$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/5a6474e2-162c-3b8c-af30-612b497e0853.roa File: 5a6474e2-162c-3b8c-af30-612b497e0853.roa (raw, json) Hash identifier: KjEg8lVmlGfMtXgMHkPYFMHcnqvIwCqX/0ZC2pcRAEc= Subject key identifier: A2:3A:0D:59:05:3E:00:94:27:67:6C:59:63:1E:5C:AA:3A:79:AF:C6 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584EAF23408178F33D07E3113A60 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/5a6474e2-162c-3b8c-af30-612b497e0853.roa Signing time: Fri 31 Jul 2026 18:26:00 +0000 ROA not before: Fri 31 Jul 2026 18:26:00 +0000 ROA not after: Thu 29 Oct 2026 18:26:00 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:40:81:78:f3:3d:07:e3:11:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Jul 31 18:26:00 2026 GMT Not After : Oct 29 18:26:00 2026 GMT Subject: CN=9e0f5d90-e66c-44a5-8033-98b9bed656a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:b5:52:7a:84:fa:87:bf:48:5a:1d:84:fe: 94:bf:7d:c3:76:a8:8d:7c:88:10:a8:de:a9:f1:71: fd:a1:81:32:68:7c:d7:29:8d:fb:69:79:ae:5e:ee: 12:3e:8c:be:42:70:40:6a:d9:94:e3:14:5f:14:11: a0:b2:df:90:ae:94:51:26:51:aa:b5:9d:30:4b:0a: 7c:93:35:8f:41:3b:9f:cc:91:68:27:51:ad:bf:95: 75:48:3b:38:85:1b:54:15:20:20:e9:c8:fc:9f:6d: 1b:ba:20:5f:b7:ed:57:d4:31:88:fb:6b:ee:92:90: ab:22:a6:31:29:df:5d:39:ef:9c:97:00:36:7e:95: ff:eb:d7:f0:39:a2:02:c2:65:f2:0a:4c:cd:63:8d: 7b:84:0c:9e:46:50:69:3e:fb:f1:d5:9a:96:39:44: 76:96:af:14:b9:e0:44:cd:cb:77:2e:f9:90:6e:fb: 69:db:78:87:32:0c:9e:b8:5b:cd:52:b5:7e:10:b3: 2c:d4:21:44:ba:3d:d8:6b:34:21:af:1d:09:83:9b: a2:4d:db:98:b2:77:d8:50:3a:d9:7f:07:15:35:d8: df:c3:45:7c:c8:0c:0b:65:5d:9b:d3:49:cb:74:2a: c7:ff:27:9f:d3:3c:fd:6d:02:15:49:46:a6:ee:d2: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3A:0D:59:05:3E:00:94:27:67:6C:59:63:1E:5C:AA:3A:79:AF:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/5a6474e2-162c-3b8c-af30-612b497e0853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:de:31:8f:64:e3:29:38:e6:f0:dc:c0:d2:39:75:9e:ca:3d: 7f:13:9e:e9:8f:f6:b5:c1:a6:bd:67:49:23:a2:c6:f5:e5:26: c5:bd:c4:17:01:b6:30:0c:30:8f:19:c1:b8:ed:86:76:2e:6d: d2:05:4f:38:5c:bb:0b:b2:a1:2a:44:0b:75:54:47:41:e2:38: 2c:8d:32:1d:b8:52:92:b2:7c:03:0b:aa:4f:e3:b2:bf:30:5a: 95:d7:36:89:ae:f9:03:d2:09:1c:2c:dc:6a:c7:fd:05:7c:2c: 5b:e5:19:38:ce:64:bf:51:7c:9b:68:d1:7e:b8:f0:b0:2c:95: 74:82:c7:fa:ee:ec:2b:dc:ea:f4:9f:be:a0:3e:27:33:e7:7a: c2:2d:60:9f:f0:47:c8:a5:e1:87:2c:1e:2e:f4:f7:ae:e4:15: 0d:f5:56:ef:15:a6:7a:1a:f4:0b:b3:e8:cd:34:40:db:6b:87: 37:0f:6d:96:59:7e:06:d6:b7:a7:a7:64:0d:24:80:a3:d3:0f: f9:89:12:63:e1:ea:89:1b:9c:f7:41:f0:f0:c8:4e:86:e1:1d: 1b:28:b9:bc:eb:8d:2b:67:54:a3:db:3e:e1:f1:ba:52:68:ae: 36:08:2c:78:91:dd:34:f8:35:c7:9e:07:1e:7b:7f:1d:3d:2b: 43:d2:60:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6vI0CBePM9B+MROmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI2MDczMTE4MjYwMFoXDTI2MTAyOTE4MjYwMFowLzEtMCsGA1UEAxMk OWUwZjVkOTAtZTY2Yy00NGE1LTgwMzMtOThiOWJlZDY1NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K21UnqE+oe/SFodhP6Uv33DdqiNfIgQqN6p 8XH9oYEyaHzXKY37aXmuXu4SPoy+QnBAatmU4xRfFBGgst+QrpRRJlGqtZ0wSwp8 kzWPQTufzJFoJ1Gtv5V1SDs4hRtUFSAg6cj8n20buiBft+1X1DGI+2vukpCrIqYx Kd9dOe+clwA2fpX/69fwOaICwmXyCkzNY417hAyeRlBpPvvx1ZqWOUR2lq8UueBE zct3LvmQbvtp23iHMgyeuFvNUrV+ELMs1CFEuj3YazQhrx0Jg5uiTduYsnfYUDrZ fwcVNdjfw0V8yAwLZV2b00nLdCrH/yef0zz9bQIVSUam7tJ2vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKI6DVkFPgCUJ2dsWWMeXKo6ea/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvNWE2NDc0ZTItMTYyYy0z YjhjLWFmMzAtNjEyYjQ5N2UwODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAT3jGPZOMpOObw3MDSOXWeyj1/E57pj/a1waa9Z0kjosb15SbFvcQX AbYwDDCPGcG47YZ2Lm3SBU84XLsLsqEqRAt1VEdB4jgsjTIduFKSsnwDC6pP47K/ MFqV1zaJrvkD0gkcLNxqx/0FfCxb5Rk4zmS/UXybaNF+uPCwLJV0gsf67uwr3Or0 n76gPicz53rCLWCf8EfIpeGHLB4u9Peu5BUN9VbvFaZ6GvQLs+jNNEDba4c3D22W WX4G1renp2QNJICj0w/5iRJj4eqJG5z3QfDwyE6G4R0bKLm8640rZ1Sj2z7h8bpS aK42CCx4kd00+DXHngcee38dPStD0mDb -----END CERTIFICATE-----Generated at Sat Aug 22 18:10:25 2026 by rpki-client