$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa File: 520fa190-52d0-3cd6-8a3c-8938820698fe.roa (raw, json) Hash identifier: CkTTn0S+jI9RHKuIq9jqkQM9vm51NRI9JYAP5nyNPY8= Subject key identifier: 77:D0:8C:37:4D:07:42:E5:A7:1D:03:65:D7:E4:CC:B4:DF:76:44:4C Certificate issuer: /CN=a3095f6b-9f71-441b-8acd-bc18272b938d Certificate serial: 010D0C9F4328584EB57C4608026FCA44A932FF80 Authority key identifier: D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 20473 IP address blocks: 2620:1d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:46:08:02:6f:ca:44:a9:32:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3095f6b-9f71-441b-8acd-bc18272b938d Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=89fda388-5303-490e-8f62-237c65d5d009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:9a:2d:4c:8a:5c:9e:87:b7:94:c6:0f:14: db:25:4e:ec:84:1e:0b:92:5d:2c:89:6b:67:74:f0: 6d:66:43:b0:be:c8:6d:5e:53:25:2d:f7:6c:f5:b8: 9a:25:4e:8e:0a:46:b7:6a:95:e9:d3:76:e3:03:a1: 0d:9d:90:c3:88:ad:ed:a3:3c:98:cc:44:59:99:98: a7:cb:ac:d0:87:d5:54:e9:32:e7:7f:ce:b2:71:d4: 1d:e5:ab:2e:04:b8:76:c3:b9:eb:b9:78:08:fb:9b: f5:0c:f8:87:4f:73:eb:5e:36:4b:9b:ee:07:92:6d: 97:2f:60:52:a8:47:5f:7b:a1:46:c2:0e:d9:e0:f3: cc:ac:f9:75:d6:d1:82:a4:5f:fe:a8:2b:b6:ca:cf: 9c:a6:1b:ba:d0:e7:d4:f3:e2:6a:f5:04:67:f2:e3: 28:05:2f:85:b1:b6:39:94:e3:44:ed:8b:3a:dd:58: 28:a2:4a:9c:c9:ef:f3:72:42:13:9c:51:e2:a1:2e: 97:80:ea:15:18:22:20:9c:63:84:51:7f:40:77:16: 93:8f:f0:c0:6e:3b:60:70:e9:a6:b9:36:fb:6d:c5: fb:db:bd:af:15:78:e1:63:66:75:94:8e:54:67:63: b6:5f:44:08:6d:ea:16:21:73:e3:6a:61:60:28:42: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D0:8C:37:4D:07:42:E5:A7:1D:03:65:D7:E4:CC:B4:DF:76:44:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl X509v3 Authority Key Identifier: keyid:D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9f:d5:41:bc:46:55:59:40:62:db:6d:42:de:1c:d4:77:aa: a2:ae:ac:f6:6f:09:39:53:d9:2a:5c:f7:04:49:a7:d4:0b:6c: 3c:9a:8b:17:af:82:c2:27:71:b7:cb:47:19:b4:58:55:12:5d: 14:31:61:27:f5:20:39:15:bf:fc:87:00:41:fe:05:1c:ca:fc: d5:f0:d1:1c:35:04:33:f2:ba:46:24:1b:a5:98:82:cd:fd:a8: b6:7c:ec:fa:a8:3f:85:f7:8b:29:39:f4:fe:58:a6:0f:d1:87: 22:a4:2f:18:44:80:95:02:e4:c4:5f:c9:c4:51:70:67:1b:25: 70:1b:92:d0:82:9b:ec:b7:66:44:19:ff:1d:d4:a7:b8:02:5d: 79:e5:88:63:b0:a0:3b:df:c5:e9:1c:0a:02:98:3c:e8:19:70: 56:09:1a:5b:4b:c4:b9:f6:69:c3:63:c2:28:74:26:b3:62:57: 1b:fa:13:0e:83:b0:3b:0c:eb:48:c7:3a:10:25:00:f9:fe:11: f1:9a:57:3f:9f:ca:3e:10:cc:98:62:cb:86:31:02:81:62:98: f2:d4:28:07:b7:67:7b:8e:2a:af:b3:fb:e2:2d:2a:5e:1f:5d: 25:85:7b:72:38:6a:83:f5:b8:11:37:fc:22:44:2f:6d:74:0e: b0:ec:4d:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fEYIAm/KRKky/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwOTVmNmItOWY3MS00NDFiLThhY2QtYmMxODI3MmI5 MzhkMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk ODlmZGEzODgtNTMwMy00OTBlLThmNjItMjM3YzY1ZDVkMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2maLUyKXJ6Ht5TGDxTbJU7shB4Lkl0siWtn dPBtZkOwvshtXlMlLfds9biaJU6OCka3apXp03bjA6ENnZDDiK3tozyYzERZmZin y6zQh9VU6TLnf86ycdQd5asuBLh2w7nruXgI+5v1DPiHT3PrXjZLm+4Hkm2XL2BS qEdfe6FGwg7Z4PPMrPl11tGCpF/+qCu2ys+cphu60OfU8+Jq9QRn8uMoBS+FsbY5 lONE7Ys63Vgookqcye/zckITnFHioS6XgOoVGCIgnGOEUX9AdxaTj/DAbjtgcOmm uTb7bcX7272vFXjhY2Z1lI5UZ2O2X0QIbeoWIXPjamFgKEJMXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfQjDdNB0Llpx0DZdfkzLTfdkRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzA5 NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4MjcyYjkzOGQvNTIwZmExOTAtNTJkMC0z Y2Q2LThhM2MtODkzODgyMDY5OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMwOTVmNmItOWY3MS00NDFiLThh Y2QtYmMxODI3MmI5MzhkL2EzMDk1ZjZiLTlmNzEtNDQxYi04YWNkLWJjMTgyNzJi OTM4ZC5jcmwwHwYDVR0jBBgwFoAU2WvBwum2LmiOusYSScwG5/HB04MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hMzA5NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4 MjcyYjkzOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAHaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGaf1UG8RlVZQGLbbULeHNR3qqKurPZvCTlT2Spc9wRJp9QLbDya ixevgsIncbfLRxm0WFUSXRQxYSf1IDkVv/yHAEH+BRzK/NXw0Rw1BDPyukYkG6WY gs39qLZ87PqoP4X3iyk59P5Ypg/RhyKkLxhEgJUC5MRfycRRcGcbJXAbktCCm+y3 ZkQZ/x3Up7gCXXnliGOwoDvfxekcCgKYPOgZcFYJGltLxLn2acNjwih0JrNiVxv6 Ew6DsDsM60jHOhAlAPn+EfGaVz+fyj4QzJhiy4YxAoFimPLUKAe3Z3uOKq+z++It Kl4fXSWFe3I4aoP1uBE3/CJEL210DrDsTZY= -----END CERTIFICATE-----Generated at Fri Sep 4 23:51:33 2026 by rpki-client