$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa File: a1ab528d-c36f-37f6-807b-16f80973f512.roa (raw, json) Hash identifier: 0j5c/wFo6Ie6Q1y0dXSRea9cFbzNJclYli8RusH3OtM= Subject key identifier: 77:F8:BB:5B:7F:B6:AD:6B:AE:A7:0B:8E:85:5D:B3:3E:E7:E2:28:88 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBE6C20BAD95460C82180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 2606:4700::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:be:6c:20:ba:d9:54:60:c8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=a9e5030f-02c4-4a81-b70a-8f5be6811b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:96:c3:0e:a5:c7:86:22:82:85:fd:0c:8b: a1:06:9b:de:6e:cb:33:2e:8f:fc:f0:8c:91:8b:66: a8:a8:84:26:3f:85:4b:a4:93:57:55:49:90:45:3c: dd:56:03:c9:d6:9a:bf:70:9a:77:bc:2e:8b:bc:ab: 8a:ff:45:1c:cb:45:33:ef:91:db:8a:c7:d2:70:d7: 57:09:f2:3e:0e:74:83:4e:23:73:5e:2c:ce:10:41: 3d:6b:db:f2:08:ed:55:49:da:4b:b9:ae:51:a5:b5: 2a:ca:a1:f3:e3:85:5f:5c:e9:ad:38:3a:05:7b:3a: ad:08:31:ec:4f:e6:6c:9d:e7:7c:4e:a6:14:44:a6: 20:f9:9d:6a:ad:7f:9b:6e:36:e3:eb:d5:6a:56:7f: 36:73:19:24:e6:37:c5:3b:e8:62:8c:0f:e4:fb:ee: cb:71:f4:3f:3a:da:b3:f1:5d:46:39:a9:b9:25:63: e7:cc:af:67:e1:03:8a:34:f8:a9:7e:0f:bd:81:77: 76:f0:98:52:26:47:1a:b6:f5:56:6f:5b:0d:a0:9a: 39:56:ab:08:f5:fe:7b:e4:d3:8e:87:e8:e9:68:6c: 22:91:eb:74:5f:90:44:41:08:85:79:1f:e7:ab:14: 7b:db:43:13:b5:30:32:8d:d3:1f:4e:2b:4e:e4:8e: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:BB:5B:7F:B6:AD:6B:AE:A7:0B:8E:85:5D:B3:3E:E7:E2:28:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1ab528d-c36f-37f6-807b-16f80973f512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b3:15:ec:0c:20:17:d9:55:92:4d:75:aa:90:57:33:df:4e: dd:b1:70:7a:d8:c8:57:0b:10:4b:4a:22:4f:6c:b6:81:9e:ce: 7c:61:a5:cc:4d:42:4d:e5:4f:63:60:72:50:8a:df:71:91:e8: f2:fc:d7:24:96:87:f2:2e:0e:f8:56:e7:22:bf:58:99:bd:ed: 0d:28:39:1b:5f:9c:3a:28:08:22:fd:ac:b7:6a:3b:97:16:5f: 7b:08:63:c4:c8:2a:c2:d4:7c:70:07:dc:d5:fe:b1:8f:89:ba: dd:03:28:e7:db:f1:5f:ab:7b:cb:c3:07:70:aa:3d:bb:d6:e2: 3c:8a:0e:99:b9:bf:33:fb:61:2c:b6:05:cd:a7:56:92:0d:f9: bc:f6:5e:a1:85:31:f4:b9:1f:7d:97:08:73:fe:5a:c4:d6:cb: 5e:55:34:a7:66:04:2c:d2:02:d0:4b:77:c2:7b:33:f1:34:f4: 82:a5:03:cf:61:db:4f:91:ab:9d:0a:18:ee:f7:c3:ff:ce:5d: 79:3c:3e:25:57:90:df:06:64:bf:2e:f6:cf:7d:d2:6f:f0:ed: 96:7b:c4:50:99:4d:63:95:20:cd:cd:b0:7b:22:1b:9b:93:67: 57:d6:dd:9e:44:08:63:ac:df:c6:c1:ac:99:5d:5d:0e:17:5c: 2e:46:15:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TL5sILrZVGDIIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YTllNTAzMGYtMDJjNC00YTgxLWI3MGEtOGY1YmU2ODExYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJKWww6lx4YigoX9DIuhBpvebsszLo/88IyR i2aoqIQmP4VLpJNXVUmQRTzdVgPJ1pq/cJp3vC6LvKuK/0Ucy0Uz75HbisfScNdX CfI+DnSDTiNzXizOEEE9a9vyCO1VSdpLua5RpbUqyqHz44VfXOmtODoFezqtCDHs T+Zsned8TqYURKYg+Z1qrX+bbjbj69VqVn82cxkk5jfFO+hijA/k++7LcfQ/Otqz 8V1GOam5JWPnzK9n4QOKNPipfg+9gXd28JhSJkcatvVWb1sNoJo5VqsI9f575NOO h+jpaGwiket0X5BEQQiFeR/nqxR720MTtTAyjdMfTitO5I69vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHf4u1t/tq1rrqcLjoVdsz7n4iiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTFhYjUyOGQtYzM2Zi0z N2Y2LTgwN2ItMTZmODA5NzNmNTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyzFewMIBfZVZJNdaqQVzPfTt2xcHrYyFcLEEtKIk9stoGeznxh pcxNQk3lT2NgclCK33GR6PL81ySWh/IuDvhW5yK/WJm97Q0oORtfnDooCCL9rLdq O5cWX3sIY8TIKsLUfHAH3NX+sY+Jut0DKOfb8V+re8vDB3CqPbvW4jyKDpm5vzP7 YSy2Bc2nVpIN+bz2XqGFMfS5H32XCHP+WsTWy15VNKdmBCzSAtBLd8J7M/E09IKl A89h20+Rq50KGO73w//OXXk8PiVXkN8GZL8u9s990m/w7ZZ7xFCZTWOVIM3NsHsi G5uTZ1fW3Z5ECGOs38bBrJldXQ4XXC5GFeo= -----END CERTIFICATE-----Generated at Tue Sep 22 09:17:08 2026 by rpki-client