$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa File: c6b87ef9-73d8-3b79-95d1-9a249471517f.roa (raw, json) Hash identifier: Ry0DHpXiGuIYaz0BL3qWnuicy8QxaBQf+8bkzREfJM0= Subject key identifier: B5:3E:7B:A1:71:08:C1:19:3A:AD:93:71:B9:F8:F3:D0:EB:74:9A:E0 Certificate issuer: /CN=c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a Certificate serial: 010D0C9F4328584ED6FC8251A94F8C3DFE510E00 Authority key identifier: DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 402646 IP address blocks: 2620:35:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:82:51:a9:4f:8c:3d:fe:51:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=2d275d37-1e70-4889-89f1-6719b94b0a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:6d:fb:a1:c7:21:ef:27:8b:fd:e9:79:c7: bc:2b:19:4b:28:93:6f:14:ca:60:5d:0e:e3:0b:cb: 2c:75:89:c0:8d:9d:ef:ff:1b:eb:ad:ac:ea:6b:4c: 3b:9d:66:60:5a:9a:b9:09:ad:54:be:51:d5:c0:fb: 7d:da:e3:cc:c3:19:95:30:05:89:af:c7:83:53:4e: 88:00:e8:39:fe:38:4c:f5:e5:25:c0:f2:68:17:f1: 87:e4:7a:bb:69:88:02:25:23:bd:3b:b9:f4:a3:68: c6:3d:4b:ca:21:ea:a9:9c:46:5b:32:7f:8a:be:a7: 34:4a:04:7c:28:3a:f9:1f:ca:61:da:5f:e3:0d:47: 3d:ff:b6:b1:3d:cf:f0:20:a9:a4:4a:27:a9:5b:c3: d0:7d:90:2c:dc:51:dc:95:3d:9d:f6:54:6f:d7:70: 34:3b:e6:35:20:63:b6:c7:f6:1d:ad:7d:24:64:0a: 35:69:b3:6a:39:9e:66:d4:0f:94:90:10:5f:92:84: b8:40:d4:6b:39:45:0d:0a:f0:52:eb:25:76:3a:4e: a4:e6:29:a3:5b:5f:75:0a:2e:1d:c1:5a:3e:ac:5a: 89:21:50:eb:65:3c:09:27:40:e4:7d:09:6f:b7:3f: ad:72:81:e4:11:ca:bd:3e:ca:a9:15:ff:5b:3d:08: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3E:7B:A1:71:08:C1:19:3A:AD:93:71:B9:F8:F3:D0:EB:74:9A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c6b87ef9-73d8-3b79-95d1-9a249471517f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.crl X509v3 Authority Key Identifier: keyid:DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer sbgp-ipAddrBlock: critical IPv6: 2620:35:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:49:1b:3a:de:25:c7:57:90:71:08:b1:a4:ab:28:01:7a:1c: de:3a:93:7b:ba:73:ba:78:74:39:13:a2:58:b6:b4:f8:d7:07: d9:77:c0:dc:1a:3f:20:f8:9b:17:79:3f:0c:7c:84:5c:82:9c: 86:0a:ea:df:e5:74:ec:91:59:e1:b7:f3:17:6c:21:27:8d:7d: 55:74:ee:2e:0f:bb:a2:0a:cb:71:77:40:b8:65:29:56:65:2b: bf:94:f6:d9:08:2e:73:2b:ae:b7:55:12:f2:7e:50:a4:c3:9b: 15:fc:d0:a8:28:8e:2e:27:49:d7:ff:ef:76:f3:fe:b9:e4:ce: e3:05:a0:b2:b2:fe:38:a8:4c:99:dc:0a:1d:46:aa:8a:b2:f6: 30:6e:8d:bd:dd:5f:9a:53:65:fe:a7:2a:f7:51:66:40:57:34: ea:f1:4b:b3:3e:68:53:52:48:be:9a:47:39:e8:59:8c:25:5a: e6:6f:88:2c:f8:c4:45:31:94:62:bb:ec:37:42:88:17:61:f1: 9d:0a:09:f6:59:d1:66:52:0d:d9:87:cc:01:da:c4:02:45:47: 98:85:a2:c2:83:9a:cd:58:6e:6e:14:d4:91:d8:99:17:17:30: 97:05:6c:67:70:b8:aa:90:a7:ba:d7:20:28:b1:03:f1:ea:28: 4e:be:80:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7W/IJRqU+MPf5RDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzRhOThlN2EtNjZlYi00OWQ4LWI5YzItOWIzYmFhOGM1 OTNhMB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk MmQyNzVkMzctMWU3MC00ODg5LTg5ZjEtNjcxOWI5NGIwYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoht+6HHIe8ni/3pece8KxlLKJNvFMpgXQ7j C8ssdYnAjZ3v/xvrrazqa0w7nWZgWpq5Ca1UvlHVwPt92uPMwxmVMAWJr8eDU06I AOg5/jhM9eUlwPJoF/GH5Hq7aYgCJSO9O7n0o2jGPUvKIeqpnEZbMn+Kvqc0SgR8 KDr5H8ph2l/jDUc9/7axPc/wIKmkSiepW8PQfZAs3FHclT2d9lRv13A0O+Y1IGO2 x/YdrX0kZAo1abNqOZ5m1A+UkBBfkoS4QNRrOUUNCvBS6yV2Ok6k5imjW191Ci4d wVo+rFqJIVDrZTwJJ0DkfQlvtz+tcoHkEcq9PsqpFf9bPQjrTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLU+e6FxCMEZOq2Tcbn489DrdJrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNGE5 OGU3YS02NmViLTQ5ZDgtYjljMi05YjNiYWE4YzU5M2EvYzZiODdlZjktNzNkOC0z Yjc5LTk1ZDEtOWEyNDk0NzE1MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzRhOThlN2EtNjZlYi00OWQ4LWI5 YzItOWIzYmFhOGM1OTNhL2M0YTk4ZTdhLTY2ZWItNDlkOC1iOWMyLTliM2JhYThj NTkzYS5jcmwwHwYDVR0jBBgwFoAU2o+YOx5T8mMIUKAAub5xsxT8IZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNGE5OGU3YS02NmViLTQ5ZDgtYjljMi05YjNi YWE4YzU5M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAANaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRJGzreJcdXkHEIsaSrKAF6HN46k3u6c7p4dDkToli2tPjXB9l3 wNwaPyD4mxd5Pwx8hFyCnIYK6t/ldOyRWeG38xdsISeNfVV07i4Pu6IKy3F3QLhl KVZlK7+U9tkILnMrrrdVEvJ+UKTDmxX80Kgoji4nSdf/73bz/rnkzuMFoLKy/jio TJncCh1Gqoqy9jBujb3dX5pTZf6nKvdRZkBXNOrxS7M+aFNSSL6aRznoWYwlWuZv iCz4xEUxlGK77DdCiBdh8Z0KCfZZ0WZSDdmHzAHaxAJFR5iFosKDms1Ybm4U1JHY mRcXMJcFbGdwuKqQp7rXICixA/HqKE6+gJs= -----END CERTIFICATE-----Generated at Thu Aug 27 18:37:28 2026 by rpki-client