$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa File: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (raw, json) Hash identifier: y+frxOfvf4WueahxGwChixx6t71/h5tR2StH6U7Yi/E= Subject key identifier: 23:BE:87:75:9C:A7:07:00:AD:8C:55:A4:23:CD:8F:B9:E7:32:9A:FD Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584F20F7B8DC241F081D04732F00 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 22251 IP address blocks: 2604:5ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b8:dc:24:1f:08:1d:04:73:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=eb18e800-be5c-44a6-8106-f7122794f438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:33:f9:01:8d:0f:3e:6f:12:a2:8e:ca:b3: 03:0c:db:1e:b8:df:76:8f:23:2d:0c:b7:5c:28:af: 14:12:8f:d9:73:64:e4:87:aa:92:e9:13:0e:b4:a4: 17:73:42:dc:cf:ea:3d:53:8c:13:8a:cf:98:d7:0f: b2:ae:ef:ec:4b:20:80:5e:e6:c6:a8:6a:8d:98:3f: 02:f3:3a:cc:d0:d7:f2:aa:0b:6f:bc:e3:45:a5:5d: 9d:19:c6:c4:27:68:01:8b:ce:59:a1:78:8b:3f:4d: 1c:b0:ff:46:29:5c:34:70:f5:be:11:37:73:7d:ed: 78:1b:5d:66:cc:36:68:40:49:b3:66:7d:cb:b4:3c: 8a:78:11:f0:1a:d7:79:23:46:40:2e:1e:8c:04:aa: 37:df:06:0d:0b:2b:9a:66:26:09:e0:1b:0a:d8:b8: ee:72:6c:30:8c:cd:ea:d7:08:59:71:7c:e1:2d:86: ec:4f:fe:20:e3:19:e0:88:f4:66:87:5e:e7:42:f6: 0f:44:a7:85:a4:d9:34:ed:f9:29:e6:38:74:a4:96: a8:fc:b6:42:c9:d0:a8:1f:74:ad:9e:eb:7e:54:07: 24:e0:d3:a5:78:30:fd:20:c6:cc:1a:9c:27:3c:e5: 75:17:0e:62:f8:df:9c:38:65:76:8f:1b:30:37:68: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:87:75:9C:A7:07:00:AD:8C:55:A4:23:CD:8F:B9:E7:32:9A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5f:df:fb:89:0b:29:c9:4e:71:da:d8:a0:6a:94:f2:9b:06: b2:42:c9:43:06:71:4c:c1:96:f7:18:47:4d:e8:19:db:2f:45: fa:5b:28:a9:a8:4c:ff:9c:d6:3a:79:97:73:58:9a:6a:10:5b: 5a:ce:c1:39:c5:10:d5:ef:82:ea:25:ba:46:ee:5d:7d:e5:aa: 2d:be:28:44:62:ff:8e:35:00:d4:e5:b5:ba:46:c7:69:66:12: 19:22:e0:b5:0b:58:6c:d1:b8:0e:26:31:c6:26:35:c8:42:c6: c0:4e:8b:ba:85:36:4d:db:4a:17:81:2d:66:39:94:dd:39:0e: 95:9d:c4:43:a3:c4:dc:1d:18:18:36:c8:f9:af:e3:a1:71:8a: 51:1e:e6:04:6a:b5:a9:0d:97:04:33:c4:d4:dc:fc:b6:ac:b8: 17:97:30:e7:fe:f1:e9:d1:fa:55:4d:16:68:88:15:c5:c2:43: 06:60:96:1f:08:0e:cc:5e:ad:74:e9:b7:d9:96:d3:5b:d7:8f: 30:a7:f7:3f:79:70:2d:3e:ce:80:fb:ef:91:be:ed:5e:6c:88: e7:8b:f4:b8:a6:f6:f8:6b:d8:8d:82:c1:83:c2:50:15:9a:a5: d4:ab:d9:de:f0:b1:c1:b8:f9:75:d4:07:c9:d0:40:a1:c9:5f: b9:df:9e:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8g97jcJB8IHQRzLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWIxOGU4MDAtYmU1Yy00NGE2LTgxMDYtZjcxMjI3OTRmNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWoz+QGNDz5vEqKOyrMDDNseuN92jyMtDLdc KK8UEo/Zc2Tkh6qS6RMOtKQXc0Lcz+o9U4wTis+Y1w+yru/sSyCAXubGqGqNmD8C 8zrM0NfyqgtvvONFpV2dGcbEJ2gBi85ZoXiLP00csP9GKVw0cPW+ETdzfe14G11m zDZoQEmzZn3LtDyKeBHwGtd5I0ZALh6MBKo33wYNCyuaZiYJ4BsK2LjucmwwjM3q 1whZcXzhLYbsT/4g4xngiPRmh17nQvYPRKeFpNk07fkp5jh0pJao/LZCydCoH3St nut+VAck4NOleDD9IMbMGpwnPOV1Fw5i+N+cOGV2jxswN2h3qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCO+h3WcpwcArYxVpCPNj7nnMpr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvYjdhMDIwZGEtMGQ3ZS0z YjI0LTk2NzAtYWNkNmZlMTM0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEX9/7iQspyU5x2tigapTymwayQslDBnFMwZb3GEdN6BnbL0X6Wyip qEz/nNY6eZdzWJpqEFtazsE5xRDV74LqJbpG7l195aotvihEYv+ONQDU5bW6Rsdp ZhIZIuC1C1hs0bgOJjHGJjXIQsbATou6hTZN20oXgS1mOZTdOQ6VncRDo8TcHRgY Nsj5r+OhcYpRHuYEarWpDZcEM8TU3Py2rLgXlzDn/vHp0fpVTRZoiBXFwkMGYJYf CA7MXq106bfZltNb148wp/c/eXAtPs6A+++Rvu1ebIjni/S4pvb4a9iNgsGDwlAV mqXUq9ne8LHBuPl11AfJ0EChyV+5356Y -----END CERTIFICATE-----Generated at Tue Sep 29 15:38:24 2026 by rpki-client