$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: CUTd7PI3ExtwM03YuCAsquRZKMBwoXXfAXSqFWi1rRs= Subject key identifier: 2F:50:70:FB:9E:F1:BD:D4:14:DF:22:90:C6:4F:31:E7:A2:EA:DC:B5 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584EA8EC4658040A2D6F63DE4E00 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:46:58:04:0a:2d:6f:63:de:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=68d1d6ff-87bc-462a-80e6-4d91e0afe713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:b7:21:e2:a0:23:cb:1d:56:b1:07:78:7b: 69:78:84:22:d8:72:d5:63:74:82:f7:74:43:eb:0a: 01:b9:c0:60:7b:58:e1:46:f4:74:30:f2:c6:dd:9f: b6:88:6d:85:a3:92:7e:4f:2e:a3:33:2c:9a:45:24: 97:30:76:4b:0e:63:89:1f:c9:f5:d6:1a:8b:b5:c8: 3a:09:5d:03:32:d9:55:f6:0f:0d:a2:27:02:12:1f: c9:ef:dc:bc:9a:00:70:b7:46:8b:d6:d4:c7:40:50: 54:fb:dc:bb:62:8e:4f:ee:54:8e:a8:65:43:49:95: 72:7c:7b:d3:77:c9:28:21:e0:d4:af:61:f3:ec:d5: 38:32:a1:d0:b0:bc:92:29:72:8f:69:b3:11:12:0d: 0e:f6:b6:e7:9a:7d:20:09:5f:ab:90:1b:76:8e:0d: 6c:39:7e:1a:56:60:c8:1d:ba:41:90:e7:96:e5:da: 08:40:22:c4:c8:4e:30:12:7e:03:27:d2:8d:4b:5c: 44:51:64:7e:d1:35:a1:02:84:1f:89:27:37:70:2f: 21:ad:c0:64:25:0e:ca:ee:f0:d8:31:6f:3a:8e:50: c8:0e:3c:2c:c6:da:ef:66:09:32:06:79:b8:fa:3b: 55:03:e2:40:7e:6a:05:1f:ef:8b:8f:43:2a:40:b8: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:50:70:FB:9E:F1:BD:D4:14:DF:22:90:C6:4F:31:E7:A2:EA:DC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:98:99:f6:d1:13:2b:97:27:71:56:64:59:44:bf:9b:31:6c: db:47:98:c5:f2:84:8e:57:69:55:7d:71:ef:94:14:fb:8d:66: 03:96:ea:b9:72:52:b4:9b:78:dc:a0:32:3a:08:e6:01:cc:81: f4:3a:b6:e0:77:d5:3a:41:1f:7e:c0:b5:52:ae:90:89:6a:2a: 3f:7d:ad:a3:b1:52:1d:5e:79:db:e4:85:33:33:48:d1:90:aa: 46:61:d2:97:57:44:9b:48:99:b5:ba:fb:94:54:c5:74:6b:27: ef:2a:88:f8:b0:ae:93:50:e1:d7:95:6c:70:91:ff:88:61:39: 2f:6d:5d:db:bb:59:c3:02:1d:cc:54:18:8a:11:df:e4:96:ae: 0d:9d:bd:88:c4:56:3a:4c:27:dc:1b:b9:73:d6:a8:5d:25:e5: bb:23:e1:c8:fc:62:3f:d1:d2:e5:15:62:e7:0c:40:7f:64:5c: ed:ae:e2:5e:3d:cd:d2:ac:c3:2d:d4:59:39:2b:81:14:31:79: e7:af:82:de:86:86:f8:09:9e:88:8b:a7:67:08:7c:13:44:fc: 21:cb:78:9d:c5:e7:b8:36:9c:ce:85:f3:b2:cc:1b:f0:ed:5a: 87:91:a3:f2:44:8f:70:33:ba:de:a0:66:2d:18:84:f6:6c:f9: 5f:e7:3f:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6o7EZYBAotb2PeTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk NjhkMWQ2ZmYtODdiYy00NjJhLTgwZTYtNGQ5MWUwYWZlNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEq3IeKgI8sdVrEHeHtpeIQi2HLVY3SC93RD 6woBucBge1jhRvR0MPLG3Z+2iG2Fo5J+Ty6jMyyaRSSXMHZLDmOJH8n11hqLtcg6 CV0DMtlV9g8NoicCEh/J79y8mgBwt0aL1tTHQFBU+9y7Yo5P7lSOqGVDSZVyfHvT d8koIeDUr2Hz7NU4MqHQsLySKXKPabMREg0O9rbnmn0gCV+rkBt2jg1sOX4aVmDI HbpBkOeW5doIQCLEyE4wEn4DJ9KNS1xEUWR+0TWhAoQfiSc3cC8hrcBkJQ7K7vDY MW86jlDIDjwsxtrvZgkyBnm4+jtVA+JAfmoFH++Lj0MqQLhkPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9QcPue8b3UFN8ikMZPMeei6ty1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALiYmfbREyuXJ3FWZFlEv5sxbNtHmMXyhI5XaVV9ce+UFPuNZgOW 6rlyUrSbeNygMjoI5gHMgfQ6tuB31TpBH37AtVKukIlqKj99raOxUh1eedvkhTMz SNGQqkZh0pdXRJtImbW6+5RUxXRrJ+8qiPiwrpNQ4deVbHCR/4hhOS9tXdu7WcMC HcxUGIoR3+SWrg2dvYjEVjpMJ9wbuXPWqF0l5bsj4cj8Yj/R0uUVYucMQH9kXO2u 4l49zdKswy3UWTkrgRQxeeevgt6GhvgJnoiLp2cIfBNE/CHLeJ3F57g2nM6F87LM G/DtWoeRo/JEj3Azut6gZi0YhPZs+V/nPwM= -----END CERTIFICATE-----Generated at Fri Aug 21 22:30:15 2026 by rpki-client