$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa File: d8a173ca-02fa-389c-b171-dda8cd84ea02.roa (raw, json) Hash identifier: BNbFN3fFzYNxT2awcW/09djrt1b4e2OFzIDW2E6dc4Q= Subject key identifier: F4:BA:D6:9D:AC:16:60:36:5A:DE:F8:25:9E:F4:CD:50:C6:E3:59:EE Certificate issuer: /CN=28a07a92-b34f-4d9e-95fa-aa1053700a79 Certificate serial: 010D0C9F4328584EA79A0504034CED7CC6AB43E0 Authority key identifier: 1E:77:68:D4:07:7F:0F:FF:7D:3D:7F:E3:C4:46:95:12:0D:F6:9B:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400535 IP address blocks: 2606:5880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:05:04:03:4c:ed:7c:c6:ab:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a07a92-b34f-4d9e-95fa-aa1053700a79 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a521d9d0-bcc9-4ca8-86d9-7bfa59fa000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:f6:93:19:51:83:a0:7e:f9:1f:c8:40:98: ae:e8:a0:ad:38:19:e5:7f:f5:29:31:88:fa:88:d4: 6c:77:59:b4:a8:75:52:e8:19:7c:8a:e8:1d:ed:55: 3f:6c:ae:d6:3e:2f:93:f4:86:92:5f:59:67:63:58: 0b:c6:25:f2:7e:63:29:1d:f5:de:1b:ec:1d:ac:76: 36:c8:4a:6d:23:3e:d7:56:e7:31:2e:ee:79:62:c9: 95:c4:74:c7:07:73:67:b3:db:4b:6f:b7:be:61:81: 80:19:62:13:41:e9:66:73:80:67:91:3c:94:de:82: db:19:4b:ae:ff:f9:35:bd:4c:ba:81:a6:66:37:dd: b0:10:d1:cb:85:f5:b7:56:94:35:82:c1:d3:92:cc: a7:d1:80:35:fa:ba:cf:c3:d2:ab:4a:c2:68:c4:78: ca:0d:ac:b5:ea:f9:38:50:ff:6e:47:9d:0a:c5:a6: 30:09:46:80:d9:99:d8:0b:c6:f5:58:02:83:e3:d4: 1c:0d:ff:74:b2:e7:63:5c:1c:2b:7a:d2:64:05:b1: aa:cd:cb:29:68:cd:37:69:af:57:eb:70:db:7b:d2: 8c:06:ae:dc:f5:33:fe:24:a5:20:fd:56:f5:89:2f: c0:a8:37:1e:3f:c1:c5:54:46:27:83:c3:a0:62:e8: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:D6:9D:AC:16:60:36:5A:DE:F8:25:9E:F4:CD:50:C6:E3:59:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.crl X509v3 Authority Key Identifier: keyid:1E:77:68:D4:07:7F:0F:FF:7D:3D:7F:E3:C4:46:95:12:0D:F6:9B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer sbgp-ipAddrBlock: critical IPv6: 2606:5880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:86:fb:66:82:c5:7c:de:43:29:bc:7b:1b:9c:22:17:6a:26: 84:59:a1:cb:cd:da:24:e0:f8:99:65:9c:22:fa:f3:67:90:5c: 87:1f:96:76:0f:83:d0:f6:0a:1f:d8:b8:89:45:e4:2d:4f:ad: 5c:75:1f:ce:5f:0e:6e:f2:4d:53:c4:d6:5d:a1:71:6d:cc:4e: 61:a6:87:cf:04:e4:27:8f:aa:e8:2d:38:0e:9d:5b:db:8a:9b: d4:6b:72:66:ad:21:e7:7f:26:59:6d:5b:8e:8d:5a:57:45:93: ef:ec:08:66:c8:58:5c:8d:e8:ca:3b:7d:4e:3c:99:92:ec:8b: 41:8e:0f:4d:3a:c2:58:d2:25:37:cb:ad:29:7f:01:df:64:78: 03:a8:a8:f9:24:cc:60:70:58:57:d9:0b:de:19:2f:1e:3c:94: 75:cc:25:62:87:ee:a7:f5:aa:c2:76:37:f7:89:97:69:80:93: 2e:e3:d6:c1:bc:f2:d4:b9:a2:33:9e:68:ee:31:fd:d9:ee:c1: 03:25:e3:28:47:2e:9c:46:22:ba:1a:5d:76:66:ca:45:31:ba: 33:2b:18:7e:14:ba:9f:22:8f:01:d9:8f:7f:34:fa:2c:98:50: 8f:ad:0d:3b:1b:75:fc:bb:c5:ae:a1:45:87:07:59:02:87:0e: 79:88:3b:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nmgUEA0ztfMarQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMDdhOTItYjM0Zi00ZDllLTk1ZmEtYWExMDUzNzAw YTc5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTUyMWQ5ZDAtYmNjOS00Y2E4LTg2ZDktN2JmYTU5ZmEwMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBf2kxlRg6B++R/IQJiu6KCtOBnlf/UpMYj6 iNRsd1m0qHVS6Bl8iugd7VU/bK7WPi+T9IaSX1lnY1gLxiXyfmMpHfXeG+wdrHY2 yEptIz7XVucxLu55YsmVxHTHB3Nns9tLb7e+YYGAGWITQelmc4BnkTyU3oLbGUuu //k1vUy6gaZmN92wENHLhfW3VpQ1gsHTksyn0YA1+rrPw9KrSsJoxHjKDay16vk4 UP9uR50KxaYwCUaA2ZnYC8b1WAKD49QcDf90sudjXBwretJkBbGqzcspaM03aa9X 63Dbe9KMBq7c9TP+JKUg/Vb1iS/AqDceP8HFVEYng8OgYughDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPS61p2sFmA2Wt74JZ70zVDG41nuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yOGEw N2E5Mi1iMzRmLTRkOWUtOTVmYS1hYTEwNTM3MDBhNzkvZDhhMTczY2EtMDJmYS0z ODljLWIxNzEtZGRhOGNkODRlYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjhhMDdhOTItYjM0Zi00ZDllLTk1 ZmEtYWExMDUzNzAwYTc5LzI4YTA3YTkyLWIzNGYtNGQ5ZS05NWZhLWFhMTA1Mzcw MGE3OS5jcmwwHwYDVR0jBBgwFoAUHndo1Ad/D/99PX/jxEaVEg32mxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yOGEwN2E5Mi1iMzRmLTRkOWUtOTVmYS1hYTEw NTM3MDBhNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZYgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArhvtmgsV83kMpvHsbnCIXaiaEWaHLzdok4PiZZZwi+vNnkFyHH5Z2 D4PQ9gof2LiJReQtT61cdR/OXw5u8k1TxNZdoXFtzE5hpofPBOQnj6roLTgOnVvb ipvUa3JmrSHnfyZZbVuOjVpXRZPv7AhmyFhcjejKO31OPJmS7ItBjg9NOsJY0iU3 y60pfwHfZHgDqKj5JMxgcFhX2QveGS8ePJR1zCVih+6n9arCdjf3iZdpgJMu49bB vPLUuaIznmjuMf3Z7sEDJeMoRy6cRiK6Gl12ZspFMbozKxh+FLqfIo8B2Y9/NPos mFCPrQ07G3X8u8WuoUWHB1kChw55iDtb -----END CERTIFICATE-----Generated at Fri Sep 4 22:14:15 2026 by rpki-client