$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa File: 899bf378-ed1a-35b3-890b-9f42089f212d.roa (raw, json) Hash identifier: cmllsdnpdE5EgiQbjVDnfMZ0keAq6T8E16acE9meYPw= Subject key identifier: 43:F6:00:80:06:67:76:81:A4:CD:8E:83:96:C3:12:9D:8E:E9:DB:48 Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Certificate serial: 010D0C9F4328584ED9C7513B31EBF2F6A46B1780 Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 395651 IP address blocks: 2620:13:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:51:3b:31:eb:f2:f6:a4:6b:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=e31a3656-966e-4ff4-be47-3575f06ae8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:76:70:99:0c:e5:4f:01:bc:af:7d:6a:71: 55:fb:9b:60:ec:b7:de:c7:89:cc:e7:96:76:7d:a4: 3d:2e:76:3f:3c:eb:42:e9:45:1a:40:94:d0:0a:8a: e3:93:7d:46:d4:e5:52:8f:26:b2:37:80:27:36:6e: e2:cc:71:3e:a0:ff:6c:f6:f8:df:fc:56:4f:45:1e: 69:d0:40:6c:b4:bb:95:43:9e:af:48:47:2a:24:8e: a0:33:64:15:10:e8:5e:63:2c:4d:cc:0c:ea:d0:00: 58:5b:aa:a2:c1:8a:e2:17:4a:f4:83:7c:2c:87:c2: 65:04:a6:47:04:d0:17:98:58:31:02:e7:a7:8a:d3: 36:f5:8e:0a:b4:c4:0b:a1:19:8e:a4:dc:47:2a:3d: 3d:f2:91:e5:0e:8f:ea:b6:e0:3b:39:5b:1a:26:de: 65:88:f0:4c:22:35:51:eb:a9:b4:10:72:68:45:11: 38:34:45:ee:c8:c1:10:b5:81:c5:f6:91:c7:a3:65: 5c:f7:2a:25:76:a9:49:a0:8c:25:8f:79:0f:4d:85: 56:e3:a6:da:7a:9a:9a:22:62:9d:c9:b4:78:5d:e0: 8f:f9:8a:0d:ac:6c:2b:b4:b7:e4:93:31:d9:37:5e: d9:a2:cf:4f:a2:7b:65:78:10:92:89:5e:af:66:64: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:00:80:06:67:76:81:A4:CD:8E:83:96:C3:12:9D:8E:E9:DB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/899bf378-ed1a-35b3-890b-9f42089f212d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl X509v3 Authority Key Identifier: keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer sbgp-ipAddrBlock: critical IPv6: 2620:13:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2b:c0:a2:11:9d:8b:f3:28:af:7c:1f:bd:fc:d4:1a:01:b6: 07:a0:6b:18:66:30:d6:76:c2:56:74:ce:10:6a:3e:50:54:64: 9f:81:db:75:d5:77:25:38:10:7a:6b:39:39:80:e4:50:85:84: 45:f3:08:d2:9f:46:3b:ca:1a:1b:59:5c:d9:ad:e5:59:59:27: 50:2a:45:d4:04:62:1a:40:49:7c:7b:fa:7a:12:16:a3:f2:8a: 46:10:fa:1a:e0:98:11:22:36:84:fc:4f:38:9a:cd:c3:f0:42: c8:7b:7a:b9:f5:71:43:61:54:fd:6a:21:7b:70:2c:8d:c5:28: ab:5c:2f:41:8f:12:c3:5f:77:e0:6c:e3:80:fd:b6:41:d9:ad: cc:12:57:6d:e3:c7:53:5f:9e:0a:a0:db:4f:63:a1:86:0d:9f: 80:fe:ed:5b:09:d8:5e:d1:4b:d1:9d:22:7b:42:de:60:40:77: 34:e9:4d:3e:6c:75:41:99:22:25:f9:0e:26:e4:6f:59:b8:87: f0:f7:d3:e3:d5:5f:b9:3c:2d:92:e4:5b:48:88:f0:1c:88:88: e0:78:9a:0a:74:8b:76:31:46:2b:46:2b:98:9d:f0:01:41:6e: 78:fd:be:40:af:1a:c0:c1:0b:6d:0b:1d:21:b7:12:82:0c:86: 3c:54:ee:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zx1E7Mevy9qRrF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1 ZTgzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZTMxYTM2NTYtOTY2ZS00ZmY0LWJlNDctMzU3NWYwNmFlOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAist2cJkM5U8BvK99anFV+5tg7Lfex4nM55Z2 faQ9LnY/POtC6UUaQJTQCorjk31G1OVSjyayN4AnNm7izHE+oP9s9vjf/FZPRR5p 0EBstLuVQ56vSEcqJI6gM2QVEOheYyxNzAzq0ABYW6qiwYriF0r0g3wsh8JlBKZH BNAXmFgxAuenitM29Y4KtMQLoRmOpNxHKj098pHlDo/qtuA7OVsaJt5liPBMIjVR 66m0EHJoRRE4NEXuyMEQtYHF9pHHo2Vc9yoldqlJoIwlj3kPTYVW46baepqaImKd ybR4XeCP+YoNrGwrtLfkkzHZN17Zos9PontleBCSiV6vZmQt5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEP2AIAGZ3aBpM2Og5bDEp2O6dtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvODk5YmYzNzgtZWQxYS0z NWIzLTg5MGItOWY0MjA4OWYyMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0 YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5 NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3 ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAE6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIErwKIRnYvzKK98H7381BoBtgegaxhmMNZ2wlZ0zhBqPlBUZJ+B 23XVdyU4EHprOTmA5FCFhEXzCNKfRjvKGhtZXNmt5VlZJ1AqRdQEYhpASXx7+noS FqPyikYQ+hrgmBEiNoT8TziazcPwQsh7ern1cUNhVP1qIXtwLI3FKKtcL0GPEsNf d+Bs44D9tkHZrcwSV23jx1Nfngqg209joYYNn4D+7VsJ2F7RS9GdIntC3mBAdzTp TT5sdUGZIiX5Dibkb1m4h/D30+PVX7k8LZLkW0iI8ByIiOB4mgp0i3YxRitGK5id 8AFBbnj9vkCvGsDBC20LHSG3EoIMhjxU7ns= -----END CERTIFICATE-----Generated at Fri Aug 21 21:28:26 2026 by rpki-client