$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/4c4981e5-e112-343f-aee7-b9f15d53947c.roa File: 4c4981e5-e112-343f-aee7-b9f15d53947c.roa (raw, json) Hash identifier: JdquwLMyQaNbhkAcTU0CLaXhM7XMK5Gkbnxtmv8ToJo= Subject key identifier: 82:AF:7E:8F:CF:A1:F8:97:54:FC:E1:DB:47:3C:8F:01:CF:B5:57:10 Certificate issuer: /CN=523508d8-5364-4972-acf2-2c22cfac7647 Certificate serial: 010D0C9F4328584ED9C738A085CCF27DE7105B00 Authority key identifier: 51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/4c4981e5-e112-343f-aee7-b9f15d53947c.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 22096 IP address blocks: 2604:9a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:38:a0:85:cc:f2:7d:e7:10:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523508d8-5364-4972-acf2-2c22cfac7647 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=72a6c6bb-7ded-4907-8f01-1a79eafcb9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:c0:36:5d:a3:e8:62:d6:e0:06:10:8c:81: d5:bf:85:18:c3:7c:7d:24:f6:ec:29:bf:10:cf:96: 57:77:7c:49:2f:8d:ab:62:8d:79:ac:c4:fa:a2:b6: ce:42:d7:71:66:a1:bf:02:02:18:ec:5c:37:7e:77: 93:43:d2:8f:45:cf:04:e4:05:25:6d:1b:1a:f9:5a: ea:44:4f:ef:4f:6e:8b:bf:2c:72:49:cc:23:a0:1e: 47:7b:75:a2:b0:a6:c5:ce:08:7a:3c:d7:55:ba:7a: 4e:60:4c:a7:d2:49:f6:af:7c:a2:eb:1f:36:f1:61: 5b:3a:99:42:14:e1:65:7f:3f:2f:6c:83:47:44:f2: 50:00:6f:1b:e7:75:17:cb:49:b4:7b:99:cc:49:27: a8:9d:37:28:25:91:ad:f0:4f:49:c3:af:97:5c:e0: 83:e7:e1:36:d4:03:9b:9c:19:c9:92:4c:36:31:0a: 10:6b:0c:43:68:00:fc:c9:9c:2d:cc:97:6c:80:65: 26:34:25:c5:65:84:9c:6e:96:c4:4b:ba:c7:19:95: 2f:6b:61:6d:91:9d:b7:8c:a1:93:3a:e0:7e:0e:26: 47:0f:41:1b:12:ed:aa:03:11:38:8f:94:89:66:5c: 55:9b:98:62:d5:46:34:32:25:13:92:45:0b:3f:01: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:7E:8F:CF:A1:F8:97:54:FC:E1:DB:47:3C:8F:01:CF:B5:57:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/4c4981e5-e112-343f-aee7-b9f15d53947c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647/523508d8-5364-4972-acf2-2c22cfac7647.crl X509v3 Authority Key Identifier: keyid:51:3A:99:FC:8D:2F:D8:95:A1:1D:08:B0:CF:2D:AE:E1:71:39:C6:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/523508d8-5364-4972-acf2-2c22cfac7647.cer sbgp-ipAddrBlock: critical IPv6: 2604:9a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:34:68:64:18:b0:5b:d0:36:cc:f3:a5:e9:f6:47:3c:f3:a7: d2:cd:e7:69:f7:9d:ee:40:a6:dd:75:5e:2e:d3:dd:1d:88:2e: 55:2e:8b:4c:a0:37:28:1e:6c:fd:67:40:c1:ad:94:86:38:28: 9d:6e:41:fb:c1:c1:6c:2d:31:14:ae:a9:0b:42:ab:a2:99:18: 4a:dc:07:7b:e9:a5:53:0e:e0:ce:74:41:20:eb:3b:16:16:ed: 83:54:6b:b2:92:39:2d:e0:ff:f3:84:6b:55:77:97:68:7b:1a: aa:c0:c4:21:32:fc:d6:12:ad:62:b3:40:21:2b:3c:5f:ff:5f: 75:a6:aa:8a:b6:00:46:9d:2a:2b:60:22:08:09:45:4b:15:f5: 9f:c6:c9:f3:c3:97:c1:16:89:80:2d:fd:c1:24:bf:18:54:85: 98:f4:67:8b:62:f9:44:24:d4:98:41:af:bc:e2:e1:f8:59:69: 5c:bf:ea:28:30:55:09:cd:6d:70:ec:87:f3:14:2e:80:39:b2: ad:42:ba:f4:78:c4:b5:4f:78:16:5b:b9:28:61:de:bd:f5:21: 6d:ac:ed:ab:68:d1:9d:40:e1:a2:ca:b1:d9:a5:79:7f:1d:08: 5d:ea:e8:51:e1:6f:eb:1f:45:51:05:3b:99:aa:aa:f2:3e:6b: a8:8e:a1:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7ZxzighczyfecQWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTA4ZDgtNTM2NC00OTcyLWFjZjItMmMyMmNmYWM3 NjQ3MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NzJhNmM2YmItN2RlZC00OTA3LThmMDEtMWE3OWVhZmNiOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKzANl2j6GLW4AYQjIHVv4UYw3x9JPbsKb8Q z5ZXd3xJL42rYo15rMT6orbOQtdxZqG/AgIY7Fw3fneTQ9KPRc8E5AUlbRsa+Vrq RE/vT26LvyxyScwjoB5He3WisKbFzgh6PNdVunpOYEyn0kn2r3yi6x828WFbOplC FOFlfz8vbINHRPJQAG8b53UXy0m0e5nMSSeonTcoJZGt8E9Jw6+XXOCD5+E21AOb nBnJkkw2MQoQawxDaAD8yZwtzJdsgGUmNCXFZYScbpbES7rHGZUva2FtkZ23jKGT OuB+DiZHD0EbEu2qAxE4j5SJZlxVm5hi1UY0MiUTkkULPwHKzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIKvfo/PofiXVPzh20c8jwHPtVcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MjM1 MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIyY2ZhYzc2NDcvNGM0OTgxZTUtZTExMi0z NDNmLWFlZTctYjlmMTVkNTM5NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTIzNTA4ZDgtNTM2NC00OTcyLWFj ZjItMmMyMmNmYWM3NjQ3LzUyMzUwOGQ4LTUzNjQtNDk3Mi1hY2YyLTJjMjJjZmFj NzY0Ny5jcmwwHwYDVR0jBBgwFoAUUTqZ/I0v2JWhHQiwzy2u4XE5xvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MjM1MDhkOC01MzY0LTQ5NzItYWNmMi0yYzIy Y2ZhYzc2NDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQJoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuNGhkGLBb0DbM86Xp9kc886fSzedp953uQKbddV4u090diC5VLotM oDcoHmz9Z0DBrZSGOCidbkH7wcFsLTEUrqkLQquimRhK3Ad76aVTDuDOdEEg6zsW Fu2DVGuykjkt4P/zhGtVd5doexqqwMQhMvzWEq1is0AhKzxf/191pqqKtgBGnSor YCIICUVLFfWfxsnzw5fBFomALf3BJL8YVIWY9GeLYvlEJNSYQa+84uH4WWlcv+oo MFUJzW1w7IfzFC6AObKtQrr0eMS1T3gWW7koYd699SFtrO2raNGdQOGiyrHZpXl/ HQhd6uhR4W/rH0VRBTuZqqryPmuojqFU -----END CERTIFICATE-----Generated at Wed Aug 26 14:52:20 2026 by rpki-client