$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/ef871776-b94b-3fbe-8594-69871166a1a5.roa File: ef871776-b94b-3fbe-8594-69871166a1a5.roa (raw, json) Hash identifier: 25PNEn86XcwTia0js1b8rZ2w1huzNR8Gw9dlx/kgbkI= Subject key identifier: 69:F2:F6:5E:71:0A:7A:9A:70:BD:21:97:DC:DA:7D:33:8B:8C:65:11 Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Certificate serial: 010D0C9F4328584EE4F1F9AAD3E846A491250F00 Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/ef871776-b94b-3fbe-8594-69871166a1a5.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 5400 IP address blocks: 2606:f100:e000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f9:aa:d3:e8:46:a4:91:25:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=0270dccf-88c9-437e-9d9f-4140e0863b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:ce:b2:71:9c:61:48:73:04:73:df:f2:2d: 41:68:6a:c2:42:d4:ad:2a:92:c2:52:3f:6c:cc:15: 2a:96:92:6a:f2:6c:16:d3:d2:e6:95:bb:a6:fc:a0: 11:7c:dd:32:77:ff:02:f4:1f:80:d5:b4:b9:d3:2d: 5f:94:7f:e8:2c:48:52:de:89:9d:c5:fe:f5:76:ac: 8f:dc:4d:bc:8f:93:f8:43:7f:26:31:a2:33:cc:bf: 5a:64:66:0f:42:57:97:94:d8:57:49:79:58:cc:bb: 2f:19:bb:b3:10:b7:8a:7f:99:8f:95:06:b9:39:68: dc:c3:ea:ba:ce:4d:2e:32:53:57:15:30:91:fa:9b: 3b:74:f0:e6:1e:77:4b:d8:51:bb:f4:3d:bd:5a:78: 89:6f:d2:01:93:1f:14:b0:4c:e3:88:be:b5:eb:b5: 6f:28:7c:83:10:de:09:6f:81:7a:93:15:ae:49:f0: 05:89:71:d2:aa:21:88:74:25:87:b4:92:f8:80:60: 1b:08:78:15:69:cd:84:77:5d:3d:8b:98:d5:ea:be: d0:3b:fd:c0:70:73:70:c8:0f:37:d7:5e:65:5a:39: ca:ec:91:b2:69:92:25:14:66:e3:83:73:e6:c9:95: b4:67:26:59:20:e0:1b:a5:30:a1:f0:63:15:1d:a0: a9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:F6:5E:71:0A:7A:9A:70:BD:21:97:DC:DA:7D:33:8B:8C:65:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/ef871776-b94b-3fbe-8594-69871166a1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl X509v3 Authority Key Identifier: keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer sbgp-ipAddrBlock: critical IPv6: 2606:f100:e000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:dc:53:95:c6:5d:d2:1a:97:5b:02:84:8d:6c:95:7c:33:81: 5e:f0:b1:23:c9:59:ab:56:6f:08:57:27:b9:7c:ab:59:46:09: 84:c5:e1:c0:b1:ab:58:40:29:7e:fa:36:31:94:b5:29:0f:b0: 32:cb:8c:8e:67:2c:01:3d:2e:bb:6a:69:8e:83:9d:a8:e6:49: 2c:d1:e0:58:ce:23:17:d4:8f:f3:ff:39:07:19:b1:90:da:17: 7d:7b:ce:d4:9a:79:18:d1:f4:1c:bf:ea:45:69:ff:36:84:23: 2d:e6:0f:c5:34:00:6d:90:29:c2:c0:2a:43:77:65:91:a1:d3: 4f:5d:cc:ba:79:00:1f:3a:ae:4b:55:5e:d5:37:48:d1:37:83: 9f:fe:bd:fa:b7:10:33:e2:82:c3:05:2b:b4:75:74:3f:97:ca: 1b:98:f5:d6:bd:c1:a6:93:04:a1:d2:34:2d:55:2e:ab:20:d0: f4:f9:3f:5f:dc:71:2b:77:3b:77:8e:22:e4:29:eb:91:18:1b: 56:8a:96:1a:18:d3:d5:22:dc:0d:7b:93:11:3d:61:60:8a:a8: 81:49:b9:ef:11:ce:1b:f0:2e:8f:b2:a5:b9:a9:8a:77:06:34: 30:90:ac:f0:e5:3c:c6:ee:1a:4b:9f:04:d8:ba:86:a1:3c:f2: 67:07:72:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7k8fmq0+hGpJElDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3 YmNiMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk MDI3MGRjY2YtODhjOS00MzdlLTlkOWYtNDE0MGUwODYzYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxPOsnGcYUhzBHPf8i1BaGrCQtStKpLCUj9s zBUqlpJq8mwW09Lmlbum/KARfN0yd/8C9B+A1bS50y1flH/oLEhS3omdxf71dqyP 3E28j5P4Q38mMaIzzL9aZGYPQleXlNhXSXlYzLsvGbuzELeKf5mPlQa5OWjcw+q6 zk0uMlNXFTCR+ps7dPDmHndL2FG79D29WniJb9IBkx8UsEzjiL6167VvKHyDEN4J b4F6kxWuSfAFiXHSqiGIdCWHtJL4gGAbCHgVac2Ed109i5jV6r7QO/3AcHNwyA83 115lWjnK7JGyaZIlFGbjg3PmyZW0ZyZZIOAbpTCh8GMVHaCptQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGny9l5xCnqacL0hl9zafTOLjGURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvZWY4NzE3NzYtYjk0Yi0z ZmJlLTg1OTQtNjk4NzExNjZhMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3 NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxAOAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFNxTlcZd0hqXWwKEjWyVfDOBXvCxI8lZq1ZvCFcnuXyrWUYJhMXh wLGrWEApfvo2MZS1KQ+wMsuMjmcsAT0uu2ppjoOdqOZJLNHgWM4jF9SP8/85Bxmx kNoXfXvO1Jp5GNH0HL/qRWn/NoQjLeYPxTQAbZApwsAqQ3dlkaHTT13MunkAHzqu S1Ve1TdI0TeDn/69+rcQM+KCwwUrtHV0P5fKG5j11r3BppMEodI0LVUuqyDQ9Pk/ X9xxK3c7d44i5CnrkRgbVoqWGhjT1SLcDXuTET1hYIqogUm57xHOG/Auj7KluamK dwY0MJCs8OU8xu4aS58E2LqGoTzyZwdymA== -----END CERTIFICATE-----Generated at Thu Sep 10 18:31:36 2026 by rpki-client