$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa File: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (raw, json) Hash identifier: 6Fi3k3cn5CBNvfAL23enOJdmnZis+3bPMeH9KC3SRHc= Subject key identifier: E4:FE:D3:14:1C:47:96:B8:DB:70:63:10:01:3A:BD:65:3F:60:E5:9E Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584EF87CD1DED02777D6420DF330 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 8075 IP address blocks: 2606:e540:c01::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d1:de:d0:27:77:d6:42:0d:f3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=67154735-3394-483e-bcf3-53d4c17151b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:e5:e9:21:1f:b6:aa:ae:2f:c7:7f:c1:e4: 55:48:d2:10:fb:77:97:84:79:62:d2:02:db:68:05: 29:2b:7d:8e:cb:c1:5e:bd:53:5c:28:20:e7:d7:f8: 9f:bd:19:04:3c:df:fe:e9:9f:64:ed:76:e7:62:58: 0a:37:45:0f:85:9f:8d:c6:5c:60:69:2b:36:21:9f: 2e:5f:ca:0c:d5:cb:6b:83:98:df:6b:9e:15:59:48: dc:32:4c:85:ad:3a:ea:e1:7f:88:da:21:65:00:af: 5b:ea:36:2f:d9:ca:49:9d:a9:ca:f1:a2:3f:46:8d: 30:05:1e:25:a3:36:f9:a7:95:9b:fb:4a:f0:5d:72: 28:29:65:84:19:1d:2a:db:ae:eb:23:07:58:1e:6f: 1b:47:61:42:5b:fa:22:26:7f:55:5d:c6:89:d8:fb: 59:30:26:e4:92:14:28:bc:95:0e:bf:16:d5:c7:af: 52:2f:65:a9:9f:b7:24:0f:16:ef:a9:90:aa:ae:d4: fe:51:b1:a2:80:5f:27:00:4e:c9:b4:c3:2c:fd:a2: c2:2c:54:a0:3b:bc:62:a3:6c:ca:95:07:6b:11:71: 86:03:d5:34:a8:e9:af:4c:bf:40:c5:a8:9c:c2:6e: 0b:b8:31:fb:87:0e:18:b8:1c:7b:4a:48:d3:1b:b9: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:D3:14:1C:47:96:B8:DB:70:63:10:01:3A:BD:65:3F:60:E5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1b:2b:38:23:d7:6f:28:5d:4b:17:b5:0c:5b:e8:84:d0:d2: 6b:b6:77:f6:9d:e6:55:8f:ef:29:3e:98:4b:fa:f2:9b:fe:6f: b8:68:22:ff:fc:12:63:05:fe:49:48:a5:73:a2:0c:56:09:98: fb:97:6b:59:88:a0:f4:7e:eb:0e:55:2f:07:46:d5:5b:e4:68: 28:d9:b2:1b:62:f6:0a:c4:b5:0e:a2:72:8e:7c:6b:3d:56:e8: 03:fb:03:6a:12:97:f0:14:74:d3:44:34:96:f0:a1:6d:a8:96: 2c:51:5c:2d:4e:b3:0a:33:3b:12:12:c2:56:a3:91:2e:7a:2a: 23:47:de:32:c4:49:de:be:47:99:63:47:8f:9c:4d:39:c8:3a: a0:14:db:b3:2a:33:4c:67:b6:aa:8a:ac:d6:9a:59:0c:5a:5c: c1:cb:c9:bd:5d:a4:98:9c:ab:01:84:1a:8d:de:06:72:d9:8a: 2c:05:0e:94:aa:5b:aa:85:9b:5d:dd:28:d8:30:a8:31:e7:f7: df:6f:2d:81:b8:78:07:a9:8b:15:55:7a:c1:0e:44:a3:ee:f8: ac:16:6e:e9:b3:4f:ff:5a:6b:57:7e:35:fb:3c:01:3c:4d:c0: f1:1a:3a:24:38:32:fc:5d:4e:54:62:a2:aa:8d:5a:50:c6:c4: 48:a4:ab:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fNHe0Cd31kIN8zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NjcxNTQ3MzUtMzM5NC00ODNlLWJjZjMtNTNkNGMxNzE1MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzl6SEftqquL8d/weRVSNIQ+3eXhHli0gLb aAUpK32Oy8FevVNcKCDn1/ifvRkEPN/+6Z9k7XbnYlgKN0UPhZ+NxlxgaSs2IZ8u X8oM1ctrg5jfa54VWUjcMkyFrTrq4X+I2iFlAK9b6jYv2cpJnanK8aI/Ro0wBR4l ozb5p5Wb+0rwXXIoKWWEGR0q267rIwdYHm8bR2FCW/oiJn9VXcaJ2PtZMCbkkhQo vJUOvxbVx69SL2Wpn7ckDxbvqZCqrtT+UbGigF8nAE7JtMMs/aLCLFSgO7xio2zK lQdrEXGGA9U0qOmvTL9Axaicwm4LuDH7hw4YuBx7SkjTG7nOVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOT+0xQcR5a423BjEAE6vWU/YOWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZGZlOTU4ODAtZTA4Yy0z Yzg4LWJhMGYtNjc2ZWJmNTZiZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwbKzgj128oXUsXtQxb6ITQ0mu2d/ad5lWP7yk+mEv68pv+b7ho Iv/8EmMF/klIpXOiDFYJmPuXa1mIoPR+6w5VLwdG1VvkaCjZshti9grEtQ6ico58 az1W6AP7A2oSl/AUdNNENJbwoW2olixRXC1OswozOxISwlajkS56KiNH3jLESd6+ R5ljR4+cTTnIOqAU27MqM0xntqqKrNaaWQxaXMHLyb1dpJicqwGEGo3eBnLZiiwF DpSqW6qFm13dKNgwqDHn999vLYG4eAepixVVesEORKPu+KwWbumzT/9aa1d+Nfs8 ATxNwPEaOiQ4MvxdTlRioqqNWlDGxEikq5Q= -----END CERTIFICATE-----Generated at Fri Sep 4 23:07:13 2026 by rpki-client