$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa File: 5b4385d4-3792-3f26-9dea-55e5f859a324.roa (raw, json) Hash identifier: Jc+1TOji0vFAyhVmQlPUG9JD7lgsWGQxl1DI0VnrGDI= Subject key identifier: 35:2B:3D:AF:33:14:3B:F3:65:05:E1:41:73:BE:00:F6:E5:92:CB:ED Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584EF71762141E9268119B551180 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2606:7740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:62:14:1e:92:68:11:9b:55:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=20036ec7-9895-4a9a-83c7-c78c4cf28050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:23:a2:97:8e:3f:4b:7a:0d:29:6c:17:0c: 45:ea:f4:59:8a:97:ab:14:34:8d:ba:d2:b6:af:48: d9:bb:e2:ee:a8:14:0d:bd:65:35:c0:e5:dc:62:ad: 78:c2:52:f9:57:b4:d8:0c:e4:a9:c0:63:b2:7a:d4: 20:a3:81:9b:71:bd:dd:20:a6:0c:f1:0e:4c:b1:67: b8:a6:e6:a8:2b:b9:10:57:95:63:eb:7d:97:34:ff: b8:81:27:9f:ac:46:84:41:5e:9c:13:63:7e:cb:9b: 03:92:17:7e:e4:6a:7b:7a:35:32:2c:d6:a0:20:06: 50:2f:03:be:d6:7b:c7:0b:69:37:9c:12:d2:72:f3: ca:b7:b2:e8:b2:75:92:fd:74:fc:01:6b:e8:6b:00: c3:5f:3a:60:4c:e1:8f:c0:19:51:7d:d5:d3:77:b8: 25:99:b5:d5:90:be:78:50:44:c4:d8:20:5a:77:35: 44:aa:ff:8c:7c:a1:73:f8:f4:f9:46:38:d7:e1:5e: 67:e6:bf:f7:a8:3e:6f:64:03:9f:4a:b2:cc:46:b4: e8:84:d2:18:f1:fd:bd:3d:71:d7:b0:a7:ff:cc:e6: b3:42:8d:14:92:cb:11:88:c8:82:fb:25:1d:f2:1d: 22:6e:0d:36:80:cd:76:ad:2d:3f:24:2c:e2:ad:ec: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:3D:AF:33:14:3B:F3:65:05:E1:41:73:BE:00:F6:E5:92:CB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e4:e5:bf:26:a1:b1:d8:08:c2:05:91:fd:02:12:e9:f5:59: 66:b4:a1:32:5f:80:31:d5:46:12:5b:5d:bf:7b:6e:ac:88:55: b1:56:b9:34:e9:bd:08:86:4a:2d:64:ee:5c:53:c8:bf:c7:10: e5:d6:f9:73:0f:55:36:e8:c6:ef:9e:2c:08:2b:2c:5e:79:85: 00:5a:12:eb:63:b5:6b:10:60:45:81:fa:a1:c8:cb:d3:7b:d5: 32:28:ae:ff:31:d1:7f:9a:ea:c4:8a:76:da:05:8b:98:be:d9: dc:ff:49:c5:c4:b0:ee:74:a8:be:dc:31:92:c4:61:5d:2f:e7: cc:35:37:e1:4e:71:cd:23:ff:4a:06:48:8e:5f:df:9b:98:77: 8f:85:a5:3b:44:68:e7:cc:19:d5:51:df:5d:d9:4d:f8:87:1d: f6:5f:b4:c3:3a:56:f0:c7:b8:d8:82:7e:bb:67:80:22:44:e7: ea:3d:b7:ff:2f:83:04:65:eb:c6:43:92:b5:8c:07:2e:4d:6e: a0:ac:05:eb:51:cc:dd:c3:00:ae:55:18:d5:62:e5:53:35:94: fc:6a:73:60:42:6c:94:ac:ba:ab:e3:e6:eb:68:c9:82:36:fe: 60:98:ba:22:c2:47:49:03:d6:5e:13:8e:13:89:84:4c:63:98: 0d:12:03:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F2IUHpJoEZtVEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MjAwMzZlYzctOTg5NS00YTlhLTgzYzctYzc4YzRjZjI4MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQjopeOP0t6DSlsFwxF6vRZiperFDSNutK2 r0jZu+LuqBQNvWU1wOXcYq14wlL5V7TYDOSpwGOyetQgo4Gbcb3dIKYM8Q5MsWe4 puaoK7kQV5Vj632XNP+4gSefrEaEQV6cE2N+y5sDkhd+5Gp7ejUyLNagIAZQLwO+ 1nvHC2k3nBLScvPKt7LosnWS/XT8AWvoawDDXzpgTOGPwBlRfdXTd7glmbXVkL54 UETE2CBadzVEqv+MfKFz+PT5RjjX4V5n5r/3qD5vZAOfSrLMRrTohNIY8f29PXHX sKf/zOazQo0UkssRiMiC+yUd8h0ibg02gM12rS0/JCzirexyyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUrPa8zFDvzZQXhQXO+APblksvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvNWI0Mzg1ZDQtMzc5Mi0z ZjI2LTlkZWEtNTVlNWY4NTlhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDk5b8mobHYCMIFkf0CEun1WWa0oTJfgDHVRhJbXb97bqyIVbFW uTTpvQiGSi1k7lxTyL/HEOXW+XMPVTboxu+eLAgrLF55hQBaEutjtWsQYEWB+qHI y9N71TIorv8x0X+a6sSKdtoFi5i+2dz/ScXEsO50qL7cMZLEYV0v58w1N+FOcc0j /0oGSI5f35uYd4+FpTtEaOfMGdVR313ZTfiHHfZftMM6VvDHuNiCfrtngCJE5+o9 t/8vgwRl68ZDkrWMBy5NbqCsBetRzN3DAK5VGNVi5VM1lPxqc2BCbJSsuqvj5uto yYI2/mCYuiLCR0kD1l4TjhOJhExjmA0SA6I= -----END CERTIFICATE-----Generated at Sat Sep 26 13:08:38 2026 by rpki-client