$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa File: 4366a209-e4e8-3e21-8800-8ffe47ac5628.roa (raw, json) Hash identifier: bZSdL3p7ExOfm/WyHMwiOSzoNDvWguRCxQxf81TF+JI= Subject key identifier: C5:87:0F:7C:42:2B:4F:0D:30:B1:A7:31:78:92:0D:52:05:42:F1:DC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFCACDA29C617943DFC388F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 2606:4700:42c8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:da:29:c6:17:94:3d:fc:38:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=118f9931-e6d9-4aed-921e-e93f51c87822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:3d:52:66:db:b6:da:a4:66:00:9e:5c:9d: 54:7e:c7:9c:b4:64:90:6a:30:4a:61:d7:38:8c:b2: 2a:95:e5:f0:ad:8a:ba:1e:f9:4d:ca:ab:5c:a5:66: 3f:63:db:80:97:46:aa:98:1b:0d:ab:27:72:3b:3e: 10:7c:7b:c1:fe:4a:66:74:52:87:c9:5f:4c:0d:b8: cd:63:ae:91:22:a0:34:72:8d:50:24:40:a7:30:26: 67:98:7d:0e:bb:6f:c3:6b:bc:67:74:64:de:39:34: 88:b1:93:6e:f1:15:3e:23:e5:8b:d9:e9:16:6f:40: 0f:c5:07:34:ba:b9:98:ff:75:20:d7:06:7d:a7:7b: c7:89:0a:1d:fa:a8:09:0b:11:1a:42:d5:8f:7a:ee: 35:62:99:6d:36:db:1f:ed:ec:98:3e:7b:e3:bc:77: 30:db:56:f7:6b:6c:40:89:e0:ad:82:ef:c7:39:4d: 87:39:2b:e9:a3:28:8e:77:fc:4c:6f:6f:2e:11:2a: 97:df:eb:27:04:f3:ea:28:8d:6a:ce:d2:46:92:e2: 07:76:f3:35:63:a3:80:64:9a:cd:0f:71:ef:cd:f0: 2b:28:67:01:50:e5:fd:2a:1e:ae:30:82:a8:94:47: b0:7d:8a:16:41:86:1b:94:2b:c1:b7:c3:4d:8e:68: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:0F:7C:42:2B:4F:0D:30:B1:A7:31:78:92:0D:52:05:42:F1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4366a209-e4e8-3e21-8800-8ffe47ac5628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:42c8::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:17:18:2e:9d:de:14:87:10:04:c4:7e:0a:66:73:81:46:06: 27:a7:6e:a1:34:65:bf:40:dc:e7:01:6b:30:64:b0:3c:47:5e: 31:33:92:71:1a:a1:27:31:5d:58:a5:dc:d8:50:64:9c:9c:11: b2:73:f7:2c:12:ca:16:ef:f6:7a:76:77:ea:d2:11:fe:a2:d8: f6:9e:2e:13:1c:e2:3c:5e:33:80:b3:f0:29:5e:34:3a:59:73: 99:db:3b:f2:d5:ce:d8:ec:9d:a4:f4:7f:c8:e7:c1:d5:d0:c0: 92:3c:25:76:20:e2:89:7c:11:f0:36:cd:db:70:ca:0c:0f:4a: 02:42:2a:32:a9:f1:69:e8:4c:29:e4:99:9a:43:11:58:8d:76: 11:e9:2e:7e:43:9a:0b:2b:b2:cb:91:70:76:65:8f:bf:92:d2: 59:70:1e:27:15:14:d0:0c:5b:81:0e:97:31:5b:79:83:1c:89: d6:da:30:c9:4c:3f:ac:84:fb:05:db:3c:b3:2a:68:56:ef:b0: 65:67:40:8d:b2:6d:23:95:ce:f9:06:16:ca:5a:1d:f9:1a:3d: c8:c8:d4:8e:04:f9:66:ad:6c:8f:12:7a:dc:73:b7:18:21:40: fc:ed:7e:8f:53:61:8d:b1:4d:e9:26:f5:70:92:ad:ba:5d:f4: b4:80:31:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rNopxheUPfw4j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTE4Zjk5MzEtZTZkOS00YWVkLTkyMWUtZTkzZjUxYzg3ODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+w9UmbbttqkZgCeXJ1UfsectGSQajBKYdc4 jLIqleXwrYq6HvlNyqtcpWY/Y9uAl0aqmBsNqydyOz4QfHvB/kpmdFKHyV9MDbjN Y66RIqA0co1QJECnMCZnmH0Ou2/Da7xndGTeOTSIsZNu8RU+I+WL2ekWb0APxQc0 urmY/3Ug1wZ9p3vHiQod+qgJCxEaQtWPeu41YpltNtsf7eyYPnvjvHcw21b3a2xA ieCtgu/HOU2HOSvpoyiOd/xMb28uESqX3+snBPPqKI1qztJGkuIHdvM1Y6OAZJrN D3HvzfArKGcBUOX9Kh6uMIKolEewfYoWQYYblCvBt8NNjmil8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMWHD3xCK08NMLGnMXiSDVIFQvHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDM2NmEyMDktZTRlOC0z ZTIxLTg4MDAtOGZmZTQ3YWM1NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAELI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0XGC6d3hSHEATEfgpmc4FGBienbqE0Zb9A3OcBazBksDxHXjEz knEaoScxXVil3NhQZJycEbJz9ywSyhbv9np2d+rSEf6i2PaeLhMc4jxeM4Cz8Cle NDpZc5nbO/LVztjsnaT0f8jnwdXQwJI8JXYg4ol8EfA2zdtwygwPSgJCKjKp8Wno TCnkmZpDEViNdhHpLn5DmgsrssuRcHZlj7+S0llwHicVFNAMW4EOlzFbeYMcidba MMlMP6yE+wXbPLMqaFbvsGVnQI2ybSOVzvkGFspaHfkaPcjI1I4E+WatbI8Setxz txghQPztfo9TYY2xTekm9XCSrbpd9LSAMdE= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:00 2026 by rpki-client