$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa File: 52ea9329-199b-3173-bb35-8fdad2b9a372.roa (raw, json) Hash identifier: nqsbhwJ7VnMHmOC9AMxnn2F5CSTtv+o5d/9SBLZpKIw= Subject key identifier: 66:01:1F:20:1F:46:0F:20:D8:D8:A9:97:D2:D8:65:28:62:CC:35:4D Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584EBB11AE1D0A1571EC21D23900 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5744 IP address blocks: 2610:20:5160::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:ae:1d:0a:15:71:ec:21:d2:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=9af755e0-93a6-4504-9ddd-f368022c54fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:8f:73:df:63:ac:92:83:78:03:07:ec:ce: 42:c1:33:fa:64:cf:c9:0a:ae:d5:78:93:26:12:61: 50:fc:c2:35:6a:9d:35:41:12:53:87:6e:3f:2d:22: 55:a4:b1:03:d1:54:c1:ed:94:12:c7:12:7c:5b:dc: 95:ff:6a:ee:9b:00:c0:aa:c0:77:0c:8c:e4:23:50: 90:8a:85:c2:5e:aa:9d:89:6c:cc:be:b7:dc:e1:bc: ac:df:77:d7:b9:ce:eb:93:26:cc:9f:25:df:2a:92: 8c:aa:f4:a3:8c:d3:9f:a9:15:71:d6:ef:dc:01:33: a7:9d:8d:d5:ab:f0:ed:2a:42:35:38:8c:07:6f:3b: bd:0d:73:01:65:22:49:96:3b:dc:69:ad:52:a7:12: 14:0b:94:40:5f:b4:44:33:b1:f0:14:b3:9b:b9:03: ed:25:91:37:b0:ea:70:b0:73:af:c2:24:4a:3e:f9: 88:7d:e7:9d:33:7a:06:73:27:29:ab:cc:05:9e:a2: 37:43:0a:a0:b8:8d:1a:53:29:82:97:2d:56:f2:44: 85:17:ca:89:51:8d:9f:1c:9a:72:80:d7:47:77:a5: dd:62:72:44:01:80:c4:48:8e:7f:d4:70:20:3b:9f: 2e:2c:63:b3:aa:98:58:76:a6:cf:68:d4:fd:aa:05: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:01:1F:20:1F:46:0F:20:D8:D8:A9:97:D2:D8:65:28:62:CC:35:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:5160::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c8:88:20:99:d5:40:3f:53:8c:97:47:e9:ee:3d:dd:6e:f9: 84:d3:ea:89:8c:f4:be:43:3c:80:fa:44:7f:72:b3:fa:a7:e9: 9f:f4:84:43:7f:ec:3c:a1:5c:3e:d1:18:cb:b4:f6:1d:ff:fb: bf:6d:98:0a:ae:56:66:67:21:b1:4e:73:04:27:f7:7b:12:a0: f6:16:da:c8:eb:d2:40:bd:32:ec:0f:01:1d:1a:c0:09:ff:5f: 8b:96:1d:0e:cb:07:4c:58:28:19:61:49:c8:e9:cb:cc:15:b4: a2:a5:02:6e:7b:05:bd:12:28:7a:21:15:75:20:2f:4e:98:e6: 62:c1:0b:c8:a5:99:0d:6c:c2:29:f6:1d:77:4b:1a:90:68:dd: 1b:79:78:ae:41:c4:d9:e4:9b:07:88:61:7c:dc:f0:43:1b:bf: bb:6e:74:f4:ef:45:be:d5:1f:a1:50:77:70:fc:f6:4a:67:91: 14:f6:00:df:2d:f7:d4:27:f7:16:4e:29:17:d3:0b:34:fe:e9: 12:d5:bb:32:e4:2d:c4:66:f7:46:f8:82:5a:ef:07:45:94:8c: ba:37:ce:e4:80:83:b5:48:c0:ff:4d:b1:d5:b5:6b:6b:25:69: 4c:bd:4c:bf:8e:07:95:b6:1d:a4:c2:4d:54:2b:e2:44:af:df: f9:79:45:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67Ea4dChVx7CHSOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk OWFmNzU1ZTAtOTNhNi00NTA0LTlkZGQtZjM2ODAyMmM1NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhePc99jrJKDeAMH7M5CwTP6ZM/JCq7VeJMm EmFQ/MI1ap01QRJTh24/LSJVpLED0VTB7ZQSxxJ8W9yV/2rumwDAqsB3DIzkI1CQ ioXCXqqdiWzMvrfc4bys33fXuc7rkybMnyXfKpKMqvSjjNOfqRVx1u/cATOnnY3V q/DtKkI1OIwHbzu9DXMBZSJJljvcaa1SpxIUC5RAX7REM7HwFLObuQPtJZE3sOpw sHOvwiRKPvmIfeedM3oGcycpq8wFnqI3QwqguI0aUymCly1W8kSFF8qJUY2fHJpy gNdHd6XdYnJEAYDESI5/1HAgO58uLGOzqphYdqbPaNT9qgWAAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYBHyAfRg8g2Nipl9LYZShizDVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNTJlYTkzMjktMTk5Yi0z MTczLWJiMzUtOGZkYWQyYjlhMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIFFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7IiCCZ1UA/U4yXR+nuPd1u+YTT6omM9L5DPID6RH9ys/qn6Z/0 hEN/7DyhXD7RGMu09h3/+79tmAquVmZnIbFOcwQn93sSoPYW2sjr0kC9MuwPAR0a wAn/X4uWHQ7LB0xYKBlhScjpy8wVtKKlAm57Bb0SKHohFXUgL06Y5mLBC8ilmQ1s win2HXdLGpBo3Rt5eK5BxNnkmweIYXzc8EMbv7tudPTvRb7VH6FQd3D89kpnkRT2 AN8t99Qn9xZOKRfTCzT+6RLVuzLkLcRm90b4glrvB0WUjLo3zuSAg7VIwP9NsdW1 a2slaUy9TL+OB5W2HaTCTVQr4kSv3/l5RSU= -----END CERTIFICATE-----Generated at Sun Sep 13 15:03:47 2026 by rpki-client