$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa File: 5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa (raw, json) Hash identifier: hCBqr/+oIaeI8eaE7Nv0T81w4ywf5kkHKg9xv+z+YpI= Subject key identifier: 59:E6:61:33:3B:CE:66:B4:09:00:68:58:BA:82:25:79:59:62:47:C3 Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584ECD3714A341BABFD452C2A880 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 26383 IP address blocks: 2605:e440:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:14:a3:41:ba:bf:d4:52:c2:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=c5b8a5a8-7223-4211-a07f-7295124f1a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:19:3b:e8:40:49:e2:c8:80:9a:9c:87:1f: 1c:d7:59:5f:cf:1d:92:97:3e:ff:32:a2:17:3f:5e: b9:9c:b8:c1:e6:6b:ec:84:18:6b:b3:02:c0:0c:24: 3c:2a:78:ce:33:88:5a:54:e8:52:8f:fa:28:f0:29: 71:08:5f:12:d3:bc:f5:83:5f:c3:5a:d4:bb:7a:f0: 92:75:22:eb:4d:05:73:69:ae:22:33:d9:af:fa:9a: ee:9b:96:e7:37:2a:d6:ae:5d:c9:60:a2:a0:46:db: ee:1e:49:9c:cd:4e:62:fb:82:27:5e:b9:8b:f3:a5: a3:e3:af:13:1e:92:1f:55:d4:d1:9b:2e:72:fb:84: 98:01:ef:86:76:05:21:d6:02:11:f0:97:ce:59:84: 66:d6:f6:79:48:18:95:2b:df:08:d4:2a:57:ec:1e: c6:35:85:2d:a9:f8:a7:ea:db:3b:83:26:ac:3a:cb: ae:a7:18:23:b9:17:ae:34:cb:f9:22:a1:59:ea:89: 45:6f:61:d5:01:4e:8e:37:11:47:91:04:5b:d2:51: fb:b2:a3:3f:3a:f5:da:6a:4c:eb:10:45:4f:d1:3f: 7f:06:d1:17:0f:a4:13:c7:c4:be:e0:ee:70:ac:7f: 59:68:95:3b:05:20:61:bf:3e:ba:37:ac:f5:f3:19: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:61:33:3B:CE:66:B4:09:00:68:58:BA:82:25:79:59:62:47:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv6: 2605:e440:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e4:e7:8b:d0:05:0a:93:30:51:73:7f:b0:19:6c:76:e7:4e: e1:95:78:3f:a0:e3:44:f1:1c:5c:86:e7:0a:3c:ce:06:aa:27: e0:55:9e:00:45:bd:8d:19:b4:eb:7e:50:b6:6d:77:4d:94:dc: e7:db:69:cb:fd:a9:32:a4:34:33:d7:26:0f:b9:ca:ca:a3:b6: 4c:d8:4c:e9:9a:07:16:4f:b5:bc:ca:84:05:aa:f0:b9:93:29: da:58:d6:d8:ab:49:4f:2c:02:c2:42:36:cc:11:79:43:3b:55: b9:54:a2:dd:ed:32:52:41:d6:0c:dc:32:ba:cd:bf:24:07:45: 8b:fd:d7:7e:63:61:49:5a:0a:84:fc:3f:3f:db:ef:79:74:b5: 25:54:29:bf:3b:d8:1c:5f:5c:58:01:1f:7f:75:5d:5f:9d:36: c9:d2:20:bf:2a:ba:8e:2d:5d:cc:49:99:3b:f5:c6:83:c3:70: 4c:da:e3:72:32:b2:76:97:65:40:f6:32:94:cb:17:98:fe:03: 15:c9:13:55:c3:80:c8:a4:a4:d0:66:a2:2a:8d:25:b5:90:89: 04:4f:dc:4a:a4:43:6e:20:9f:30:c6:89:4a:04:a5:78:3c:64: 94:24:dc:8f:e1:9e:4f:76:11:0f:9e:36:53:e3:57:28:53:5d: b7:16:9c:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7NNxSjQbq/1FLCqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YzViOGE1YTgtNzIyMy00MjExLWEwN2YtNzI5NTEyNGYxYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3YZO+hASeLIgJqchx8c11lfzx2Slz7/MqIX P165nLjB5mvshBhrswLADCQ8KnjOM4haVOhSj/oo8ClxCF8S07z1g1/DWtS7evCS dSLrTQVzaa4iM9mv+prum5bnNyrWrl3JYKKgRtvuHkmczU5i+4InXrmL86Wj468T HpIfVdTRmy5y+4SYAe+GdgUh1gIR8JfOWYRm1vZ5SBiVK98I1CpX7B7GNYUtqfin 6ts7gyasOsuupxgjuReuNMv5IqFZ6olFb2HVAU6ONxFHkQRb0lH7sqM/OvXaakzr EEVP0T9/BtEXD6QTx8S+4O5wrH9ZaJU7BSBhvz66N6z18xnppQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFnmYTM7zma0CQBoWLqCJXlZYkfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvNWJmMjc3MDktNWUwZS0z YjljLWIzYWEtMDdkZDRlMWRkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfk54vQBQqTMFFzf7AZbHbnTuGVeD+g40TxHFyG5wo8zgaqJ+BV ngBFvY0ZtOt+ULZtd02U3Ofbacv9qTKkNDPXJg+5ysqjtkzYTOmaBxZPtbzKhAWq 8LmTKdpY1tirSU8sAsJCNswReUM7VblUot3tMlJB1gzcMrrNvyQHRYv9135jYUla CoT8Pz/b73l0tSVUKb872BxfXFgBH391XV+dNsnSIL8quo4tXcxJmTv1xoPDcEza 43IysnaXZUD2MpTLF5j+AxXJE1XDgMikpNBmoiqNJbWQiQRP3EqkQ24gnzDGiUoE pXg8ZJQk3I/hnk92EQ+eNlPjVyhTXbcWnGU= -----END CERTIFICATE-----Generated at Thu Aug 20 00:04:46 2026 by rpki-client