$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa File: dd33e40a-b34b-360b-81cc-117570e36a78.roa (raw, json) Hash identifier: Qoj7Ge8RrVV8KK+g6wLoSUiqA87hbzlvNJX6xAgiGU4= Subject key identifier: 45:37:C7:84:5A:56:BA:10:8E:11:65:8F:CE:A6:5D:5E:FC:64:89:9D Certificate issuer: /CN=b8e4e496-994f-4877-8328-aec6386bbc01 Certificate serial: 010D0C9F4328584EE4F1FD1A1F7031F24819B0C0 Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 10662 IP address blocks: 2620:d5:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:fd:1a:1f:70:31:f2:48:19:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=c31d2f2b-4a42-471c-bffc-657ef3cbb3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:91:2e:bc:2b:81:59:e1:4b:81:f7:d0:7b: d3:d0:04:1d:42:b0:63:56:6b:bf:9f:59:70:1b:08: 88:e3:39:fd:78:f9:81:83:09:eb:ce:a6:66:41:7e: 7a:3d:25:b6:26:7d:01:97:34:6e:24:6d:25:18:09: 33:78:3e:21:10:52:57:ef:f5:e4:40:94:c2:c7:89: f1:10:98:57:61:15:63:1d:f1:f2:aa:c8:ef:9a:1c: db:7a:f6:20:76:eb:94:52:6d:e8:54:63:ee:1f:ba: 93:85:72:62:06:a6:a7:7b:a0:ed:44:09:5f:58:28: 83:a3:dc:bf:56:77:ef:1c:ae:85:f4:07:2d:6f:cb: bc:4b:3b:67:7b:8f:ff:0c:5e:18:d3:9e:12:fa:93: c6:62:b8:67:87:72:e9:4f:f4:a0:24:5a:a9:f6:38: 56:51:de:88:02:34:bf:3b:e8:1b:97:53:10:27:5b: 19:e5:fc:28:cf:13:34:72:9e:b4:60:03:1f:77:4b: 39:0f:d6:16:91:1f:84:33:4e:f7:f7:40:5e:fb:da: 6d:6a:90:11:4b:f0:53:0a:c1:2d:f4:1e:96:9f:5e: ad:28:0c:49:9a:b2:6b:50:59:7d:1f:c8:6e:0d:34: cb:81:c4:39:2a:9c:53:fb:d1:15:66:88:36:f5:c6: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:C7:84:5A:56:BA:10:8E:11:65:8F:CE:A6:5D:5E:FC:64:89:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl X509v3 Authority Key Identifier: keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d6:d5:9e:58:f8:d7:47:db:93:f4:36:7b:c9:92:a7:c5:51: a8:49:d1:07:f4:71:89:a4:e5:86:6f:e7:f3:3d:55:df:9f:40: 3c:eb:5d:9b:35:e8:90:c0:97:ad:16:db:56:4b:38:82:80:c1: 3f:4f:f4:95:35:c4:3a:b9:90:1c:80:89:31:88:fb:4d:16:9d: aa:45:1d:02:d5:0a:97:31:92:30:0e:62:84:25:ce:02:98:17: eb:71:ca:b4:73:d4:63:dd:87:19:af:fb:37:85:b4:b6:e5:4f: 25:7e:6e:1c:94:7b:38:ad:6f:17:cc:7a:29:f6:52:84:78:99: 71:18:03:c7:c6:24:f3:e4:f8:fb:93:f2:33:a7:88:d6:35:16: 4b:72:07:9f:31:5d:8a:cc:e0:60:76:69:4f:52:35:67:35:40: 69:28:4e:ef:26:e8:dc:aa:99:b6:6a:0c:1b:f8:8a:e7:cf:4b: c3:48:74:05:90:cf:0b:17:b3:be:7e:65:50:74:c4:4b:7b:b3: f0:34:c1:9f:75:7e:d2:93:45:e7:49:b9:b0:a8:d5:de:cd:ad: 25:ce:58:da:02:aa:c4:0b:e2:e8:07:88:f6:94:4f:43:8a:aa: ba:a1:32:5b:39:4e:2b:87:22:af:8a:16:6c:0e:d0:b0:60:ea: 3f:df:b8:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7k8f0aH3Ax8kgZsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi YzAxMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk YzMxZDJmMmItNGE0Mi00NzFjLWJmZmMtNjU3ZWYzY2JiM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDGRLrwrgVnhS4H30HvT0AQdQrBjVmu/n1lw GwiI4zn9ePmBgwnrzqZmQX56PSW2Jn0BlzRuJG0lGAkzeD4hEFJX7/XkQJTCx4nx EJhXYRVjHfHyqsjvmhzbevYgduuUUm3oVGPuH7qThXJiBqane6DtRAlfWCiDo9y/ VnfvHK6F9Actb8u8Sztne4//DF4Y054S+pPGYrhnh3LpT/SgJFqp9jhWUd6IAjS/ O+gbl1MQJ1sZ5fwozxM0cp60YAMfd0s5D9YWkR+EM07390Be+9ptapARS/BTCsEt 9B6Wn16tKAxJmrJrUFl9H8huDTTLgcQ5KpxT+9EVZog29cYuoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEU3x4RaVroQjhFlj86mXV78ZImdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0 ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvZGQzM2U0MGEtYjM0Yi0z NjBiLTgxY2MtMTE3NTcwZTM2YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2 Mzg2YmJjMDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1YAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXW1Z5Y+NdH25P0NnvJkqfFUahJ0Qf0cYmk5YZv5/M9Vd+fQDzr XZs16JDAl60W21ZLOIKAwT9P9JU1xDq5kByAiTGI+00WnapFHQLVCpcxkjAOYoQl zgKYF+txyrRz1GPdhxmv+zeFtLblTyV+bhyUezitbxfMein2UoR4mXEYA8fGJPPk +PuT8jOniNY1FktyB58xXYrM4GB2aU9SNWc1QGkoTu8m6NyqmbZqDBv4iufPS8NI dAWQzwsXs75+ZVB0xEt7s/A0wZ91ftKTRedJubCo1d7NrSXOWNoCqsQL4ugHiPaU T0OKqrqhMls5TiuHIq+KFmwO0LBg6j/fuMA= -----END CERTIFICATE-----Generated at Wed Aug 26 17:31:01 2026 by rpki-client