$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa File: f3d9dbf9-0454-3830-b46b-05b5333a1441.roa (raw, json) Hash identifier: j11PXtmDi5s/4QYK82q7/cwIDeC1QzC/GZPSCIg6sKo= Subject key identifier: 94:66:A5:95:E7:F7:BC:CF:E2:09:1B:96:A9:F2:E6:57:19:61:CC:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EFE122F5B2B1E97D7F846C9C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 2606:4700:311c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2f:5b:2b:1e:97:d7:f8:46:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=5cfc0780-628c-416f-bc70-c034c54457bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:c3:84:d7:fc:73:0b:de:97:1a:48:5c:85: 61:97:89:14:ea:22:42:22:98:76:f2:8d:9e:f5:ee: af:5c:70:72:90:ea:d4:29:c3:ae:0b:b9:a5:98:9e: 0b:9f:ee:c7:0d:11:df:45:7a:f6:fc:88:f9:e8:88: 8c:fc:30:fd:90:ec:b0:3a:7c:b6:e6:0e:5c:01:26: 95:78:c0:79:21:57:f8:bd:eb:32:6f:ce:d7:59:4a: f6:07:2d:0a:04:2a:68:c7:1b:dc:54:e8:c9:a5:c9: c0:2e:e1:5c:a2:b0:6e:f0:91:c1:1a:86:a7:3e:77: d6:a3:9f:23:45:ce:d2:a1:90:e0:52:52:09:9f:88: 3b:37:bd:a0:74:5e:ff:00:82:98:73:7e:55:1e:84: 67:a2:7f:59:7b:9c:3d:ad:a5:35:4c:6e:ed:fe:14: 31:6a:5f:df:56:20:f6:6c:fe:ae:49:59:bf:d1:75: 79:fb:b7:9c:78:a5:b4:13:bd:3d:42:7e:85:c3:06: 3a:18:a7:5b:89:80:52:21:0b:e8:76:7d:5d:09:a9: ab:28:77:20:1d:65:74:e9:d1:9a:15:f1:40:6f:2d: 13:3f:b6:3f:8a:0f:6b:de:e2:08:08:9b:95:27:20: 53:aa:f0:51:50:b4:e3:1c:af:93:a5:e4:76:2e:2d: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:66:A5:95:E7:F7:BC:CF:E2:09:1B:96:A9:F2:E6:57:19:61:CC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:311c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:61:ea:c1:25:9e:2b:3e:73:04:8a:b5:f8:ca:4a:69:90:3a: bd:42:76:eb:41:ee:ed:36:88:0a:0b:95:d9:f3:5e:8f:15:f7: ae:63:5e:68:8a:8c:8f:7e:30:8f:06:8a:04:1a:1d:27:43:b8: 1d:5b:81:60:b1:1e:b8:32:95:50:a1:2f:dd:a7:06:2c:e9:0b: dd:71:0b:4d:49:1c:bd:7c:68:2a:cd:40:cb:c7:6a:b0:f6:7b: 0d:8b:f8:70:fd:4e:58:d1:38:c0:48:e0:33:f3:43:d7:dc:0e: 1f:17:a8:06:ae:ad:01:31:3e:36:a0:a5:99:d7:69:c9:91:ad: 71:3f:58:bd:93:f5:6a:d6:b8:9a:77:4f:76:d4:fa:94:c8:2a: d5:29:80:9f:28:34:3d:e0:52:0e:27:1e:c8:ad:67:83:06:4e: 9d:53:9a:ff:6d:e7:8d:62:57:b9:ae:91:d0:37:ba:6e:fb:1a: 1b:87:7c:64:9d:48:7d:94:0f:92:e6:b1:7b:ca:13:ba:75:c0: fd:cb:94:08:1d:94:38:ca:3a:0a:6d:7d:aa:8e:32:76:bf:e7: 3b:8b:94:c3:1d:95:85:79:6c:33:52:3e:14:49:73:43:00:67: c0:48:8b:8d:c5:97:b7:4f:ba:d8:a4:23:6a:0f:58:2a:a8:e0: 09:74:82:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7+Ei9bKx6X1/hGycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NWNmYzA3ODAtNjI4Yy00MTZmLWJjNzAtYzAzNGM1NDQ1N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd/DhNf8cwvelxpIXIVhl4kU6iJCIph28o2e 9e6vXHBykOrUKcOuC7mlmJ4Ln+7HDRHfRXr2/Ij56IiM/DD9kOywOny25g5cASaV eMB5IVf4vesyb87XWUr2By0KBCpoxxvcVOjJpcnALuFcorBu8JHBGoanPnfWo58j Rc7SoZDgUlIJn4g7N72gdF7/AIKYc35VHoRnon9Ze5w9raU1TG7t/hQxal/fViD2 bP6uSVm/0XV5+7eceKW0E709Qn6FwwY6GKdbiYBSIQvodn1dCamrKHcgHWV06dGa FfFAby0TP7Y/ig9r3uIICJuVJyBTqvBRULTjHK+TpeR2Li0eTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJRmpZXn97zP4gkblqny5lcZYcynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjNkOWRiZjktMDQ1NC0z ODMwLWI0NmItMDViNTMzM2ExNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADEc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENh6sElnis+cwSKtfjKSmmQOr1CdutB7u02iAoLldnzXo8V965j XmiKjI9+MI8GigQaHSdDuB1bgWCxHrgylVChL92nBizpC91xC01JHL18aCrNQMvH arD2ew2L+HD9TljROMBI4DPzQ9fcDh8XqAaurQExPjagpZnXacmRrXE/WL2T9WrW uJp3T3bU+pTIKtUpgJ8oND3gUg4nHsitZ4MGTp1Tmv9t541iV7mukdA3um77GhuH fGSdSH2UD5LmsXvKE7p1wP3LlAgdlDjKOgptfaqOMna/5zuLlMMdlYV5bDNSPhRJ c0MAZ8BIi43Fl7dPutikI2oPWCqo4Al0gkk= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:38 2026 by rpki-client