$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa File: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (raw, json) Hash identifier: y68hHB0id47ENy90uwDFHjavQrlGBXe9bvPKwEJNsG0= Subject key identifier: A6:74:0F:6E:B0:3B:A0:E1:47:8E:18:BF:5C:9D:F8:72:83:08:2D:19 Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584EA79B391683A7F79D6B63C400 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 402258 IP address blocks: 2620:a4:8860::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:39:16:83:a7:f7:9d:6b:63:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=51c437f6-9b51-4a46-8599-bdd08aec1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:22:e7:b1:42:ee:45:f4:00:ae:ec:cb:9e: 53:3e:96:6a:bd:07:48:54:2a:50:17:21:60:86:dd: 79:af:1d:db:af:0e:af:b2:95:f9:44:31:96:b7:f1: 75:53:bf:1c:ae:08:f8:7a:1f:ed:7c:3f:70:6c:07: e4:3e:bb:19:cd:bc:41:d8:47:ac:d0:e2:31:69:2e: 0a:04:cc:44:b1:c9:ba:66:a7:bc:13:1d:74:b2:99: dd:73:c2:d9:56:d0:f7:e6:c6:a2:14:ab:83:03:8a: d4:bd:0c:be:9c:cc:1f:80:b8:18:aa:a5:0d:be:1c: b0:f1:15:2c:21:29:23:99:81:c3:d4:9d:c1:ff:6c: 80:ee:22:60:bb:8a:3c:3c:d2:9e:04:1d:34:c1:2a: 15:40:2c:5d:68:33:ec:ec:63:46:0e:de:8a:7e:4a: db:d6:d3:e2:9d:6f:1c:8b:9d:e0:d6:fb:d5:66:dc: 93:db:27:94:48:68:9d:6f:8a:2e:ef:61:5f:a0:ce: 9f:a3:e8:5b:0a:dd:49:2d:d8:bc:ac:e3:2c:9f:af: 12:f3:07:75:53:53:06:45:d2:51:87:ca:5a:4c:f1: 19:88:27:08:a7:01:05:13:de:11:32:a8:46:b8:ac: f1:e9:27:e4:01:1f:6a:cd:10:17:16:db:10:46:c4: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:0F:6E:B0:3B:A0:E1:47:8E:18:BF:5C:9D:F8:72:83:08:2D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:8860::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8a:36:84:61:09:fe:80:ae:4b:52:e4:1d:05:14:fd:ea:dd: 18:48:e3:c0:da:31:c7:6e:5f:78:f4:cb:58:75:3e:8c:39:58: 09:60:b3:b6:68:b0:97:1b:b1:ba:c4:b3:7e:17:7d:38:84:06: 54:b0:a4:dd:96:7e:9e:8e:d3:42:be:6f:ff:d3:64:33:e2:27: 8a:af:57:fa:30:fb:c0:40:54:73:03:2c:b4:4e:23:c1:c6:b3: 30:78:03:a7:20:72:aa:84:5b:2b:68:5f:1d:19:12:29:81:8a: 74:ef:dc:0d:d7:41:b0:f4:54:bb:65:60:3b:71:8b:5d:d7:7d: 31:42:dc:75:b7:55:2b:02:5c:20:bb:42:c3:ac:42:9b:f0:2e: 5b:8a:1e:13:8a:c3:ad:1e:b3:f4:1f:fb:2f:bc:b4:6a:4c:ad: 64:41:f6:26:6b:e6:ed:93:21:e2:08:2f:57:0d:b1:03:f3:be: 39:06:af:5c:3f:68:8b:d2:12:7e:d8:28:3f:28:c0:2c:f7:1e: a7:7d:8d:d9:3a:33:77:c5:3f:21:4e:5e:3e:0d:a9:71:df:84: 9e:9b:58:f6:c7:fc:4a:49:df:d0:7d:93:7b:d5:aa:94:1b:82: 40:98:b8:13:66:51:2a:fe:a5:f7:16:ec:d0:cc:fd:0b:e2:3d: f9:f4:07:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmzkWg6f3nWtjxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTFjNDM3ZjYtOWI1MS00YTQ2LTg1OTktYmRkMDhhZWMxMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3soi57FC7kX0AK7sy55TPpZqvQdIVCpQFyFg ht15rx3brw6vspX5RDGWt/F1U78crgj4eh/tfD9wbAfkPrsZzbxB2Ees0OIxaS4K BMxEscm6Zqe8Ex10spndc8LZVtD35saiFKuDA4rUvQy+nMwfgLgYqqUNvhyw8RUs ISkjmYHD1J3B/2yA7iJgu4o8PNKeBB00wSoVQCxdaDPs7GNGDt6Kfkrb1tPinW8c i53g1vvVZtyT2yeUSGidb4ou72FfoM6fo+hbCt1JLdi8rOMsn68S8wd1U1MGRdJR h8paTPEZiCcIpwEFE94RMqhGuKzx6SfkAR9qzRAXFtsQRsRnFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKZ0D26wO6DhR44Yv1yd+HKDCC0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvZjMzODI5NWMtNmU2Yy0z YjNjLTk4ZGQtMWU4MGMxOTU3NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAApIhg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOKNoRhCf6ArktS5B0FFP3q3RhI48DaMcduX3j0y1h1Pow5WAlg s7ZosJcbsbrEs34XfTiEBlSwpN2Wfp6O00K+b//TZDPiJ4qvV/ow+8BAVHMDLLRO I8HGszB4A6cgcqqEWytoXx0ZEimBinTv3A3XQbD0VLtlYDtxi13XfTFC3HW3VSsC XCC7QsOsQpvwLluKHhOKw60es/Qf+y+8tGpMrWRB9iZr5u2TIeIIL1cNsQPzvjkG r1w/aIvSEn7YKD8owCz3Hqd9jdk6M3fFPyFOXj4NqXHfhJ6bWPbH/EpJ39B9k3vV qpQbgkCYuBNmUSr+pfcW7NDM/QviPfn0BzQ= -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:34 2026 by rpki-client