$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa File: af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa (raw, json) Hash identifier: EnPWYRjQkOox7JZJlp6N38DcGxGN12smjeeR3fdFi/w= Subject key identifier: 3A:F2:62:8F:79:A9:C0:6A:8F:DD:AF:D5:E6:FE:27:81:5D:B3:6D:7B Certificate issuer: /CN=6b527806-37a2-4d56-8213-ee9130cd0038 Certificate serial: 010D0C9F4328584EE7BC9A966F8C932DA3131480 Authority key identifier: 07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 400760 IP address blocks: 2606:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:9a:96:6f:8c:93:2d:a3:13:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b527806-37a2-4d56-8213-ee9130cd0038 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=984e5885-1c9e-41f2-8abe-170833ceaa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:9f:38:f1:9c:94:84:3d:86:74:7e:e7:2d: 0f:e3:c1:83:f3:86:91:7a:0f:28:e9:af:0b:c7:34: 88:f3:4f:28:55:ab:4f:c7:af:1a:0c:36:06:b2:7e: dd:6f:8f:c9:77:d4:cf:47:0a:1b:49:31:1b:ce:c3: 76:a9:6f:bc:e3:2b:61:34:b0:fb:87:49:a6:53:6f: f5:27:97:72:ba:79:47:19:af:de:ce:ea:24:8b:3e: 83:d0:da:4b:4e:fb:0d:03:96:fb:61:7e:48:40:6f: 80:53:68:5b:ae:d9:f6:02:2e:d6:4f:6f:f2:b8:32: c7:ac:9e:e4:3d:6f:a3:73:a9:1b:cc:74:b7:d8:4f: 22:7f:de:3c:f0:43:f3:43:a2:6c:ed:56:d7:0a:c4: 25:73:c0:18:95:ba:7a:33:8d:3c:6e:bb:bf:2f:d9: 81:3b:40:9b:12:b5:ea:c7:ec:f4:b3:f2:92:ec:cd: 76:82:8e:e9:1d:66:1b:5d:0d:7e:77:5a:f4:2e:70: b6:e3:75:a6:40:73:69:36:da:87:8e:96:35:77:50: ec:de:23:6d:d6:20:da:2b:f2:5a:3e:1d:c7:62:67: 67:6a:36:9a:b0:ad:ef:a3:d5:0f:5a:ab:ff:6b:57: b9:c4:0e:c7:7c:64:71:bf:14:f7:2b:b8:3a:49:6f: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:62:8F:79:A9:C0:6A:8F:DD:AF:D5:E6:FE:27:81:5D:B3:6D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl X509v3 Authority Key Identifier: keyid:07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer sbgp-ipAddrBlock: critical IPv6: 2606:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e2:46:7b:be:cd:b1:1a:eb:fc:04:71:c2:c0:e9:1a:70:18: 5b:4b:0e:ff:f9:dc:b4:c6:be:86:39:d1:51:b4:f9:bc:82:d4: 79:fe:23:86:5f:79:ea:a8:d7:38:10:35:36:45:4b:2d:dd:e2: 4a:08:c0:be:bf:d2:dd:b6:95:b2:fe:3b:6b:67:ce:21:e3:b7: 60:cf:62:3f:7a:f5:b3:16:ad:5d:ac:e9:a8:01:b4:d1:34:28: 2f:76:ae:23:41:23:35:5b:31:ed:44:cc:dc:21:58:f5:7c:61: b1:5b:42:bc:31:d9:76:e6:2c:55:8a:c2:f5:c7:cb:4b:3e:a8: fc:e4:32:b0:1a:7c:ab:8f:0d:3f:e7:f5:f6:38:cc:e4:97:10: 1e:6b:57:6a:9b:90:79:88:66:19:49:1b:a5:08:25:bf:bb:04: 9a:20:65:6d:e0:7e:74:11:dd:32:c7:6d:6a:7c:b1:7c:3e:73: e8:a8:a7:39:35:39:ba:54:8b:7b:25:fa:e9:26:6e:89:91:4e: d6:e0:d1:a9:a7:0b:d2:c9:24:29:9c:85:03:f2:bb:9f:52:12: 6f:e5:f7:3e:6e:42:df:c0:ea:77:03:23:d8:11:e4:f8:3c:93: 30:05:b2:1d:f8:45:df:36:75:50:d2:e3:9a:cc:e7:70:42:cb: 69:b7:c4:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7nvJqWb4yTLaMTFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI1Mjc4MDYtMzdhMi00ZDU2LTgyMTMtZWU5MTMwY2Qw MDM4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk OTg0ZTU4ODUtMWM5ZS00MWYyLThhYmUtMTcwODMzY2VhYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ifOPGclIQ9hnR+5y0P48GD84aReg8o6a8L xzSI808oVatPx68aDDYGsn7db4/Jd9TPRwobSTEbzsN2qW+84ythNLD7h0mmU2/1 J5dyunlHGa/ezuokiz6D0NpLTvsNA5b7YX5IQG+AU2hbrtn2Ai7WT2/yuDLHrJ7k PW+jc6kbzHS32E8if9488EPzQ6Js7VbXCsQlc8AYlbp6M408bru/L9mBO0CbErXq x+z0s/KS7M12go7pHWYbXQ1+d1r0LnC243WmQHNpNtqHjpY1d1Ds3iNt1iDaK/Ja Ph3HYmdnajaasK3vo9UPWqv/a1e5xA7HfGRxvxT3K7g6SW9YBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDryYo95qcBqj92v1eb+J4Fds217MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUy NzgwNi0zN2EyLTRkNTYtODIxMy1lZTkxMzBjZDAwMzgvYWYwYTY4ZTgtMTIzMy0z ZjVjLWFjMzYtNzY2MWZlN2VmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmI1Mjc4MDYtMzdhMi00ZDU2LTgy MTMtZWU5MTMwY2QwMDM4LzZiNTI3ODA2LTM3YTItNGQ1Ni04MjEzLWVlOTEzMGNk MDAzOC5jcmwwHwYDVR0jBBgwFoAUB8JkSF2n78lzUie/IosG73FBFrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUyNzgwNi0zN2EyLTRkNTYtODIxMy1lZTkx MzBjZDAwMzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBx4kZ7vs2xGuv8BHHCwOkacBhbSw7/+dy0xr6GOdFRtPm8gtR5/iOG X3nqqNc4EDU2RUst3eJKCMC+v9LdtpWy/jtrZ84h47dgz2I/evWzFq1drOmoAbTR NCgvdq4jQSM1WzHtRMzcIVj1fGGxW0K8Mdl25ixVisL1x8tLPqj85DKwGnyrjw0/ 5/X2OMzklxAea1dqm5B5iGYZSRulCCW/uwSaIGVt4H50Ed0yx21qfLF8PnPoqKc5 NTm6VIt7JfrpJm6JkU7W4NGppwvSySQpnIUD8rufUhJv5fc+bkLfwOp3AyPYEeT4 PJMwBbId+EXfNnVQ0uOazOdwQstpt8TX -----END CERTIFICATE-----Generated at Thu Aug 27 15:16:33 2026 by rpki-client