c:18:56: 95:c3:74:70:04:99:cd:2c:77:63:35:12:88:41:b3:b6:f5:97: 34:75:a7:fa:62:d8:a5:69:d4:2a:4c:a2:d9:55:b5:b7:5f:2b: 1e:b8:21:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7k8e29Mc4NGzzzZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk NGQxNjQxNjQtZTQzMi00MTk0LThlNTQtMGEwZDhkYTNkOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDIFjJrgrx8iJJPoXP0/0G/fspP9nljIQgr jQZ36dF1yVfyZFqCgIffYcUG/MTTcE6zQyrvIZ1ppsve5A3xImdV9vDHLa9zB5hD GE94I0kOatM1uLhD5cMAZrexnM8yz13lRXVAbRE8JtvGKcOiNy3TjwvYuYoRHFm7 QM4znvgoUBEMhArQlNcj0TZXqa+K5Argvdy3/5s0mFJlaWUih+F6e++9oOINrehB FmDrxyHyxxDRJlj0fm3TL+OiDb8py83WQTBmzxJcDa+RTVmqo0P7FDPPOZqus6JX fyO2mX22jne/LWMGXVz4i12FtuEFL7ZLKWrhemx020yZN7O8sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdW1HTFHBnnhZnlRIzAcdEBz65mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvZjg1ZGVmNmItMDliYS0z MDY2LThlNjUtNmI4NjQzN2U4ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGZ8jp230wNDLZv4/aw18qe5ORhldFQR+ehJ1ntDl1u5etfeWzr P9r/u2nX+8BtVfBd/Li7VPiPvCjU3qLmjTz2mYeCgTmN3lXDjZSayR96f3v8+a3T XmNXoAB2/0g2hKsS2QoTN5Ipm/qXkJPBcTpRvhRimxsGoGWSQ+nudJI8M0mqnUCQ O+STun/a2ifq7bkcEk8pJZeF63sJF0SivMDN4ydORwtmltb86La2YxI7l6Sst74R vsf3vz3ovwTOb1sYhEQi/ZoglKKox0v5P74BaOtxdHwYVpXDdHAEmc0sd2M1EohB s7b1lzR1p/pi2KVp1CpMotlVtbdfKx64Idg= -----END CERTIFICATE-----Generated at Sun Sep 20 22:03:28 2026 by rpki-client