$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa File: 8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa (raw, json) Hash identifier: 2Ku+QsWkkD13o2JfpBJBlSvTsIyFGI0GSgBy6hPWM+k= Subject key identifier: B4:97:85:FD:44:0D:E7:26:BA:39:C4:E5:9C:89:7A:77:3C:92:1B:5A Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584EBB11B4EE9451ACB45F56AB40 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5744 IP address blocks: 2610:20:5020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:b4:ee:94:51:ac:b4:5f:56:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=35d8c55e-7ac2-40cf-9f8f-99abfd8b76ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:bb:12:86:b1:eb:99:cc:78:ce:28:82:2a: 5b:94:38:bb:46:d3:c8:18:4f:5f:8f:d3:6e:c7:34: eb:82:ef:62:6c:ee:d0:13:1f:87:5e:b0:22:09:5c: 6f:98:c3:4f:b2:48:0b:e8:e7:4b:4a:c6:5c:19:1d: 3b:db:6b:68:76:a5:48:35:7e:1a:9c:4e:e3:26:01: 52:d0:37:50:2d:63:c5:f8:cc:21:cb:7e:13:f1:c7: ab:96:ae:0d:75:aa:42:dc:ba:28:df:2e:cb:29:58: e6:17:a3:96:b6:5a:f1:dd:f8:62:41:09:0d:b6:bf: 69:ea:9c:2e:f9:40:4b:84:88:fd:f2:cd:93:c5:cf: 6e:1f:4a:c3:3e:43:50:4d:38:6a:71:45:c9:a3:8f: 1d:36:91:47:09:a5:d0:aa:23:16:83:5e:ed:1e:ea: f2:13:31:aa:16:f1:75:f5:4d:56:36:9a:cd:5f:ed: 85:00:85:12:dc:2b:b4:26:96:63:1d:8d:5c:39:df: 6a:ec:50:fd:91:9a:e5:88:12:62:16:b1:af:4f:f5: b9:e5:0b:c3:20:d6:c4:19:aa:0a:0f:f9:bc:75:48: 11:98:63:fa:96:10:44:1e:f7:41:c9:59:65:c2:a5: 4c:31:57:12:a9:94:72:9a:5c:60:70:a6:bd:e0:76: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:97:85:FD:44:0D:E7:26:BA:39:C4:E5:9C:89:7A:77:3C:92:1B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/8e16d988-e0b7-33c5-b45d-a28cfedd4f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:5020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:25:41:70:39:10:14:1a:15:82:f9:bb:1e:17:3f:5c:92:38: 35:d8:f8:17:70:e3:83:33:4a:e3:29:15:41:12:2e:0f:58:53: 8b:5a:d8:93:02:42:af:6a:d9:aa:86:1a:f3:17:2a:a7:ea:47: 51:40:6e:38:e1:7b:e2:fd:32:2e:62:88:7f:3a:b1:33:1b:ba: 64:0d:67:c3:57:ff:f6:4e:d4:2b:6c:8f:35:80:aa:b7:77:26: 49:f9:c7:57:4e:ca:66:63:68:de:61:17:f9:a9:d4:f7:fa:1b: 85:7d:9c:b0:12:c9:91:0b:e2:eb:b7:7e:98:9e:0d:74:bf:57: 9f:c0:16:33:61:f0:dc:a5:22:e3:cf:c1:51:02:07:87:b6:f9: f0:28:ba:15:61:44:b6:fb:2b:fd:ba:88:2a:ad:7b:82:44:91: 00:ee:6e:3c:8a:4c:8d:4a:d1:2e:f6:b6:d6:e9:ef:da:2d:a8: c4:37:59:93:fb:ab:4f:45:62:86:ef:13:29:80:7a:bf:4c:87: f2:97:61:a4:b1:d7:cd:20:c2:32:aa:05:84:ef:85:8a:ae:94: 38:fb:3e:9b:23:20:67:5b:a2:33:bd:5a:d9:11:10:e0:18:48: 36:9d:c1:c2:ab:67:a6:ed:76:c2:d7:a2:55:1b:56:33:e6:db: 62:27:46:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EbTulFGstF9Wq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzVkOGM1NWUtN2FjMi00MGNmLTlmOGYtOTlhYmZkOGI3NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxK7Eoax65nMeM4ogipblDi7RtPIGE9fj9Nu xzTrgu9ibO7QEx+HXrAiCVxvmMNPskgL6OdLSsZcGR0722todqVINX4anE7jJgFS 0DdQLWPF+Mwhy34T8cerlq4NdapC3Loo3y7LKVjmF6OWtlrx3fhiQQkNtr9p6pwu +UBLhIj98s2Txc9uH0rDPkNQTThqcUXJo48dNpFHCaXQqiMWg17tHuryEzGqFvF1 9U1WNprNX+2FAIUS3Cu0JpZjHY1cOd9q7FD9kZrliBJiFrGvT/W55QvDINbEGaoK D/m8dUgRmGP6lhBEHvdByVllwqVMMVcSqZRymlxgcKa94HZ+xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSXhf1EDecmujnE5ZyJenc8khtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvOGUxNmQ5ODgtZTBiNy0z M2M1LWI0NWQtYTI4Y2ZlZGQ0ZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIFAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADklQXA5EBQaFYL5ux4XP1ySODXY+Bdw44MzSuMpFUESLg9YU4ta 2JMCQq9q2aqGGvMXKqfqR1FAbjjhe+L9Mi5iiH86sTMbumQNZ8NX//ZO1CtsjzWA qrd3Jkn5x1dOymZjaN5hF/mp1Pf6G4V9nLASyZEL4uu3fpieDXS/V5/AFjNh8Nyl IuPPwVECB4e2+fAouhVhRLb7K/26iCqte4JEkQDubjyKTI1K0S72ttbp79otqMQ3 WZP7q09FYobvEymAer9Mh/KXYaSx180gwjKqBYTvhYqulDj7PpsjIGdbojO9WtkR EOAYSDadwcKrZ6btdsLXolUbVjPm22InRvU= -----END CERTIFICATE-----Generated at Sun Sep 13 16:38:41 2026 by rpki-client