$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa File: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json) Hash identifier: OjtqB8jRlhKTREcKzexibEQnAC1hE6+6eFUR/t4N0eU= Subject key identifier: C4:C3:17:40:88:7F:A6:52:3B:E1:BD:66:66:DC:DC:6A:45:66:85:79 Certificate issuer: /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Certificate serial: 010D0C9F4328584EF7176672725660A7D4779580 Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 984 IP address blocks: 2606:fb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:66:72:72:56:60:a7:d4:77:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=5a0b2747-e99c-478a-9ccc-7d0e3639f110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:98:4d:b1:6b:a9:9d:dd:5d:f9:34:fd:b2: 8a:67:ee:01:38:73:f1:66:95:6b:84:a2:67:5c:ba: 79:88:40:f4:65:32:05:bc:2d:8e:0c:1d:19:83:20: 9a:47:1a:5b:82:4e:c9:b5:39:74:d6:b0:05:f5:07: 31:ef:88:c8:f8:03:7a:69:d9:6c:41:92:bd:48:5f: 08:c4:af:a6:17:98:a1:13:2f:fb:f8:9f:e9:69:e7: 9c:fd:bf:76:54:4a:02:57:86:b5:e2:7e:bc:b2:aa: 16:51:9d:37:4c:44:27:f1:0e:cc:9c:07:5d:91:c6: 52:62:98:9e:dc:48:a1:0a:d0:e3:c3:f4:b9:29:37: fd:7d:7d:6b:e1:c3:01:c1:4f:2c:0a:eb:04:c4:52: 16:cb:ce:39:45:75:3b:b9:8c:24:be:5b:e1:7e:b9: 5a:93:8c:62:7f:92:0a:81:98:b9:f5:35:d7:5f:48: 3f:78:6b:4a:89:d5:41:ec:f9:6a:fa:04:79:c9:8b: 72:19:c7:4f:dc:18:52:da:0c:93:f6:0a:0c:d4:ab: 5b:de:cc:51:1a:9c:53:0a:5e:d3:e4:57:80:05:11: b7:a5:40:c4:ce:2b:36:77:d3:6b:83:7d:3b:72:f7: 8e:26:b4:e5:9e:3f:6c:bc:c0:de:48:11:41:d9:b1: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C3:17:40:88:7F:A6:52:3B:E1:BD:66:66:DC:DC:6A:45:66:85:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl X509v3 Authority Key Identifier: keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:63:94:8a:a7:b2:5f:61:b9:28:bc:99:f9:6a:f2:87:71:b6: 21:27:a7:47:d9:e0:8b:20:12:63:94:ec:3b:a0:e5:41:f4:a4: c4:5b:f4:d9:9b:63:71:29:97:48:87:72:dc:ab:0d:fa:ef:4f: b3:6e:ec:6a:fc:f3:d2:2b:98:9e:b2:28:17:3c:04:f8:5e:b0: 18:7d:b9:d0:31:d2:c0:9f:da:5b:c4:2e:26:f5:a5:e8:7c:36: f3:fc:fc:1b:93:65:9a:c1:70:08:ed:17:c2:be:e0:50:86:95: 8f:94:6d:a7:38:57:94:4f:a1:f2:fb:6f:cb:c7:ea:2c:00:15: c7:47:92:55:60:98:dc:4e:84:9e:f3:90:2f:53:45:9f:32:0d: 3a:3d:f8:8a:20:a2:86:db:20:a8:fe:84:a5:67:b1:8a:50:0d: 4f:35:a0:36:8a:8e:39:f4:4c:5f:c4:b6:6b:5b:d4:5a:9e:61: 4e:fb:0d:45:25:77:7e:08:54:85:86:0f:28:cf:3d:28:00:88: 73:cf:be:5b:1c:b6:04:19:1d:5b:9a:b0:46:fc:e6:61:51:fb: 3b:5d:83:70:8d:c0:ed:ee:03:06:e6:9e:29:b7:5d:c3:3b:d4: 53:6c:76:78:48:6a:56:28:48:b3:42:80:f4:e3:4a:cf:12:fe: 7e:9b:cf:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE73F2ZyclZgp9R3lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5 ZjM5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NWEwYjI3NDctZTk5Yy00NzhhLTljY2MtN2QwZTM2MzlmMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwiYTbFrqZ3dXfk0/bKKZ+4BOHPxZpVrhKJn XLp5iED0ZTIFvC2ODB0ZgyCaRxpbgk7JtTl01rAF9Qcx74jI+AN6adlsQZK9SF8I xK+mF5ihEy/7+J/paeec/b92VEoCV4a14n68sqoWUZ03TEQn8Q7MnAddkcZSYpie 3EihCtDjw/S5KTf9fX1r4cMBwU8sCusExFIWy845RXU7uYwkvlvhfrlak4xif5IK gZi59TXXX0g/eGtKidVB7Plq+gR5yYtyGcdP3BhS2gyT9goM1Ktb3sxRGpxTCl7T 5FeABRG3pUDEzis2d9Nrg307cveOJrTlnj9svMDeSBFB2bHVKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTDF0CIf6ZSO+G9Zmbc3GpFZoV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5 OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGY5SKp7JfYbkovJn5avKHcbYhJ6dH2eCLIBJjlOw7oOVB9KTEW/TZ m2NxKZdIh3Lcqw3670+zbuxq/PPSK5iesigXPAT4XrAYfbnQMdLAn9pbxC4m9aXo fDbz/Pwbk2WawXAI7RfCvuBQhpWPlG2nOFeUT6Hy+2/Lx+osABXHR5JVYJjcToSe 85AvU0WfMg06PfiKIKKG2yCo/oSlZ7GKUA1PNaA2io459ExfxLZrW9RanmFO+w1F JXd+CFSFhg8ozz0oAIhzz75bHLYEGR1bmrBG/OZhUfs7XYNwjcDt7gMG5p4pt13D O9RTbHZ4SGpWKEizQoD040rPEv5+m88x -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:18 2026 by rpki-client