$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa File: 18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa (raw, json) Hash identifier: HrtoetiCJ4yYN9093xeHDwaWRfGyajOVEK2LpEF4Vx8= Subject key identifier: C7:23:4F:D7:C2:C6:9D:3B:9E:2A:10:EA:74:37:5E:3C:16:47:9F:57 Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584EF44CACE97B8068FDDEBBCD00 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 138415 IP address blocks: 2604:1420::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ac:e9:7b:80:68:fd:de:bb:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=6407989a-5f67-4f43-bc10-e258ea7ff84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:d9:aa:f5:85:65:ee:0c:07:c9:cb:85:f5: 40:d7:66:43:69:a3:87:e6:93:5d:45:53:45:e6:ba: 71:cb:54:51:4a:5f:ac:0d:33:7e:f2:0a:a7:bc:12: 65:60:db:5e:40:cd:12:a6:b3:9d:bd:39:46:89:d1: c2:25:31:38:ae:56:12:24:ef:58:9b:4c:5d:bc:d3: fa:16:f1:5e:22:02:d9:0a:03:41:6c:48:b5:b0:e3: 4f:21:ec:ac:ca:1d:a0:41:2c:76:d2:4a:78:ef:10: 61:01:78:d5:04:4c:30:f3:00:74:4a:4f:f0:8c:3d: 09:62:2f:3d:4c:59:6e:c3:eb:21:6d:99:d2:8d:f1: 84:25:93:35:cd:93:f9:20:12:f6:91:54:dc:f4:d0: f7:97:a5:ec:6b:1c:fa:02:86:c3:f5:b5:d9:d4:ae: 81:9a:e5:8a:cc:85:31:a1:eb:2d:08:2f:7d:ba:14: 6d:d4:84:14:26:fb:79:50:e8:7f:03:21:66:e3:a7: f5:f9:94:56:db:c2:60:75:ad:4b:d0:30:cb:9b:74: 20:7f:59:75:04:57:36:15:c4:d6:fe:65:c1:df:e6: f9:50:7d:9d:08:ae:71:86:db:f1:0c:df:bf:a5:ed: 00:d2:82:cb:bd:61:71:69:61:88:d0:b0:13:33:ff: ad:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:23:4F:D7:C2:C6:9D:3B:9E:2A:10:EA:74:37:5E:3C:16:47:9F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv6: 2604:1420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d0:f5:ae:5a:f4:3d:59:cc:cb:06:c7:67:51:d4:b1:92:da: 70:23:e6:ac:c8:27:f9:80:66:2b:a5:62:00:91:92:9c:64:24: cf:c5:02:04:38:98:60:23:eb:02:c7:89:c1:47:5f:1b:67:fe: 5a:47:6b:20:ff:f9:d6:cc:a3:50:67:6f:dc:a4:62:21:24:10: 56:a2:b1:6d:c4:5c:29:2f:bf:60:6f:e0:52:ea:ea:da:1b:d9: 4c:7d:77:c9:a2:e7:50:cb:3a:4e:1b:e9:b3:79:22:89:88:55: e6:e7:1e:b7:68:10:09:af:ad:60:d9:79:8d:52:d9:87:14:e6: 8e:37:1b:16:22:2f:85:cc:d8:40:03:ad:d1:3b:87:7d:c6:b7: 5d:eb:1a:a8:4f:b0:9c:4b:36:c5:13:ac:3b:0b:0b:14:b0:f4: 3b:b1:cc:37:19:00:b1:11:3e:8f:d4:f6:8f:49:97:15:3b:b8: 0c:a8:cb:09:1d:57:ca:19:ae:83:b4:19:cc:91:c5:3d:cc:0d: 91:2d:7f:17:c7:67:56:3f:0e:27:e9:7f:dc:6e:70:a1:4c:c3: 97:09:47:fa:59:dd:27:e2:aa:68:47:d2:a2:de:f2:92:92:8c: 89:0e:34:01:3a:1b:17:29:12:55:c3:32:50:01:26:b6:62:b2: 84:89:b4:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE70TKzpe4Bo/d67zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NjQwNzk4OWEtNWY2Ny00ZjQzLWJjMTAtZTI1OGVhN2ZmODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxTZqvWFZe4MB8nLhfVA12ZDaaOH5pNdRVNF 5rpxy1RRSl+sDTN+8gqnvBJlYNteQM0SprOdvTlGidHCJTE4rlYSJO9Ym0xdvNP6 FvFeIgLZCgNBbEi1sONPIeysyh2gQSx20kp47xBhAXjVBEww8wB0Sk/wjD0JYi89 TFluw+shbZnSjfGEJZM1zZP5IBL2kVTc9ND3l6Xsaxz6AobD9bXZ1K6BmuWKzIUx oestCC99uhRt1IQUJvt5UOh/AyFm46f1+ZRW28Jgda1L0DDLm3Qgf1l1BFc2FcTW /mXB3+b5UH2dCK5xhtvxDN+/pe0A0oLLvWFxaWGI0LATM/+tVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMcjT9fCxp07nioQ6nQ3XjwWR59XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvMThiYzRlODgtMWU0MC0z NWE0LTliNjMtZjhkYWQwNDUyYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQUIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBA0PWuWvQ9WczLBsdnUdSxktpwI+asyCf5gGYrpWIAkZKcZCTPxQIE OJhgI+sCx4nBR18bZ/5aR2sg//nWzKNQZ2/cpGIhJBBWorFtxFwpL79gb+BS6ura G9lMfXfJoudQyzpOG+mzeSKJiFXm5x63aBAJr61g2XmNUtmHFOaONxsWIi+FzNhA A63RO4d9xrdd6xqoT7CcSzbFE6w7CwsUsPQ7scw3GQCxET6P1PaPSZcVO7gMqMsJ HVfKGa6DtBnMkcU9zA2RLX8Xx2dWPw4n6X/cbnChTMOXCUf6Wd0n4qpoR9Ki3vKS koyJDjQBOhsXKRJVwzJQASa2YrKEibSj -----END CERTIFICATE-----Generated at Tue Aug 25 20:24:50 2026 by rpki-client