$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: T5YpneDzMYu1u705JjLQdTDyS93XsY0rkwH0HCsE0kY= Subject key identifier: 10:40:77:B2:1E:77:FC:80:85:9A:88:41:6F:69:00:FB:77:AB:57:83 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584EF2E769E126D0BF5B5FD3FC00 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:69:e1:26:d0:bf:5b:5f:d3:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c3702731-c910-4a70-b6b9-494dee29f4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:44:a5:0c:75:da:2b:b1:2d:82:27:95:29: 76:8f:ff:80:45:87:c6:70:ac:86:9f:0a:8e:36:8e: 52:13:34:4f:c8:00:fb:7e:24:16:33:b3:9b:9c:3f: b0:18:d2:a6:71:89:18:cc:b3:9b:21:97:af:d2:ae: b3:cf:73:06:09:44:ae:03:56:c6:57:90:4d:71:ce: c6:f1:dc:22:ad:46:53:fb:19:b1:7f:d6:ad:e6:a2: 02:0c:55:ed:98:3e:44:3b:8f:d9:78:22:9c:96:e7: 30:d2:b6:c2:4c:4e:a9:44:a7:24:e7:32:f5:b3:62: 13:5f:18:c5:10:d1:31:dc:b1:69:25:84:06:18:41: d7:a1:6f:7d:3a:95:2f:3b:e3:72:05:0a:68:35:86: e0:a5:9e:e2:89:75:5d:bd:f2:73:dd:79:05:aa:f4: b4:2e:6a:3b:fd:e1:26:b6:ab:9d:62:d5:af:75:8f: 68:67:0e:64:ff:97:6c:7d:c9:71:36:e2:d5:ef:9c: 47:df:2e:f8:10:d6:ab:5e:78:62:09:4d:8c:c8:21: 80:e8:ae:50:81:70:ac:58:f5:ff:f2:d8:64:8b:0f: da:3e:9c:d2:ff:3b:49:f3:2c:55:28:c4:e3:39:56: 71:32:d1:f4:65:22:47:fa:5a:66:31:d4:ba:9d:7f: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:77:B2:1E:77:FC:80:85:9A:88:41:6F:69:00:FB:77:AB:57:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:ee:d2:da:bf:e2:5d:60:47:5c:fc:24:e2:da:1c:26:4f: 47:8a:ff:09:e2:d6:b3:75:84:78:6e:13:ea:cc:15:2e:09:26: 3b:f0:0d:d0:44:ad:15:0b:e8:39:4a:54:dd:b6:83:73:8c:ae: a3:20:62:64:8c:04:73:7e:db:e2:96:ff:97:26:30:95:ae:35: 54:09:00:c6:28:6c:ad:40:55:c7:db:36:fa:3e:ae:11:77:8f: 6e:f7:19:7a:24:59:d6:d0:32:91:13:87:9e:90:db:18:78:43: 9f:e1:38:0b:46:20:a4:4b:15:07:12:c8:85:5c:22:73:76:53: 4f:c4:c1:86:4a:c0:46:8a:9d:8f:4a:22:1f:9e:9f:33:96:a1: 5e:b4:bd:a7:56:73:aa:a5:b2:6d:78:68:2a:de:a7:27:77:d9: a1:4d:de:ae:45:d1:15:72:34:94:33:d1:89:3e:d9:44:5f:ef: f5:47:5e:64:e3:e8:01:a7:c0:a4:3e:0f:ae:4e:2e:cb:03:a9: b3:48:9c:08:ce:ac:7e:6e:c5:d5:5a:0a:a8:b9:0d:ec:10:83: 55:7c:69:5b:44:80:8a:68:fb:0d:f5:a7:d2:a7:cf:5b:59:d7: 4e:8d:fd:d3:ed:46:28:56:98:92:4a:94:7d:67:b7:73:b2:8f: 4b:01:a6:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7y52nhJtC/W1/T/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzM3MDI3MzEtYzkxMC00YTcwLWI2YjktNDk0ZGVlMjlmNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5upEpQx12iuxLYInlSl2j/+ARYfGcKyGnwqO No5SEzRPyAD7fiQWM7ObnD+wGNKmcYkYzLObIZev0q6zz3MGCUSuA1bGV5BNcc7G 8dwirUZT+xmxf9at5qICDFXtmD5EO4/ZeCKclucw0rbCTE6pRKck5zL1s2ITXxjF ENEx3LFpJYQGGEHXoW99OpUvO+NyBQpoNYbgpZ7iiXVdvfJz3XkFqvS0Lmo7/eEm tqudYtWvdY9oZw5k/5dsfclxNuLV75xH3y74ENarXnhiCU2MyCGA6K5QgXCsWPX/ 8thkiw/aPpzS/ztJ8yxVKMTjOVZxMtH0ZSJH+lpmMdS6nX8GyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBBAd7Ied/yAhZqIQW9pAPt3q1eDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALZ+7S2r/iXWBHXPwk4tocJk9Hiv8J4tazdYR4bhPqzBUuCSY78A3Q RK0VC+g5SlTdtoNzjK6jIGJkjARzftvilv+XJjCVrjVUCQDGKGytQFXH2zb6Pq4R d49u9xl6JFnW0DKRE4eekNsYeEOf4TgLRiCkSxUHEsiFXCJzdlNPxMGGSsBGip2P SiIfnp8zlqFetL2nVnOqpbJteGgq3qcnd9mhTd6uRdEVcjSUM9GJPtlEX+/1R15k 4+gBp8CkPg+uTi7LA6mzSJwIzqx+bsXVWgqouQ3sEINVfGlbRICKaPsN9afSp89b WddOjf3T7UYoVpiSSpR9Z7dzso9LAabE -----END CERTIFICATE-----Generated at Thu Aug 27 02:24:40 2026 by rpki-client