$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: ATjlA3hWGGhnYiIa4UXTn2iL58TvxuVmfnNpPiXq5zc= Subject key identifier: B5:92:9B:AA:B5:14:FC:D6:51:16:56:8A:2B:31:80:2C:B6:98:41:56 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F4328584ED001F11552E8FA59C41F41C0 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f1:15:52:e8:fa:59:c4:1f:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=08e1f1ee-07f1-486a-81bf-9faa22ca6b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:e6:23:e0:a8:fe:80:45:97:23:a0:fe:07: 44:52:46:53:08:59:48:fb:bf:2e:2c:a2:83:a4:d6: 89:81:9a:50:2b:29:ff:82:8c:fa:1a:e7:e3:2f:ed: bf:9b:93:55:e9:7a:92:8b:b1:98:91:91:cd:fc:6c: b4:c6:0a:62:27:6c:33:88:d1:6e:74:c1:be:84:33: 12:c0:4e:5c:24:0e:28:f9:71:ad:9f:7e:10:9a:25: 0f:6c:6f:20:43:39:f9:7b:aa:f7:b6:14:e2:5d:27: 8d:ab:30:6a:ff:e5:5a:5a:31:75:59:98:1c:b6:c4: 3b:89:ea:a4:05:a2:ca:a6:a9:ce:cb:99:a3:c1:fd: 6c:f8:3c:05:19:eb:e5:59:31:8d:8e:ae:09:be:ec: 64:7b:5b:1b:ae:72:d1:49:82:c1:ed:d2:50:b3:42: c9:36:62:e9:3f:d2:c3:fe:99:b9:e1:b9:27:f9:96: 94:c8:64:1f:b3:19:2d:ba:3e:9a:4b:68:14:9d:af: 63:65:cb:68:77:c2:8a:c1:61:c3:89:8a:76:1f:d9: cc:10:28:ab:c1:8f:08:65:0c:06:43:88:55:71:57: 1e:85:49:31:d0:3b:1d:54:1b:cf:86:36:04:6d:04: 64:c5:da:7f:36:4f:65:cc:95:af:ce:39:e8:31:62: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:92:9B:AA:B5:14:FC:D6:51:16:56:8A:2B:31:80:2C:B6:98:41:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f3:d2:91:f2:e8:77:fa:ae:2e:ee:86:ab:7b:da:ba:93:5b: 49:33:08:15:75:f0:dc:3d:a7:c3:d7:80:66:d7:93:5b:44:ef: b3:7e:be:34:70:7a:21:82:a4:48:23:d5:c2:84:95:ec:04:e1: 26:70:ba:d1:0a:f1:48:b0:60:c6:b3:36:0e:05:75:1c:ae:d0: d9:bb:c6:c5:71:a0:cc:2a:cf:ba:83:bf:7e:fb:96:14:4b:ec: 6b:88:1b:ad:2f:76:c1:4e:0d:f2:9a:c2:62:1e:a4:0f:9b:c1: 9b:80:e8:13:30:c9:20:7c:2c:1d:0f:f9:11:07:48:5f:e8:e0: b0:d0:3a:85:36:02:42:bd:c6:90:c9:2b:99:b2:95:06:9f:fb: d6:bc:60:75:0e:ab:ee:25:3f:5a:7c:a9:7b:2d:28:18:34:73: 67:f6:ef:3f:b8:2c:8c:c3:37:14:21:d1:61:ab:e2:66:ae:74: 91:db:36:b7:55:9e:cc:58:bc:b1:96:98:fc:c2:85:2d:47:fb: b9:d6:f4:4d:cf:4e:7b:29:b6:ef:80:ec:68:53:77:e9:32:13: c3:7e:f2:62:fd:47:cd:7e:96:87:cc:b5:30:d4:f6:b2:ea:ac: c0:55:d3:c6:9e:ac:7c:92:f0:cd:4f:6f:6d:e5:a0:17:9f:2c: 4e:b1:60:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7QAfEVUuj6WcQfQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDhlMWYxZWUtMDdmMS00ODZhLTgxYmYtOWZhYTIyY2E2YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqbmI+Co/oBFlyOg/gdEUkZTCFlI+78uLKKD pNaJgZpQKyn/goz6GufjL+2/m5NV6XqSi7GYkZHN/Gy0xgpiJ2wziNFudMG+hDMS wE5cJA4o+XGtn34QmiUPbG8gQzn5e6r3thTiXSeNqzBq/+VaWjF1WZgctsQ7ieqk BaLKpqnOy5mjwf1s+DwFGevlWTGNjq4Jvuxke1sbrnLRSYLB7dJQs0LJNmLpP9LD /pm54bkn+ZaUyGQfsxktuj6aS2gUna9jZctod8KKwWHDiYp2H9nMECirwY8IZQwG Q4hVcVcehUkx0DsdVBvPhjYEbQRkxdp/Nk9lzJWvzjnoMWLTiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLWSm6q1FPzWURZWiisxgCy2mEFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB889KR8uh3+q4u7oare9q6k1tJMwgVdfDcPafD14Bm15NbRO+zfr40 cHohgqRII9XChJXsBOEmcLrRCvFIsGDGszYOBXUcrtDZu8bFcaDMKs+6g79++5YU S+xriButL3bBTg3ymsJiHqQPm8GbgOgTMMkgfCwdD/kRB0hf6OCw0DqFNgJCvcaQ ySuZspUGn/vWvGB1DqvuJT9afKl7LSgYNHNn9u8/uCyMwzcUIdFhq+JmrnSR2za3 VZ7MWLyxlpj8woUtR/u51vRNz057KbbvgOxoU3fpMhPDfvJi/UfNfpaHzLUw1Pay 6qzAVdPGnqx8kvDNT29t5aAXnyxOsWDo -----END CERTIFICATE-----Generated at Thu Aug 20 00:07:20 2026 by rpki-client