$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: n4d9+uFoSsifx5TcP/BPEOiz1yfEHlpgekS60FnG9PM= Subject key identifier: 2A:CD:C4:B9:98:87:0E:D0:32:31:93:D8:F3:16:89:7C:E4:9B:55:42 Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584ED001F17A2FDECC825CADC900 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f1:7a:2f:de:cc:82:5c:ad:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=e3c0e377-d767-4dfb-934d-4f2c61559304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:2f:2d:01:26:fc:a2:89:81:12:f6:51:77: 2d:74:55:53:a9:34:c7:bc:f7:82:1a:67:64:fa:f4: d0:3a:3c:d4:ec:39:dd:6f:a7:68:aa:a7:42:a4:85: 3f:2e:0d:97:c6:93:2f:ba:0f:2d:00:e4:4e:e1:0e: ad:56:be:60:85:fe:d3:f3:b2:06:a4:fe:77:6d:4e: ee:37:28:7a:0d:11:a3:6a:68:ad:8f:f9:45:c9:b1: 2c:71:99:20:2e:36:ca:16:ba:73:ec:84:fd:e7:08: b6:f6:21:f1:3b:5f:76:e1:70:ee:48:6c:88:5b:b7: 0c:63:ab:3f:47:78:33:31:15:b5:62:08:03:ea:1c: 1d:e9:c1:3c:e9:fc:81:7e:e2:4f:98:1b:44:58:8e: ae:2e:eb:45:a9:a7:e7:97:8e:8d:31:cb:d7:7b:f1: 1b:10:b2:34:e3:19:cc:c3:69:08:f7:ef:26:7a:90: 35:d0:7b:59:ff:c3:1f:05:53:40:af:6c:9b:2b:72: c3:67:e1:dc:88:62:eb:85:76:83:80:4f:cf:d4:85: d4:64:fe:17:17:ee:b4:2d:e1:c7:cb:e8:ea:fa:bf: b1:87:10:8d:6f:14:90:2c:af:7b:5d:2b:ff:96:51: fc:ef:e5:38:64:d2:71:70:88:16:9b:6a:c9:1a:db: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:C4:B9:98:87:0E:D0:32:31:93:D8:F3:16:89:7C:E4:9B:55:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ef:f2:74:27:44:ed:7e:ed:85:df:5b:84:a9:3f:87:4f:c4: 26:79:1d:97:e8:a9:94:00:4c:28:aa:00:1f:2c:7e:13:53:23: 83:19:16:fa:e7:6a:d0:ad:d3:89:5d:cb:b6:b9:c9:89:ea:e9: 71:6a:21:ab:4d:c5:d0:d0:0d:a1:1c:59:95:1f:9d:74:57:ca: ce:67:2e:63:ee:a3:37:93:8c:29:78:f8:36:ad:ae:6d:fd:cd: 36:ed:26:8a:0d:3b:94:d4:f8:24:d4:37:db:4f:67:3b:97:fa: dc:27:cd:10:28:90:26:12:f9:2d:2a:ee:66:07:f5:0a:1a:18: 4b:12:ef:2a:9f:39:97:73:fa:c2:79:dc:21:47:9a:53:2e:65: b5:71:f8:f1:ac:d6:42:fd:b4:9d:ec:84:6a:6c:3a:84:25:d3: a5:b7:63:b0:29:e8:b4:16:d5:4b:ff:10:f1:c8:e5:6e:35:e3: ea:af:5e:03:36:56:ca:5d:f4:4f:d0:86:8e:3b:90:52:6a:fa: d8:0c:76:00:23:b8:b2:43:5a:9c:a1:bf:00:bf:56:5a:f4:24: 7e:4d:18:b7:af:c9:d0:0f:d2:9f:8c:7a:3d:b2:a7:11:dd:2f: c5:47:5d:c3:18:39:59:53:d0:31:73:95:f7:8b:fb:ed:16:03: d6:d8:b7:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7QAfF6L97MglytyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTNjMGUzNzctZDc2Ny00ZGZiLTkzNGQtNGYyYzYxNTU5MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolAvLQEm/KKJgRL2UXctdFVTqTTHvPeCGmdk +vTQOjzU7Dndb6doqqdCpIU/Lg2XxpMvug8tAORO4Q6tVr5ghf7T87IGpP53bU7u Nyh6DRGjamitj/lFybEscZkgLjbKFrpz7IT95wi29iHxO1924XDuSGyIW7cMY6s/ R3gzMRW1YggD6hwd6cE86fyBfuJPmBtEWI6uLutFqafnl46NMcvXe/EbELI04xnM w2kI9+8mepA10HtZ/8MfBVNAr2ybK3LDZ+HciGLrhXaDgE/P1IXUZP4XF+60LeHH y+jq+r+xhxCNbxSQLK97XSv/llH87+U4ZNJxcIgWm2rJGtvV+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCrNxLmYhw7QMjGT2PMWiXzkm1VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFu/ydCdE7X7thd9bhKk/h0/EJnkdl+iplABMKKoAHyx+E1MjgxkW +udq0K3TiV3LtrnJierpcWohq03F0NANoRxZlR+ddFfKzmcuY+6jN5OMKXj4Nq2u bf3NNu0mig07lNT4JNQ3209nO5f63CfNECiQJhL5LSruZgf1ChoYSxLvKp85l3P6 wnncIUeaUy5ltXH48azWQv20neyEamw6hCXTpbdjsCnotBbVS/8Q8cjlbjXj6q9e AzZWyl30T9CGjjuQUmr62Ax2ACO4skNanKG/AL9WWvQkfk0Yt6/J0A/Sn4x6PbKn Ed0vxUddwxg5WVPQMXOV94v77RYD1ti3YQ== -----END CERTIFICATE-----Generated at Sat Sep 19 06:05:13 2026 by rpki-client