$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa File: a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa (raw, json) Hash identifier: IXDN7sbdjdfN8py+Rt80GmZX5z6lRRWHF8KEUf6QhFU= Subject key identifier: 03:26:88:43:91:DB:33:78:75:B0:ED:67:CD:CC:DB:03:95:4A:34:9F Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Certificate serial: 010D0C9F4328584EE4F1FC319393CA3DD2784480 Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 5400 IP address blocks: 2606:f100:e600::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:fc:31:93:93:ca:3d:d2:78:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=09567b8a-ac31-4220-8d49-a4af5e234c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:45:92:da:ae:2a:a1:8b:4b:f8:2c:b8:82: 39:2c:03:c4:b2:96:17:52:f1:8f:f6:4f:80:f2:b2: 9b:7a:87:b2:e9:a0:2f:cd:f7:45:fd:99:be:08:ce: 79:21:79:7a:2d:6a:91:bc:55:4d:6d:f5:e6:77:9c: b4:74:e0:ee:77:70:8a:62:86:d7:c4:89:fc:91:3c: 59:15:ec:d8:6b:38:18:bf:77:6f:b2:95:81:a7:fa: d1:5e:e3:1a:6d:91:e9:78:02:97:d2:f6:b3:13:8f: a8:7e:75:e8:04:71:67:90:ac:19:57:e3:05:39:b3: 64:de:3a:8b:04:cf:46:ed:a6:f9:94:b4:ad:4a:97: 40:62:00:a6:47:0a:c5:b2:43:2c:e5:2e:dd:ab:01: 3d:c6:0d:37:ed:1e:7f:5d:81:73:e6:18:c1:55:c8: 9e:64:c0:b3:89:14:96:41:40:f0:92:38:d1:1b:5c: 4b:86:26:9e:53:94:72:1d:d3:9f:e1:20:5a:69:92: 15:0e:45:0f:47:63:41:b2:8f:92:b7:dc:92:bc:8f: 77:66:6f:8b:00:19:08:66:2b:26:2a:65:32:4f:bb: e6:73:5c:18:7b:f6:9e:2f:26:30:fc:ea:6f:14:ee: 1f:ed:f3:fb:cf:d0:ef:42:a8:cb:4f:91:07:d0:fc: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:26:88:43:91:DB:33:78:75:B0:ED:67:CD:CC:DB:03:95:4A:34:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl X509v3 Authority Key Identifier: keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer sbgp-ipAddrBlock: critical IPv6: 2606:f100:e600::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:af:bd:a5:54:65:03:b0:cb:ea:31:be:1a:41:1c:8c:a0:2f: 5c:74:f5:43:f3:4b:c4:db:48:51:88:55:04:38:1b:85:be:8e: 65:7f:3d:98:e7:6c:4f:4b:0a:74:14:ee:3a:33:a2:20:f7:b0: 11:f4:04:07:bf:4a:35:8f:76:2f:5f:a2:5a:d4:9a:5f:94:04: 0c:6c:17:c1:bb:9a:78:99:45:67:8f:4e:40:cc:44:c2:12:87: ff:60:42:4d:14:57:70:04:23:b1:9b:6a:d3:6e:ab:60:2f:05: d2:da:4c:4a:b3:3c:44:fe:53:b2:c6:b7:56:40:b4:87:25:71: b8:34:52:71:7f:20:ff:78:b3:6f:6f:f4:00:de:72:e2:bb:ac: ec:ec:bc:dc:d6:48:51:e1:3f:ce:6d:52:74:80:a0:40:36:4c: 1b:b0:0a:64:9a:e6:0b:c4:2d:93:7b:9c:96:e0:fc:d3:24:e9: cc:c3:94:a4:72:44:bf:a7:fa:e5:32:25:05:69:ed:cc:11:aa: c4:b8:39:da:5f:5d:2c:9a:f1:08:63:47:5d:e4:6c:b4:79:7e: 6f:1a:af:2a:eb:be:cd:da:4d:c9:b1:13:01:21:b4:e1:68:8b: 73:13:c0:43:40:2c:9e:cd:e4:eb:14:65:8c:53:9a:f0:95:8d: f0:fd:ff:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7k8fwxk5PKPdJ4RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3 YmNiMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk MDk1NjdiOGEtYWMzMS00MjIwLThkNDktYTRhZjVlMjM0YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBFktquKqGLS/gsuII5LAPEspYXUvGP9k+A 8rKbeoey6aAvzfdF/Zm+CM55IXl6LWqRvFVNbfXmd5y0dODud3CKYobXxIn8kTxZ FezYazgYv3dvspWBp/rRXuMabZHpeAKX0vazE4+ofnXoBHFnkKwZV+MFObNk3jqL BM9G7ab5lLStSpdAYgCmRwrFskMs5S7dqwE9xg037R5/XYFz5hjBVcieZMCziRSW QUDwkjjRG1xLhiaeU5RyHdOf4SBaaZIVDkUPR2NBso+St9ySvI93Zm+LABkIZism KmUyT7vmc1wYe/aeLyYw/OpvFO4f7fP7z9DvQqjLT5EH0Pz9sQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAMmiEOR2zN4dbDtZ83M2wOVSjSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvYTA3MjhjZTMtMmVjOC0z NzY4LWIxMzctN2YxYTRlYmU1ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3 NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxAOYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAyK+9pVRlA7DL6jG+GkEcjKAvXHT1Q/NLxNtIUYhVBDgbhb6OZX89 mOdsT0sKdBTuOjOiIPewEfQEB79KNY92L1+iWtSaX5QEDGwXwbuaeJlFZ49OQMxE whKH/2BCTRRXcAQjsZtq026rYC8F0tpMSrM8RP5Tssa3VkC0hyVxuDRScX8g/3iz b2/0AN5y4rus7Oy83NZIUeE/zm1SdICgQDZMG7AKZJrmC8Qtk3ucluD80yTpzMOU pHJEv6f65TIlBWntzBGqxLg52l9dLJrxCGNHXeRstHl+bxqvKuu+zdpNybETASG0 4WiLcxPAQ0Asns3k6xRljFOa8JWN8P3/Mg== -----END CERTIFICATE-----Generated at Thu Sep 10 18:31:17 2026 by rpki-client