$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25713604-9dd8-3af2-927d-cfcb8ab2b657.roa File: 25713604-9dd8-3af2-927d-cfcb8ab2b657.roa (raw, json) Hash identifier: h0vie6bU1lqhqWm3Rv21PQKel8ljAhwCXEtkX6qgqxA= Subject key identifier: EE:E6:75:CC:AB:5E:14:B0:36:19:72:C0:7F:57:06:A1:17:79:1C:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFCACE850A1DAF7D2B8C19F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25713604-9dd8-3af2-927d-cfcb8ab2b657.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 2606:4700:3020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e8:50:a1:da:f7:d2:b8:c1:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=7c7ec2fa-ef65-4d81-b0b8-eeead5873d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:ff:6d:14:9f:91:37:08:13:a9:80:5d:bb: 40:40:ec:e9:18:54:01:fa:ef:36:ca:b7:e0:87:5b: 3c:66:8d:e8:9e:3c:a4:db:32:10:d0:a5:ea:5b:47: 58:db:63:e2:bf:b7:e6:40:22:aa:75:97:7a:71:03: a1:ee:17:13:88:9d:da:31:32:f5:e3:0f:e8:4d:da: 80:71:f6:c8:7d:4a:27:95:6e:c4:0f:10:4c:79:b8: 90:d1:14:62:0c:53:bc:ea:61:cd:bb:01:c7:da:65: 54:c5:2c:fa:68:51:7f:ec:a2:a8:39:30:fe:7d:b4: f1:65:2e:47:3f:03:40:fc:da:6f:ba:8d:cc:e3:df: 96:81:8f:93:3b:3e:db:c2:24:e7:96:8c:0c:71:94: ad:15:fa:7a:27:39:86:39:0b:28:8f:27:6f:30:d8: d3:21:51:f3:cf:3f:5b:2a:07:fd:77:4b:9c:ab:f3: f6:05:b2:4f:b0:fe:d2:70:7c:93:f6:75:57:9c:a6: 72:a0:22:41:26:96:63:07:72:25:b9:02:06:1b:4c: 69:c2:66:3d:cb:ab:a0:62:8c:81:8b:22:4c:64:c4: 2f:01:82:a2:d4:c2:6c:7a:42:66:39:15:12:67:0d: 25:2f:eb:f4:3e:af:5e:19:2b:d6:b5:1a:3b:3b:c1: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:75:CC:AB:5E:14:B0:36:19:72:C0:7F:57:06:A1:17:79:1C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25713604-9dd8-3af2-927d-cfcb8ab2b657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:bb:fb:56:ac:52:4d:a4:18:21:76:69:e1:c4:b6:95:4d:81: 5c:2a:a4:8c:42:18:85:50:52:35:2c:f7:82:9f:18:9a:07:0f: 80:d7:00:13:59:1a:70:98:83:e4:81:5c:c0:4f:a6:0c:51:a7: 28:0e:9e:76:c1:11:c2:b5:6d:ee:ff:fe:4a:f6:4c:3a:9f:f4: 08:e8:db:43:a8:8b:c6:24:42:23:05:3b:a5:5b:07:21:e6:58: 1a:c3:f5:c8:65:a7:ad:20:2b:12:a5:59:09:3b:d6:62:71:bd: 13:76:06:90:af:46:e5:09:ea:f2:7c:06:70:89:34:b4:d4:59: 9b:f5:e6:0c:0b:48:48:70:8e:77:90:d5:05:14:ab:5c:d8:37: 36:3a:6b:44:20:29:5f:17:9e:1c:7f:2b:98:67:da:e2:62:58: 4d:04:21:03:31:3b:3b:80:5e:93:fb:95:59:8a:37:1a:28:3a: c6:c3:72:1b:17:b5:b8:a8:d2:e8:3d:87:ad:18:e0:33:55:a6: ab:23:40:f6:01:67:fd:5c:74:0a:c2:63:cc:06:78:ab:f4:4f: aa:5b:1a:c3:07:77:3d:35:67:2e:71:28:84:cf:84:e8:f7:b6: 41:3c:02:ad:4e:d9:c0:df:12:10:71:22:8b:26:b4:98:49:36: 20:6b:a5:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rOhQodr30rjBnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk N2M3ZWMyZmEtZWY2NS00ZDgxLWIwYjgtZWVlYWQ1ODczZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1f/bRSfkTcIE6mAXbtAQOzpGFQB+u82yrfg h1s8Zo3onjyk2zIQ0KXqW0dY22Piv7fmQCKqdZd6cQOh7hcTiJ3aMTL14w/oTdqA cfbIfUonlW7EDxBMebiQ0RRiDFO86mHNuwHH2mVUxSz6aFF/7KKoOTD+fbTxZS5H PwNA/Npvuo3M49+WgY+TOz7bwiTnlowMcZStFfp6JzmGOQsojydvMNjTIVHzzz9b Kgf9d0ucq/P2BbJPsP7ScHyT9nVXnKZyoCJBJpZjB3IluQIGG0xpwmY9y6ugYoyB iyJMZMQvAYKi1MJsekJmORUSZw0lL+v0Pq9eGSvWtRo7O8FNvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7mdcyrXhSwNhlywH9XBqEXeRxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjU3MTM2MDQtOWRkOC0z YWYyLTkyN2QtY2ZjYjhhYjJiNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+7+1asUk2kGCF2aeHEtpVNgVwqpIxCGIVQUjUs94KfGJoHD4DX ABNZGnCYg+SBXMBPpgxRpygOnnbBEcK1be7//kr2TDqf9Ajo20Ooi8YkQiMFO6Vb ByHmWBrD9chlp60gKxKlWQk71mJxvRN2BpCvRuUJ6vJ8BnCJNLTUWZv15gwLSEhw jneQ1QUUq1zYNzY6a0QgKV8Xnhx/K5hn2uJiWE0EIQMxOzuAXpP7lVmKNxooOsbD chsXtbio0ug9h60Y4DNVpqsjQPYBZ/1cdArCY8wGeKv0T6pbGsMHdz01Zy5xKITP hOj3tkE8Aq1O2cDfEhBxIosmtJhJNiBrpeQ= -----END CERTIFICATE-----Generated at Tue Sep 22 16:35:51 2026 by rpki-client