$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa File: 85899aac-123c-38d4-9753-27300cdd4d92.roa (raw, json) Hash identifier: 1PBHjBpY+JDfi5qruG3ReLVurayWAmVDNqFwKpgkNpI= Subject key identifier: C7:8F:34:D6:18:35:95:09:76:FE:8D:5F:30:22:98:BB:F1:D7:99:B7 Certificate issuer: /CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Certificate serial: 010D0C9F4328584ECBD1E18554A11DA035AED656 Authority key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 34 IP address blocks: 2604:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e1:85:54:a1:1d:a0:35:ae:d6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a260659b-f865-477f-9c7c-20f7e80883e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:14:45:9f:3f:9b:50:c9:d8:a7:7a:af:11: 7f:46:b2:c8:cd:29:54:11:9e:00:d6:37:c4:5f:d3: 80:88:81:e7:39:93:e7:f5:01:d7:c4:a3:72:71:d6: fb:4c:ee:e1:af:3c:6f:f7:63:8d:64:82:ff:e4:a7: 78:a8:7f:69:23:20:fd:70:37:0c:79:99:8b:13:f6: 29:f0:e9:cf:c5:57:93:72:1b:63:0a:a6:46:3c:5a: 56:25:5d:b3:4f:98:36:57:d0:c6:8e:31:c4:d4:15: 56:5b:b8:4c:e7:b8:1a:69:1f:c4:7e:18:50:fe:85: 43:73:09:e9:07:b6:67:82:db:fa:b9:d7:45:52:4f: 23:5f:e3:31:b7:3d:21:ef:63:b6:1c:15:2b:28:94: 4f:a4:76:af:63:84:9a:97:67:56:85:a8:a4:25:d8: 0f:a4:de:cc:0a:d7:62:c0:fe:52:f1:e7:46:df:af: ca:21:83:e3:f2:4c:56:27:9f:19:86:e2:00:87:12: 33:0f:3d:a7:a2:37:e5:3f:e0:0a:90:85:2d:4e:02: 20:30:8b:f9:b1:a7:2d:f7:a3:f3:23:a3:c0:05:ab: d4:84:f0:6b:9c:a8:b8:b0:6d:35:98:e8:13:42:48: 42:a7:33:72:ed:22:94:c8:6c:30:60:67:14:2d:43: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:34:D6:18:35:95:09:76:FE:8D:5F:30:22:98:BB:F1:D7:99:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl X509v3 Authority Key Identifier: keyid:FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer sbgp-ipAddrBlock: critical IPv6: 2604:580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d6:af:25:d9:ab:ea:22:27:d1:a7:a0:2d:31:11:8a:e4:04: e7:a9:31:73:78:f9:b2:a9:2b:61:60:b5:71:d9:1b:51:ce:bf: 76:2c:eb:4e:94:9d:cb:45:e4:71:ae:e0:e2:e9:4f:ab:d9:a9: e7:6b:16:d7:f7:d9:03:cb:3b:87:b6:ca:7b:a4:cc:96:a2:ff: 6c:b8:7f:dc:00:cf:d4:4f:9c:6e:18:d1:b4:d9:52:f8:72:00: 45:51:6b:57:63:da:7f:57:c9:54:2b:3b:5b:9f:31:6f:a7:d1: 78:b8:3f:c5:2b:72:5f:7b:01:9d:9d:ba:14:11:87:ee:fb:f8: 09:6a:b5:61:6c:a9:06:57:9f:73:b9:28:c5:68:d3:d4:5e:74: f3:f6:bf:96:cb:db:99:12:df:35:24:6a:9d:2e:34:7a:d3:6e: 88:15:55:54:d4:82:05:df:b8:b4:a8:af:21:83:4c:e3:55:16: 4f:3e:c9:17:51:e2:d1:e9:ab:47:ad:47:2e:04:25:19:00:0b: 0c:d1:6d:a6:c5:cb:ff:75:e0:bc:4e:46:2d:c6:66:09:b1:f8: 09:a8:4a:d2:07:a1:41:df:89:15:7b:3f:ee:6c:1d:68:5f:e1: ae:36:b3:f0:bc:9c:71:b0:1d:96:99:72:94:10:bd:4b:86:cf: b7:57:92:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7L0eGFVKEdoDWu1lYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0Zjkz YzI4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTI2MDY1OWItZjg2NS00NzdmLTljN2MtMjBmN2U4MDg4M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngAURZ8/m1DJ2Kd6rxF/RrLIzSlUEZ4A1jfE X9OAiIHnOZPn9QHXxKNycdb7TO7hrzxv92ONZIL/5Kd4qH9pIyD9cDcMeZmLE/Yp 8OnPxVeTchtjCqZGPFpWJV2zT5g2V9DGjjHE1BVWW7hM57gaaR/EfhhQ/oVDcwnp B7Zngtv6uddFUk8jX+Mxtz0h72O2HBUrKJRPpHavY4Sal2dWhaikJdgPpN7MCtdi wP5S8edG36/KIYPj8kxWJ58ZhuIAhxIzDz2nojflP+AKkIUtTgIgMIv5sact96Pz I6PABavUhPBrnKi4sG01mOgTQkhCpzNy7SKUyGwwYGcULUNujwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMePNNYYNZUJdv6NXzAimLvx15m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Yzgx ZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvODU4OTlhYWMtMTIzYy0z OGQ0LTk3NTMtMjczMDBjZGQ0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM4MWZhNWYtM2Y2ZC00N2RiLWE1 MDQtYWNlYjU0ZjkzYzI4LzRjODFmYTVmLTNmNmQtNDdkYi1hNTA0LWFjZWI1NGY5 M2MyOC5jcmwwHwYDVR0jBBgwFoAU/1LVSdJXV4EJSRX8DxjPYefX6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2Vi NTRmOTNjMjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAv1q8l2avqIifRp6AtMRGK5ATnqTFzePmyqSthYLVx2RtRzr92LOtO lJ3LReRxruDi6U+r2annaxbX99kDyzuHtsp7pMyWov9suH/cAM/UT5xuGNG02VL4 cgBFUWtXY9p/V8lUKztbnzFvp9F4uD/FK3JfewGdnboUEYfu+/gJarVhbKkGV59z uSjFaNPUXnTz9r+Wy9uZEt81JGqdLjR6026IFVVU1IIF37i0qK8hg0zjVRZPPskX UeLR6atHrUcuBCUZAAsM0W2mxcv/deC8TkYtxmYJsfgJqErSB6FB34kVez/ubB1o X+GuNrPwvJxxsB2WmXKUEL1Lhs+3V5Kk -----END CERTIFICATE-----Generated at Tue Aug 25 10:19:25 2026 by rpki-client