$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa File: d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa (raw, json) Hash identifier: RLz1E3Fs+VEx+yPbGp9tzL2p6vRc5KkPiZbUIJ1c3bg= Subject key identifier: 52:7F:E7:BD:E4:40:7E:8E:8E:AA:50:88:B8:2A:B5:C4:86:17:15:77 Certificate issuer: /CN=a327249c-db27-40a5-b04c-da03ae2d60a8 Certificate serial: 010D0C9F4328584EDB2C8927A6C1E60BDA6A3C00 Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 402647 IP address blocks: 2607:9440::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:89:27:a6:c1:e6:0b:da:6a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=ae6aa16a-98a5-4fc1-ba0d-ad8cd30416c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:29:bd:80:dc:2d:59:78:82:c0:1d:e0:90:39: 57:0c:c1:9e:e1:24:a7:39:b2:d9:a0:73:0a:6e:73: 76:6f:27:6a:f1:19:2c:be:b2:49:f0:12:45:91:2b: 83:75:02:d1:01:1d:fa:d3:7f:87:26:9b:b5:34:9a: 78:16:af:4a:3c:39:57:36:99:37:68:1e:8f:79:c5: 3a:a8:7c:39:c7:1b:b6:fb:1e:73:9e:ef:87:37:e4: 06:96:62:f7:da:4d:68:86:cc:58:5f:5e:72:d2:83: bf:03:df:3f:b3:a8:99:06:dc:90:aa:57:0b:c7:56: b7:84:23:fb:e2:ea:9f:45:5a:76:16:64:27:68:8f: 72:14:e7:b7:58:ed:ce:3e:ba:8e:f3:e1:2b:6c:7a: d3:35:f3:59:00:a2:7e:c6:51:53:2b:ba:d4:e3:40: b5:89:3f:9b:f7:b0:5d:8c:93:17:5d:21:1d:00:db: 82:d9:62:13:13:71:83:3e:94:93:d0:ac:d2:c8:80: cf:5a:82:52:93:5d:de:fd:fe:ef:86:4e:72:75:83: 97:3e:37:85:39:31:35:19:c8:6a:9b:5f:93:81:25: a3:88:0d:11:0d:f6:41:7a:c4:36:04:27:c5:95:61: dc:b5:74:da:d1:39:1d:b5:1f:18:5a:dc:db:8a:48: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:E7:BD:E4:40:7E:8E:8E:AA:50:88:B8:2A:B5:C4:86:17:15:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl X509v3 Authority Key Identifier: keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer sbgp-ipAddrBlock: critical IPv6: 2607:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:38:f0:fc:85:5e:bc:81:ce:66:a4:23:e5:84:17:73:b8:64: 58:ce:2d:cb:2c:28:1e:50:55:b4:78:88:05:92:66:b8:5a:10: 67:ea:3f:ac:fc:88:36:f2:d4:82:a0:d1:a2:b6:e7:bc:23:59: 94:3b:fd:7f:97:14:1e:d5:bc:d7:44:e6:e5:5a:b7:b4:25:01: 6e:0b:51:ca:60:c7:b2:05:6a:0e:86:22:a5:da:a5:9e:b7:a2: 26:63:ae:49:ef:de:8e:19:c6:e2:f8:02:5c:8f:c1:12:bd:c7: a1:51:2b:57:58:e7:c2:39:44:99:09:c8:72:c2:5a:0e:4f:fa: b7:2e:e0:a4:32:88:38:dd:15:f5:3b:e8:57:55:fd:ce:56:9a: 41:bd:49:ab:1a:ce:5a:4e:03:25:c9:46:b8:a9:01:49:4f:d2: 4b:bb:6d:58:fe:00:19:ff:c0:e1:06:68:22:7d:ae:1b:c5:04: 0c:13:f8:ee:19:b5:a2:23:20:4e:fc:d7:b4:93:d8:a0:5a:9c: 3f:ac:85:a8:56:63:6c:d3:91:98:e7:1f:11:5c:1c:4a:cf:1a: de:e0:6a:ab:be:ae:99:dc:06:47:1d:67:25:4b:72:78:f6:ac: e1:b3:0f:8e:9e:54:1c:ad:80:09:35:33:a4:06:c7:82:0d:56: 47:23:83:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7bLIknpsHmC9pqPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyNzI0OWMtZGIyNy00MGE1LWIwNGMtZGEwM2FlMmQ2 MGE4MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk YWU2YWExNmEtOThhNS00ZmMxLWJhMGQtYWQ4Y2QzMDQxNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCm9gNwtWXiCwB3gkDlXDMGe4SSnObLZoHMK bnN2bydq8RksvrJJ8BJFkSuDdQLRAR3603+HJpu1NJp4Fq9KPDlXNpk3aB6PecU6 qHw5xxu2+x5znu+HN+QGlmL32k1ohsxYX15y0oO/A98/s6iZBtyQqlcLx1a3hCP7 4uqfRVp2FmQnaI9yFOe3WO3OPrqO8+ErbHrTNfNZAKJ+xlFTK7rU40C1iT+b97Bd jJMXXSEdANuC2WITE3GDPpST0KzSyIDPWoJSk13e/f7vhk5ydYOXPjeFOTE1Gchq m1+TgSWjiA0RDfZBesQ2BCfFlWHctXTa0TkdtR8YWtzbikjmGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFJ/573kQH6OjqpQiLgqtcSGFxV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzI3 MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAzYWUyZDYwYTgvZDdlNjgxYmItYTQxOS0z ZTUyLWI3MWQtZmY1ZTdhZGRiZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMyNzI0OWMtZGIyNy00MGE1LWIw NGMtZGEwM2FlMmQ2MGE4L2EzMjcyNDljLWRiMjctNDBhNS1iMDRjLWRhMDNhZTJk NjBhOC5jcmwwHwYDVR0jBBgwFoAU6yYZlo4EMLUJJ9kFyamzCKIGx2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hMzI3MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAz YWUyZDYwYTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeUQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/OPD8hV68gc5mpCPlhBdzuGRYzi3LLCgeUFW0eIgFkma4WhBn6j+s /Ig28tSCoNGitue8I1mUO/1/lxQe1bzXROblWre0JQFuC1HKYMeyBWoOhiKl2qWe t6ImY65J796OGcbi+AJcj8ESvcehUStXWOfCOUSZCchywloOT/q3LuCkMog43RX1 O+hXVf3OVppBvUmrGs5aTgMlyUa4qQFJT9JLu21Y/gAZ/8DhBmgifa4bxQQME/ju GbWiIyBO/Ne0k9igWpw/rIWoVmNs05GY5x8RXBxKzxre4Gqrvq6Z3AZHHWclS3J4 9qzhsw+OnlQcrYAJNTOkBseCDVZHI4Ps -----END CERTIFICATE-----Generated at Mon Aug 31 11:49:13 2026 by rpki-client