$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa File: ef20946f-57c3-3a83-97c2-6893c93b3951.roa (raw, json) Hash identifier: 21RQHofF+onI+7XU18L5pADnyAwcOPNcRDDNiItXEas= Subject key identifier: 35:D7:34:7D:AC:13:34:AE:46:57:1C:28:71:3E:E2:F0:FF:53:6B:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC749DDBE1788FDFA04C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 2606:4700:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c7:49:dd:be:17:88:fd:fa:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=e7301329-ea49-41db-8590-55526c1e63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:27:d9:63:32:44:5b:1d:70:a5:c6:33:3a:c5: b5:ad:0d:fe:bb:8f:c5:fa:59:a4:a7:dd:cc:de:51: 9d:ed:2d:9d:96:be:2c:6f:25:17:90:d7:f2:2b:a4: a6:9e:1d:c7:f7:0a:e6:05:48:a3:31:35:95:8a:ea: 41:0d:bf:50:cb:a5:2a:c4:e6:9d:b2:3d:d0:3d:6b: 99:8d:2d:59:13:25:7f:4a:61:ed:aa:25:c9:50:a4: 62:a3:ee:19:14:ee:a0:87:ce:21:fc:99:19:d9:b1: 53:3b:aa:bb:2c:d7:45:ae:2a:ac:5a:51:f1:74:ca: 6d:26:e5:d0:1b:c2:80:1c:82:5b:1d:58:8d:24:23: aa:57:3f:1b:a9:30:7b:4f:b8:92:f6:5d:d1:50:e1: 0c:4d:70:cc:1b:0b:a0:d3:82:9e:d8:87:77:59:a6: b6:85:18:b0:dc:bb:21:1e:6d:db:9d:ab:62:d4:e1: 6b:4f:15:39:fd:12:05:84:fd:8d:08:0c:31:0f:29: 54:4f:7b:ec:05:57:7a:9f:52:02:e8:b5:38:88:8d: 2e:dd:f0:61:22:e7:7d:89:e1:0a:78:0a:8c:59:bd: 3a:d2:b0:59:07:8c:33:29:12:71:18:db:69:b0:60: 6c:9d:19:05:4a:90:93:74:a6:19:7a:c2:d2:8c:c0: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D7:34:7D:AC:13:34:AE:46:57:1C:28:71:3E:E2:F0:FF:53:6B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:fb:ae:51:d7:0e:dc:f6:04:56:89:05:20:ab:14:96:fa:ca: 77:a3:94:67:e0:ee:a2:61:04:4d:50:aa:05:18:c1:37:22:69: 9d:da:7b:a0:2c:27:59:fb:b1:bb:92:f2:40:60:c6:7d:86:21: a8:cf:dc:56:ab:21:4a:64:63:ce:3e:6f:98:4c:c8:50:dc:3d: f1:16:f9:85:b2:a7:e8:7e:42:cb:bc:eb:23:8f:10:6a:31:9a: 90:ac:ec:9d:f9:87:cb:c4:31:b3:62:ca:ad:a3:28:52:cf:d2: 61:e6:9c:91:8d:ac:76:09:9b:42:bb:6f:27:46:65:76:d9:63: 83:87:11:10:d6:cc:a0:12:26:60:f7:dc:ae:05:9d:a8:e6:94: 41:fd:eb:fc:5f:68:4b:fc:ef:82:d0:ea:2f:84:f7:95:b1:b7: 40:8b:39:3d:15:30:ac:b4:0e:ed:72:77:51:ab:a0:50:a7:30: 5b:19:64:0e:17:eb:54:64:c0:39:5b:c4:54:cb:a1:6d:fb:c0: 4e:11:c4:5b:b7:98:f5:27:cc:d0:13:38:ef:86:d4:ab:2b:59: d1:bf:da:66:1b:eb:7f:9f:23:ba:ae:f4:63:ca:94:bb:18:b9: 3c:06:e4:1b:cb:f5:37:6a:4c:67:92:0e:47:b3:98:3d:4e:e4: 99:85:5b:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TMdJ3b4XiP36BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTczMDEzMjktZWE0OS00MWRiLTg1OTAtNTU1MjZjMWU2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSfZYzJEWx1wpcYzOsW1rQ3+u4/F+lmkp93M 3lGd7S2dlr4sbyUXkNfyK6Smnh3H9wrmBUijMTWViupBDb9Qy6UqxOadsj3QPWuZ jS1ZEyV/SmHtqiXJUKRio+4ZFO6gh84h/JkZ2bFTO6q7LNdFriqsWlHxdMptJuXQ G8KAHIJbHViNJCOqVz8bqTB7T7iS9l3RUOEMTXDMGwug04Ke2Id3Waa2hRiw3Lsh Hm3bnati1OFrTxU5/RIFhP2NCAwxDylUT3vsBVd6n1IC6LU4iI0u3fBhIud9ieEK eAqMWb060rBZB4wzKRJxGNtpsGBsnRkFSpCTdKYZesLSjMCpfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXXNH2sEzSuRlccKHE+4vD/U2syMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWYyMDk0NmYtNTdjMy0z YTgzLTk3YzItNjg5M2M5M2IzOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADL7rlHXDtz2BFaJBSCrFJb6ynejlGfg7qJhBE1QqgUYwTciaZ3a e6AsJ1n7sbuS8kBgxn2GIajP3FarIUpkY84+b5hMyFDcPfEW+YWyp+h+Qsu86yOP EGoxmpCs7J35h8vEMbNiyq2jKFLP0mHmnJGNrHYJm0K7bydGZXbZY4OHERDWzKAS JmD33K4FnajmlEH96/xfaEv874LQ6i+E95Wxt0CLOT0VMKy0Du1yd1GroFCnMFsZ ZA4X61RkwDlbxFTLoW37wE4RxFu3mPUnzNATOO+G1KsrWdG/2mYb63+fI7qu9GPK lLsYuTwG5BvL9TdqTGeSDkezmD1O5JmFW3k= -----END CERTIFICATE-----Generated at Tue Sep 22 06:34:51 2026 by rpki-client