$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: EmtVSsToD/yHwzNld31AjHcqzWBqMTFn31Wwc1m+VeU= Subject key identifier: 1E:68:CC:B5:B8:3B:3C:BC:BD:E7:66:AB:BF:B9:F2:5E:DF:54:B9:B5 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584EC7A1D35762ED9461CB56A600 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d3:57:62:ed:94:61:cb:56:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=4878381b-02cc-4494-bcac-b36865d8a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:64:ce:47:f0:f0:d0:4b:60:7b:1c:7b:40: d2:56:7c:b8:3c:54:16:29:d1:1d:90:93:55:55:06: d7:7f:f2:62:1a:13:99:7d:f4:66:e3:80:31:56:2b: 1b:9d:93:bb:17:76:bc:8d:87:d3:06:d9:36:51:7a: 39:28:0e:b7:a1:fc:b4:bb:68:3f:6a:7b:5f:37:03: a6:ca:56:f8:b1:7b:34:a5:c4:38:9d:7c:a2:0e:e4: 16:2a:b7:f5:99:da:8b:6a:51:87:89:7e:b9:be:23: d5:29:1f:1c:77:60:71:46:63:6f:25:30:fe:50:97: 9a:0e:ef:7d:ac:f3:e8:04:23:03:68:20:90:49:0b: 9a:d6:fe:95:64:2e:53:64:97:17:0b:8f:b1:34:5f: bc:2e:52:44:0e:88:e9:14:02:c1:79:82:de:15:17: 24:9c:ee:56:b9:77:e9:5a:df:55:86:e2:5b:a2:cf: 4e:a3:bc:8f:fd:48:49:ce:b9:1e:ab:08:c4:48:17: 23:d0:96:e9:3e:a8:b5:8a:4c:ee:41:95:80:a0:e2: f2:27:2a:cd:1a:fd:38:db:fd:66:00:ca:3c:cb:c3: fc:63:a9:4c:3f:69:f9:61:42:c6:ef:be:f8:0c:ef: 74:e8:d1:86:c0:f3:df:49:d0:c0:4b:1c:37:22:fa: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:68:CC:B5:B8:3B:3C:BC:BD:E7:66:AB:BF:B9:F2:5E:DF:54:B9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f9:22:3c:9b:89:e5:72:f8:b4:57:33:d5:c8:50:8a:0f:c3: c6:20:25:55:dc:1e:2e:3e:ae:53:b9:d6:64:dc:05:d6:8d:24: 37:89:ea:68:b1:22:f7:43:83:07:bc:0c:fb:09:fb:8c:9c:88: 48:37:58:db:a6:c3:aa:75:a9:24:59:bf:97:a2:dc:8b:f1:88: f3:b1:bd:84:0c:05:8e:95:47:b9:a2:8e:91:77:7b:79:a6:14: 0b:4d:ca:1f:3e:1c:a1:53:63:2d:48:8b:6d:50:35:7d:75:bd: 9a:69:b8:7a:81:31:7f:46:6f:c3:83:b6:ea:4e:a8:12:35:84: e0:8b:c2:40:ea:61:9c:6b:b7:9f:05:dc:67:9b:09:2e:fe:86: 77:00:a5:a1:ab:3a:6a:31:3c:d0:8b:12:4f:67:06:21:cb:0b: b4:64:52:5f:6e:56:b2:2f:6f:dc:26:d6:3e:a2:c6:61:a8:13: 1f:f2:24:6d:91:9d:2c:2e:82:e1:b6:be:30:7a:67:22:47:ef: e7:ad:04:48:ea:eb:97:ba:a1:2e:d3:6c:a1:94:1a:41:ab:5a: 98:44:2a:ee:e5:3a:62:72:2c:f6:77:5b:db:4c:b9:cd:99:3c: f5:3f:63:25:2f:ad:17:af:42:cb:bb:c4:89:14:38:93:84:49: b1:8c:2d:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7HodNXYu2UYctWpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NDg3ODM4MWItMDJjYy00NDk0LWJjYWMtYjM2ODY1ZDhhN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKVkzkfw8NBLYHsce0DSVny4PFQWKdEdkJNV VQbXf/JiGhOZffRm44AxVisbnZO7F3a8jYfTBtk2UXo5KA63ofy0u2g/antfNwOm ylb4sXs0pcQ4nXyiDuQWKrf1mdqLalGHiX65viPVKR8cd2BxRmNvJTD+UJeaDu99 rPPoBCMDaCCQSQua1v6VZC5TZJcXC4+xNF+8LlJEDojpFALBeYLeFRcknO5WuXfp Wt9VhuJbos9Oo7yP/UhJzrkeqwjESBcj0JbpPqi1ikzuQZWAoOLyJyrNGv042/1m AMo8y8P8Y6lMP2n5YULG7774DO906NGGwPPfSdDASxw3IvqA/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5ozLW4Ozy8vedmq7+58l7fVLm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIn5IjybieVy+LRXM9XIUIoPw8YgJVXcHi4+rlO51mTcBdaNJDeJ 6mixIvdDgwe8DPsJ+4yciEg3WNumw6p1qSRZv5ei3IvxiPOxvYQMBY6VR7mijpF3 e3mmFAtNyh8+HKFTYy1Ii21QNX11vZppuHqBMX9Gb8ODtupOqBI1hOCLwkDqYZxr t58F3GebCS7+hncApaGrOmoxPNCLEk9nBiHLC7RkUl9uVrIvb9wm1j6ixmGoEx/y JG2RnSwuguG2vjB6ZyJH7+etBEjq65e6oS7TbKGUGkGrWphEKu7lOmJyLPZ3W9tM uc2ZPPU/YyUvrRevQsu7xIkUOJOESbGMLWA= -----END CERTIFICATE-----Generated at Fri Aug 21 22:07:56 2026 by rpki-client