$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa File: 85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa (raw, json) Hash identifier: wMKc4Okf4RlSS8VT84/M3PO5v/Cfr16c3pKA/xYkRAo= Subject key identifier: 42:3E:E0:64:A2:D1:A5:30:35:FF:7F:08:3C:76:C3:51:1E:1E:3C:35 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584EA78F670B2C46FA1E766A76A0 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 2602:277:f00::/47 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:67:0b:2c:46:fa:1e:76:6a:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=470368ff-5c06-447c-a264-1fe36ae0b7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:59:43:ce:6b:41:a4:0e:33:3a:8a:23:40: 7f:1a:7f:c5:d3:50:62:e1:9c:59:ce:64:f2:72:48: 71:04:ef:5e:c7:fa:82:96:4a:28:2e:6b:5c:a0:05: 08:40:bd:b6:d8:8d:cb:38:15:c0:76:45:71:cb:ad: 99:c0:03:bb:43:30:17:c0:b0:22:f9:c6:a3:ad:7a: fa:6f:89:50:be:99:29:31:97:9d:8f:83:6f:24:2a: ca:0e:70:95:c1:4d:01:c9:0a:17:01:5f:6c:52:c5: 0b:20:ee:4d:db:23:58:c6:a1:c1:cf:26:78:d1:85: 6e:28:68:a3:f1:83:62:9a:1a:1c:f9:99:ac:27:24: 50:f6:f3:4d:28:e0:9b:59:71:52:f4:6a:b0:48:6c: fb:10:94:39:9f:86:45:e3:2a:56:cc:6a:c1:79:47: 99:32:02:aa:92:14:d3:4a:46:c6:5b:87:ce:bd:2c: 90:ab:02:8c:89:59:a3:a7:6d:e9:a9:ff:78:19:8e: 1f:e4:5e:ab:6c:23:28:b4:f6:8c:cd:69:8b:67:05: 25:34:ed:4c:71:07:10:60:da:2e:4e:46:50:c7:5a: f2:8e:61:84:62:13:84:6f:5b:67:cd:2e:aa:5a:e7: 0f:b4:14:63:94:e5:4a:e6:fa:e8:56:d1:32:be:8b: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:E0:64:A2:D1:A5:30:35:FF:7F:08:3C:76:C3:51:1E:1E:3C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85414ec6-b857-3ccd-ab80-dbc7ad5a7560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:f00::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c0:4b:e2:03:28:3c:50:15:53:ac:56:fa:70:ce:eb:26:f5: 58:d3:74:67:fa:35:b3:30:4f:25:bc:5f:5b:3c:ae:f9:9e:44: a3:fd:46:7a:2b:f3:20:55:9f:8e:d9:a7:f2:f8:93:35:89:d9: 0c:98:7e:25:3c:40:a1:a8:7d:d5:93:d6:0a:4a:6f:11:d4:8e: e7:d8:aa:7e:31:36:b4:ef:cd:de:7c:b1:f5:ed:82:84:f1:6c: a9:96:14:2b:9d:f5:3e:aa:a8:18:00:c6:2a:2f:57:a5:30:49: 24:28:af:51:98:49:f9:54:f4:63:ac:e1:4b:85:63:8c:9a:1f: 37:21:8e:f5:98:8c:a3:cd:6c:b3:69:e9:a1:e9:05:ea:b1:ac: 44:7b:b7:a7:44:d7:ff:b1:29:ec:4e:e0:5a:1c:01:fd:76:dc: 49:13:cb:39:d1:9b:04:27:b8:4b:23:41:49:c1:8a:14:39:70: d6:07:44:72:97:a5:3d:5f:bb:05:f0:f4:32:9c:ea:1f:b9:47: cf:5e:0f:6d:cd:69:a8:fc:e1:9e:38:36:8f:06:39:11:67:cb: da:a7:9b:b0:84:88:64:6b:87:26:c5:b7:9b:67:32:27:39:c6: 42:53:0a:d3:0a:c7:3e:62:37:1b:ad:93:8c:76:12:1b:40:02: a0:e7:2b:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nj2cLLEb6HnZqdqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDcwMzY4ZmYtNWMwNi00NDdjLWEyNjQtMWZlMzZhZTBiN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I1ZQ85rQaQOMzqKI0B/Gn/F01Bi4ZxZzmTy ckhxBO9ex/qClkooLmtcoAUIQL222I3LOBXAdkVxy62ZwAO7QzAXwLAi+cajrXr6 b4lQvpkpMZedj4NvJCrKDnCVwU0ByQoXAV9sUsULIO5N2yNYxqHBzyZ40YVuKGij 8YNimhoc+ZmsJyRQ9vNNKOCbWXFS9GqwSGz7EJQ5n4ZF4ypWzGrBeUeZMgKqkhTT SkbGW4fOvSyQqwKMiVmjp23pqf94GY4f5F6rbCMotPaMzWmLZwUlNO1McQcQYNou TkZQx1ryjmGEYhOEb1tnzS6qWucPtBRjlOVK5vroVtEyvosZlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEI+4GSi0aUwNf9/CDx2w1EeHjw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvODU0MTRlYzYtYjg1Ny0z Y2NkLWFiODAtZGJjN2FkNWE3NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgICdw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXAS+IDKDxQFVOsVvpwzusm9VjTdGf6NbMwTyW8X1s8rvmeRKP9 Rnor8yBVn47Zp/L4kzWJ2QyYfiU8QKGofdWT1gpKbxHUjufYqn4xNrTvzd58sfXt goTxbKmWFCud9T6qqBgAxiovV6UwSSQor1GYSflU9GOs4UuFY4yaHzchjvWYjKPN bLNp6aHpBeqxrER7t6dE1/+xKexO4FocAf123EkTyznRmwQnuEsjQUnBihQ5cNYH RHKXpT1fuwXw9DKc6h+5R89eD23Naaj84Z44No8GORFny9qnm7CEiGRrhybFt5tn Mic5xkJTCtMKxz5iNxutk4x2EhtAAqDnK3U= -----END CERTIFICATE-----Generated at Thu Aug 20 00:07:43 2026 by rpki-client