$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa File: 23857d2a-ee7a-3906-8ed4-1674292d68d8.roa (raw, json) Hash identifier: WomqZU40anpFQICVVuGb1QPN04BkKSu/pvv5Eq5G/58= Subject key identifier: 64:AE:27:C2:84:58:95:A2:6A:2D:92:0B:DC:AA:76:AB:29:87:C6:E7 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584EF7175921BAB6DC7E002DC980 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 140666 IP address blocks: 2602:fa80:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:59:21:ba:b6:dc:7e:00:2d:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=1208735a-240b-45f6-8e38-093e208cb0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:24:ff:89:73:71:26:a0:56:d3:2f:d8:c2: b8:88:0c:cf:40:65:74:67:2a:f7:16:df:9a:d9:3c: 77:1a:0d:0c:f6:22:08:85:fc:4c:58:6a:96:1a:56: 5d:17:ea:a4:5d:53:25:29:46:b6:a7:72:a7:86:3b: 1c:31:15:c8:bb:6a:19:10:0d:ee:f7:c0:b7:78:af: c5:00:e7:b3:54:f1:9f:8f:24:9b:b6:74:a3:91:8d: 04:0d:86:bc:f4:35:4d:e7:8e:72:24:88:f2:9f:fa: f1:f1:f1:15:11:ba:a7:16:09:47:0b:77:46:2a:60: 53:09:7b:34:cb:ec:1e:a6:86:bb:b9:f5:81:1f:92: e2:a0:f9:cc:5c:22:20:fb:93:a8:c4:f3:73:e2:8e: 0b:e9:0c:a5:67:bb:53:25:83:eb:5a:ad:41:72:47: 45:50:79:85:75:cb:61:80:10:f9:9c:27:9b:56:1a: 2c:9b:80:e3:a4:b7:26:b5:fe:1d:a3:24:93:32:d9: cc:00:03:2b:0d:b2:73:68:ab:e9:3d:8f:b7:f9:87: 17:07:9a:55:1c:66:ec:fd:10:f3:9c:a1:cb:1c:fc: a5:e3:51:a5:28:e1:71:2d:49:44:54:89:a4:6f:26: 84:1b:2f:8e:7b:15:fa:0b:15:63:ad:b2:89:75:e5: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:27:C2:84:58:95:A2:6A:2D:92:0B:DC:AA:76:AB:29:87:C6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:94:c6:7b:8a:64:3a:69:1b:9d:02:11:6a:c8:3d:c8:28:a8: 76:35:53:a4:79:e2:60:db:6b:db:f6:2c:4d:57:8b:b5:2c:af: d2:6d:d9:5e:b1:20:b7:ef:1a:33:ff:d4:c3:6e:f2:c7:5c:54: 45:9d:6c:7c:27:03:43:75:bf:f7:ac:eb:53:88:ef:10:3d:8e: c7:9b:bd:96:f7:7e:73:4c:dd:fb:f6:f7:74:00:c2:27:e5:be: e9:8c:9a:80:7a:a1:63:1c:0e:b7:df:65:a5:60:c6:5a:3e:16: c4:d9:39:8a:41:56:76:6f:bb:cf:67:47:6c:9c:ba:63:a2:54: ce:4c:9a:19:14:06:ef:7a:5c:30:b2:ea:96:8a:5d:83:63:00: a0:7b:b0:45:24:b8:f7:d3:37:09:42:5c:c7:9a:02:d7:aa:b9: 3f:f6:e0:ca:ab:9a:f9:0b:7d:5b:db:c7:db:59:e5:10:83:8d: 70:21:57:06:ec:cd:ce:29:49:43:48:a6:6b:2e:ad:eb:4e:8e: 43:66:a0:95:c9:27:87:bb:8d:30:75:41:18:7d:97:09:dc:33: 50:13:cb:0e:3e:ed:7d:a9:f7:98:62:d7:38:38:9f:12:99:1c: b2:24:ed:13:0a:8f:4f:7d:ff:49:f6:6b:0d:68:29:04:2f:59: 31:72:33:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F1khurbcfgAtyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTIwODczNWEtMjQwYi00NWY2LThlMzgtMDkzZTIwOGNiMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodAk/4lzcSagVtMv2MK4iAzPQGV0Zyr3Ft+a 2Tx3Gg0M9iIIhfxMWGqWGlZdF+qkXVMlKUa2p3KnhjscMRXIu2oZEA3u98C3eK/F AOezVPGfjySbtnSjkY0EDYa89DVN545yJIjyn/rx8fEVEbqnFglHC3dGKmBTCXs0 y+wepoa7ufWBH5LioPnMXCIg+5OoxPNz4o4L6QylZ7tTJYPrWq1BckdFUHmFdcth gBD5nCebVhosm4DjpLcmtf4doySTMtnMAAMrDbJzaKvpPY+3+YcXB5pVHGbs/RDz nKHLHPyl41GlKOFxLUlEVImkbyaEGy+OexX6CxVjrbKJdeV8OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSuJ8KEWJWiai2SC9yqdqsph8bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvMjM4NTdkMmEtZWU3YS0z OTA2LThlZDQtMTY3NDI5MmQ2OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeUxnuKZDppG50CEWrIPcgoqHY1U6R54mDba9v2LE1Xi7Usr9Jt 2V6xILfvGjP/1MNu8sdcVEWdbHwnA0N1v/es61OI7xA9jsebvZb3fnNM3fv293QA wiflvumMmoB6oWMcDrffZaVgxlo+FsTZOYpBVnZvu89nR2ycumOiVM5MmhkUBu96 XDCy6paKXYNjAKB7sEUkuPfTNwlCXMeaAtequT/24MqrmvkLfVvbx9tZ5RCDjXAh Vwbszc4pSUNIpmsuretOjkNmoJXJJ4e7jTB1QRh9lwncM1ATyw4+7X2p95hi1zg4 nxKZHLIk7RMKj099/0n2aw1oKQQvWTFyM5Y= -----END CERTIFICATE-----Generated at Thu Sep 3 22:32:16 2026 by rpki-client