$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa File: 682b6135-e067-305c-a752-4e63ad4480df.roa (raw, json) Hash identifier: VHQHbsZ5BcFTmPHZKf6cThrhG4PeqdcNYJ5tTm1H3xg= Subject key identifier: D5:68:98:5D:B3:54:77:49:EB:B5:5A:DF:55:71:98:85:23:5D:95:67 Certificate issuer: /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Certificate serial: 010D0C9F4328584EE7BCAE1508160B23EA1C5940 Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 40153 IP address blocks: 2620:8d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ae:15:08:16:0b:23:ea:1c:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=6a3858d2-9c45-4884-8805-4e92bcf60a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:78:d8:4b:be:bf:e7:9a:5d:de:92:82:f8: aa:32:83:fc:57:4b:a1:57:b4:44:ef:c1:3a:bf:c6: 70:7b:b0:8f:9b:56:dd:c6:15:1c:8a:90:1d:8b:1c: c5:13:d8:6d:27:73:fa:b8:30:5b:a5:5c:60:0c:f4: 1e:ef:fa:5f:57:ce:09:6d:56:1b:02:00:91:41:53: 95:4e:28:08:96:8d:ae:59:4c:53:78:9f:be:14:19: dd:ac:ad:d0:b2:6b:51:ff:fb:13:6e:2c:b9:5e:a6: b0:49:71:ea:cd:20:6e:fe:a6:54:5d:1d:5e:f8:b0: 5c:0e:8d:86:82:4f:7a:f5:65:f7:fe:5e:61:f0:00: cf:d8:10:40:c2:d9:38:01:d2:62:9d:73:cd:06:8e: c4:04:27:83:85:db:e2:f0:4f:3c:85:8f:2e:9a:68: 8e:9b:b8:aa:f9:30:9f:0c:65:5e:83:2b:fc:f2:cc: ce:f9:10:ee:2e:92:ea:39:49:24:33:58:f2:14:86: 5d:d3:c4:d6:6d:c2:ef:51:66:9c:68:2e:81:d4:6a: 23:21:b4:ec:91:77:6c:a5:95:a5:07:7c:1f:ea:c4: 1f:8c:3b:d8:a7:47:d0:4c:4c:8c:a1:8f:b2:40:7b: a4:60:34:de:ff:03:34:0f:c2:ec:1a:c1:c3:73:56: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:98:5D:B3:54:77:49:EB:B5:5A:DF:55:71:98:85:23:5D:95:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl X509v3 Authority Key Identifier: keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer sbgp-ipAddrBlock: critical IPv6: 2620:8d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4e:e0:d9:b7:d6:b1:d1:24:8d:4b:e3:46:d5:dc:6f:b7:b8: 2e:4b:f6:57:af:f7:b3:51:4e:37:76:ab:2a:84:68:7c:32:c3: b2:2b:dd:ea:aa:2d:79:51:d4:06:04:62:27:77:57:c7:ac:5f: df:12:68:5e:49:f5:d6:3f:c6:61:d0:76:e2:8c:ef:65:0d:56: f6:ca:68:39:96:95:d7:e9:68:29:92:35:20:7d:cf:57:3c:2a: b6:d2:c5:20:d0:bb:6d:2a:56:30:99:ab:8a:e4:6e:00:03:f2: ec:2b:d4:7e:4d:b8:e5:ca:81:66:73:96:c1:ed:b4:53:04:60: ce:67:90:1a:a9:55:44:78:92:26:85:3e:20:66:a8:47:dd:2e: 54:64:1f:9a:27:9a:5a:84:47:ce:9c:62:fd:da:0b:e8:c8:65: e6:87:0d:7a:24:1f:14:4e:8a:7f:e4:b7:57:17:90:8d:7b:ea: 2e:7c:1c:20:53:3d:67:1a:47:eb:42:b8:90:de:84:91:a8:e5: b2:ed:f0:ad:60:2e:94:d8:2b:6a:15:f8:ea:12:6e:c3:e4:21: 0a:f8:3b:43:49:b7:e1:40:96:27:57:75:46:81:6c:d6:fe:cd: 2b:76:d1:20:12:fc:ef:58:f4:9e:a3:3f:cb:5b:d7:48:18:70: b2:89:39:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7nvK4VCBYLI+ocWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3YmQ2NWYtODNkMi00MDQ2LWFkNjQtNDBiYTQ1ODQx NWEyMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NmEzODU4ZDItOWM0NS00ODg0LTg4MDUtNGU5MmJjZjYwYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinF42Eu+v+eaXd6SgviqMoP8V0uhV7RE78E6 v8Zwe7CPm1bdxhUcipAdixzFE9htJ3P6uDBbpVxgDPQe7/pfV84JbVYbAgCRQVOV TigIlo2uWUxTeJ++FBndrK3QsmtR//sTbiy5XqawSXHqzSBu/qZUXR1e+LBcDo2G gk969WX3/l5h8ADP2BBAwtk4AdJinXPNBo7EBCeDhdvi8E88hY8ummiOm7iq+TCf DGVegyv88szO+RDuLpLqOUkkM1jyFIZd08TWbcLvUWacaC6B1GojIbTskXdspZWl B3wf6sQfjDvYp0fQTEyMoY+yQHukYDTe/wM0D8LsGsHDc1Y5vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVomF2zVHdJ67Va31VxmIUjXZVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdi ZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJhNDU4NDE1YTIvNjgyYjYxMzUtZTA2Ny0z MDVjLWE3NTItNGU2M2FkNDQ4MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ3YmQ2NWYtODNkMi00MDQ2LWFk NjQtNDBiYTQ1ODQxNWEyL2ZkN2JkNjVmLTgzZDItNDA0Ni1hZDY0LTQwYmE0NTg0 MTVhMi5jcmwwHwYDVR0jBBgwFoAUcz2oFnyQe5iHVNEbg2WD3ys1MBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdiZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJh NDU4NDE1YTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNO4Nm31rHRJI1L40bV3G+3uC5L9lev97NRTjd2qyqEaHwyw7Ir 3eqqLXlR1AYEYid3V8esX98SaF5J9dY/xmHQduKM72UNVvbKaDmWldfpaCmSNSB9 z1c8KrbSxSDQu20qVjCZq4rkbgAD8uwr1H5NuOXKgWZzlsHttFMEYM5nkBqpVUR4 kiaFPiBmqEfdLlRkH5onmlqER86cYv3aC+jIZeaHDXokHxROin/kt1cXkI176i58 HCBTPWcaR+tCuJDehJGo5bLt8K1gLpTYK2oV+OoSbsPkIQr4O0NJt+FAlidXdUaB bNb+zSt20SAS/O9Y9J6jP8tb10gYcLKJOcs= -----END CERTIFICATE-----Generated at Sat Aug 22 18:08:40 2026 by rpki-client