$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa File: 21e17989-aeb3-3850-8fa1-cd573833c69a.roa (raw, json) Hash identifier: noikHAejhXFK7TEVzAOEFXoUBtzXzIe68lJ/7plSUkI= Subject key identifier: 46:6B:B8:5E:E6:D5:BB:AC:B1:FD:BA:97:03:39:FD:62:16:9E:7E:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFE122F811A98E59B34B81460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 2606:4700:4018::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2f:81:1a:98:e5:9b:34:b8:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=cf953da6-389d-4ee6-b1a4-e7efeb8b5e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:f2:83:0c:ef:bc:d4:13:c7:65:f5:69:c9: 70:a5:99:32:39:02:35:cf:20:f5:da:e4:5a:dc:e0: d9:f3:82:00:d4:61:eb:de:ea:21:9a:17:61:53:9b: 25:d8:75:ad:c7:8e:3e:c6:41:d2:ea:8f:74:91:f3: 7d:9a:77:a5:e1:3d:ab:c6:73:b7:80:52:68:ad:95: b5:47:2e:da:41:f5:fd:0f:a8:fc:d1:55:29:af:8e: f1:e8:a4:7d:5f:1d:79:08:25:4b:59:c4:eb:fa:16: 33:d3:7d:1c:f5:71:a1:66:36:30:2d:46:1f:f5:82: 3b:82:94:fa:8a:4f:53:00:ea:a2:ac:4c:27:c9:d4: 45:89:d2:16:f9:6e:03:df:3a:5a:04:be:34:e4:03: 22:b3:e0:b6:17:c6:d4:d1:fe:45:3a:a8:7e:09:72: 29:db:8b:d5:d2:86:63:fa:cd:97:7b:39:43:cd:f9: ce:ec:dd:23:f6:66:cf:ad:7e:6b:8f:b9:4d:64:52: 96:31:96:77:f7:64:74:b9:77:8c:d9:01:ee:4c:e3: 1a:7d:48:82:90:70:78:ef:1d:9f:a1:56:0a:3e:b1: 07:29:81:07:cf:75:06:da:5a:f0:7d:ba:52:29:e9: 99:ea:5a:98:de:a4:33:85:5f:7f:3c:58:40:61:7a: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:B8:5E:E6:D5:BB:AC:B1:FD:BA:97:03:39:FD:62:16:9E:7E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21e17989-aeb3-3850-8fa1-cd573833c69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4018::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1f:5f:e5:c6:c2:e1:30:f4:41:6b:48:42:28:68:86:84:be: e8:2d:06:f3:5d:a2:40:ae:aa:bf:a6:d3:00:85:d5:39:3b:f2: 38:b7:1f:f0:ab:17:d4:ea:f9:6d:a6:d8:ce:cd:0f:7b:9c:5c: 83:ce:b8:0c:a2:bf:1e:68:b1:6d:3a:da:08:0c:96:70:10:e3: 13:08:b0:26:6f:94:64:5e:1b:db:96:82:31:13:e3:23:2f:ef: f9:cb:84:a6:7f:d1:4a:b0:10:9c:67:55:9e:9e:07:4a:2e:ea: 19:1b:7f:35:80:42:22:3d:a1:c7:f6:72:d7:50:dd:7d:dc:c9: ad:99:07:3d:e9:8f:d8:46:1a:cf:b5:4f:0a:0b:3a:3d:ce:fd: 96:5f:55:e1:86:dc:1e:d2:0f:b2:f5:2c:01:b7:e6:6c:a9:37: 85:75:f6:ae:b1:72:68:08:36:93:2f:db:0c:c7:6a:fe:9f:c1: 8a:6f:5a:4c:3c:f7:89:72:3e:4b:30:f9:a7:15:da:ca:29:7e: 23:d8:52:c9:dc:ed:2a:6c:ef:bb:ff:bd:e5:23:71:5c:ae:05: 75:8d:51:5f:23:10:48:ca:dc:7f:67:f2:e9:8f:96:82:e5:5f: ef:64:5f:b3:e7:53:a6:36:29:09:54:9a:b4:25:53:1e:ce:a8: 59:e1:41:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7+Ei+BGpjlmzS4FGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y5NTNkYTYtMzg5ZC00ZWU2LWIxYTQtZTdlZmViOGI1ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjTygwzvvNQTx2X1aclwpZkyOQI1zyD12uRa 3ODZ84IA1GHr3uohmhdhU5sl2HWtx44+xkHS6o90kfN9mnel4T2rxnO3gFJorZW1 Ry7aQfX9D6j80VUpr47x6KR9Xx15CCVLWcTr+hYz030c9XGhZjYwLUYf9YI7gpT6 ik9TAOqirEwnydRFidIW+W4D3zpaBL405AMis+C2F8bU0f5FOqh+CXIp24vV0oZj +s2XezlDzfnO7N0j9mbPrX5rj7lNZFKWMZZ392R0uXeM2QHuTOMafUiCkHB47x2f oVYKPrEHKYEHz3UG2lrwfbpSKemZ6lqY3qQzhV9/PFhAYXp6SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZruF7m1bussf26lwM5/WIWnn4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjFlMTc5ODktYWViMy0z ODUwLThmYTEtY2Q1NzM4MzNjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAEAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcfX+XGwuEw9EFrSEIoaIaEvugtBvNdokCuqr+m0wCF1Tk78ji3 H/CrF9Tq+W2m2M7ND3ucXIPOuAyivx5osW062ggMlnAQ4xMIsCZvlGReG9uWgjET 4yMv7/nLhKZ/0UqwEJxnVZ6eB0ou6hkbfzWAQiI9ocf2ctdQ3X3cya2ZBz3pj9hG Gs+1TwoLOj3O/ZZfVeGG3B7SD7L1LAG35mypN4V19q6xcmgINpMv2wzHav6fwYpv Wkw894lyPksw+acV2sopfiPYUsnc7Sps77v/veUjcVyuBXWNUV8jEEjK3H9n8umP loLlX+9kX7PnU6Y2KQlUmrQlUx7OqFnhQSs= -----END CERTIFICATE-----Generated at Tue Sep 22 09:38:56 2026 by rpki-client