$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/d6cd2288-6606-3374-8fd6-78988214c999.roa File: d6cd2288-6606-3374-8fd6-78988214c999.roa (raw, json) Hash identifier: oFWbLoY7/Un5NGVGElRL/GRBpKdEbZV8iuSuDAgbtVs= Subject key identifier: BA:8B:8A:C6:4D:94:0C:F1:F1:05:04:BB:F7:E6:31:98:6B:01:88:17 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584EA793AE4CB7A06940DD73C700 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/d6cd2288-6606-3374-8fd6-78988214c999.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 2602:815:b081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:ae:4c:b7:a0:69:40:dd:73:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d0eaa4f9-b65f-4378-be85-e9168460dbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:85:8b:bf:18:b9:e6:4f:1e:4e:b4:3f:00: 05:62:62:eb:77:0e:e6:1c:ac:f8:23:84:a1:08:10: 47:47:1d:41:fa:9e:39:99:53:4d:70:41:82:e4:e9: 4e:8c:d6:df:a6:cc:22:6c:db:b3:16:e9:30:b2:24: fb:96:ad:a3:93:7b:3e:6b:a4:b3:75:c9:22:1c:3a: ed:56:09:29:77:c5:b4:6c:d1:0c:76:56:54:41:3b: 36:db:43:a1:80:08:40:cf:4d:bb:0d:49:51:c0:72: b9:b6:3a:29:9a:d8:17:7a:a7:a6:db:ca:d3:40:93: da:3d:c6:6f:23:4a:0a:db:d9:2a:94:00:fc:4c:5e: 06:3e:15:b2:6f:2c:10:86:2d:87:b0:62:2f:51:3a: 8c:5f:c7:3b:f0:e0:27:3e:9e:e9:44:90:e1:8b:45: 2b:d8:6b:d0:36:39:5c:e1:f7:83:5a:39:88:ff:24: 20:43:73:f9:5b:3b:b1:62:94:80:02:a1:0e:e1:2c: fb:10:b3:02:4b:da:0e:f6:4e:34:4b:8c:71:5c:14: 6c:c2:bd:e3:d5:5c:dc:b3:1a:76:ea:f0:c3:e8:78: 25:79:47:08:10:17:91:76:f0:6c:63:d5:e1:b8:82: 9c:17:65:97:7c:f3:6f:a7:74:a1:b2:f5:13:78:b9: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8B:8A:C6:4D:94:0C:F1:F1:05:04:BB:F7:E6:31:98:6B:01:88:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/d6cd2288-6606-3374-8fd6-78988214c999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:b081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6b:dc:73:39:ff:eb:26:e9:e9:31:57:de:d0:94:af:90:06: 2d:f7:6f:2b:ef:c1:29:09:1a:e1:df:ee:dc:ba:62:e2:28:c2: c6:73:30:5e:d3:67:e6:d0:c4:16:49:01:63:cb:aa:f3:1c:60: d1:4f:80:a0:15:ea:b1:a3:ac:d6:16:f2:7f:c9:fe:f8:b0:71: 41:c7:00:d4:17:22:e1:da:51:5b:4a:6a:98:2b:3e:30:e6:27: 2f:84:e0:6a:8a:c8:6f:6d:b4:33:34:6e:2c:1b:08:1e:69:c5: cb:b5:6a:62:91:e0:43:85:16:7d:54:98:94:68:a2:8e:36:5b: e1:8c:14:83:01:e9:7a:4b:0b:3c:05:65:06:2a:9f:d1:2b:15: 92:08:c9:f0:70:4f:7b:03:16:18:f5:b0:48:33:af:89:64:55: 12:99:e3:0c:f8:9a:fe:2e:d3:e7:fe:13:10:7b:87:10:9c:7f: ac:23:ba:d9:e2:52:1a:f3:04:2f:11:62:59:62:fa:a7:d5:65: 13:4a:83:4b:eb:ab:11:b2:f3:aa:b7:1a:ed:c2:e0:28:c7:b4: ff:b0:10:58:df:af:fd:32:1f:7d:63:fb:bb:ee:ac:93:c4:4e: 02:71:d5:be:77:bf:5c:c4:f5:d7:cd:9e:41:36:8f:07:39:ce: 2a:4f:80:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nk65Mt6BpQN1zxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDBlYWE0ZjktYjY1Zi00Mzc4LWJlODUtZTkxNjg0NjBkYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf6Fi78YueZPHk60PwAFYmLrdw7mHKz4I4Sh CBBHRx1B+p45mVNNcEGC5OlOjNbfpswibNuzFukwsiT7lq2jk3s+a6SzdckiHDrt Vgkpd8W0bNEMdlZUQTs220OhgAhAz027DUlRwHK5tjopmtgXeqem28rTQJPaPcZv I0oK29kqlAD8TF4GPhWybywQhi2HsGIvUTqMX8c78OAnPp7pRJDhi0Ur2GvQNjlc 4feDWjmI/yQgQ3P5WzuxYpSAAqEO4Sz7ELMCS9oO9k40S4xxXBRswr3j1Vzcsxp2 6vDD6HgleUcIEBeRdvBsY9XhuIKcF2WXfPNvp3ShsvUTeLnJAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLqLisZNlAzx8QUEu/fmMZhrAYgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvZDZjZDIyODgtNjYwNi0z Mzc0LThmZDYtNzg5ODgyMTRjOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFbCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5r3HM5/+sm6ekxV97QlK+QBi33byvvwSkJGuHf7ty6YuIowsZz MF7TZ+bQxBZJAWPLqvMcYNFPgKAV6rGjrNYW8n/J/viwcUHHANQXIuHaUVtKapgr PjDmJy+E4GqKyG9ttDM0biwbCB5pxcu1amKR4EOFFn1UmJRooo42W+GMFIMB6XpL CzwFZQYqn9ErFZIIyfBwT3sDFhj1sEgzr4lkVRKZ4wz4mv4u0+f+ExB7hxCcf6wj utniUhrzBC8RYlli+qfVZRNKg0vrqxGy86q3Gu3C4CjHtP+wEFjfr/0yH31j+7vu rJPETgJx1b53v1zE9dfNnkE2jwc5zipPgMk= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:39 2026 by rpki-client