$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: h4kHP1/StcwDzlxhbqU+QvP0faapAJDQGyrRCVpGYEI= Subject key identifier: A2:68:C0:0A:0D:5F:74:FE:AA:3D:94:4A:C1:6D:3B:0E:F2:C4:56:8C Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F4328584EC7A1D3A4E0E9D31683D5EEA0 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d3:a4:e0:e9:d3:16:83:d5:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=2fe62e20-fa96-4141-abe5-8775d04d445f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:d3:c1:bf:3d:bc:97:61:45:47:8f:85:17: 49:d3:c7:78:26:16:1a:ac:84:b6:7c:62:98:28:ba: a1:91:ff:0b:f1:a6:40:52:95:eb:d1:6f:1d:fc:fa: 69:e2:00:d7:25:a2:af:40:01:89:68:d6:d3:59:de: d2:42:16:f2:74:42:fa:df:cf:ee:5b:4d:b9:b3:39: cb:e7:5f:16:8d:55:aa:5b:b1:2d:e9:4f:be:b8:0d: 4d:98:e1:bf:0f:79:b5:ed:0e:8c:22:70:6c:ee:4f: 15:79:83:7a:2b:98:3f:27:dd:74:b2:f4:3b:06:90: ac:be:e5:86:83:5a:05:35:8d:d4:f7:a7:51:52:02: 18:b1:fa:c2:f5:13:8c:6c:cc:11:08:6b:b8:d8:d6: 54:0d:b8:c6:2c:e6:a9:3e:f1:54:49:04:00:1e:ec: c7:23:5c:e1:fd:8a:db:38:e0:f5:2c:c3:1d:74:7a: 6b:cc:03:93:91:f2:7d:9e:21:fc:7d:0f:2d:a8:1b: 29:b9:45:ef:29:e1:95:48:07:5b:98:44:75:9a:27: 3c:ae:63:22:37:66:d7:2c:e6:76:85:36:5b:7b:fe: 2f:2b:ea:6d:da:9b:e8:76:cc:3c:18:fe:fb:24:1a: 9e:41:e6:c1:59:3b:73:f7:f2:da:fc:76:50:83:f3: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:68:C0:0A:0D:5F:74:FE:AA:3D:94:4A:C1:6D:3B:0E:F2:C4:56:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:45:e6:ac:81:b2:c0:e3:31:a7:86:27:8a:2f:04:ec:36:e4: 42:9a:43:6b:fb:1b:fc:3c:a9:00:1d:ed:d4:d8:0e:fe:06:d2: 7d:8a:49:75:2b:48:1b:2f:af:11:25:9c:9f:72:f9:40:33:fc: bb:6f:5f:7c:65:e7:95:22:98:af:58:d1:3a:23:67:a2:48:c8: 01:1a:04:8a:64:8f:ba:62:ed:34:c1:35:35:fc:69:12:d3:f5: bd:de:29:f8:11:84:73:3e:0a:40:4c:46:42:7e:2c:30:73:90: 46:9a:91:e5:d2:d9:87:ae:d1:67:1a:53:eb:70:a7:d3:b0:23: ca:e3:23:f8:cf:75:44:34:0b:3e:b4:58:ea:d8:c5:c1:bd:10: d2:c8:72:57:1c:f7:90:da:91:e4:77:3b:8f:01:5d:6f:1d:e0: 41:0c:66:fd:18:7b:da:b9:50:6b:00:f1:4f:a4:7d:50:21:c6: 3f:88:43:0e:ed:0f:49:b5:34:e4:2a:f1:f6:3f:69:54:b1:7c: 26:64:b6:f8:95:0a:03:28:99:14:fc:82:2d:2e:76:97:fa:2c: 34:fc:4b:68:62:b5:15:4d:11:ea:29:be:12:78:2c:29:b8:03: e3:ed:72:dc:bc:ef:e1:a2:f0:c5:8d:4f:ff:98:2a:0d:ca:0f: 1c:34:f8:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7HodOk4OnTFoPV7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmZlNjJlMjAtZmE5Ni00MTQxLWFiZTUtODc3NWQwNGQ0NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWrTwb89vJdhRUePhRdJ08d4JhYarIS2fGKY KLqhkf8L8aZAUpXr0W8d/Ppp4gDXJaKvQAGJaNbTWd7SQhbydEL638/uW025sznL 518WjVWqW7Et6U++uA1NmOG/D3m17Q6MInBs7k8VeYN6K5g/J910svQ7BpCsvuWG g1oFNY3U96dRUgIYsfrC9ROMbMwRCGu42NZUDbjGLOapPvFUSQQAHuzHI1zh/Yrb OOD1LMMddHprzAOTkfJ9niH8fQ8tqBspuUXvKeGVSAdbmER1mic8rmMiN2bXLOZ2 hTZbe/4vK+pt2pvodsw8GP77JBqeQebBWTtz9/La/HZQg/MEKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKJowAoNX3T+qj2USsFtOw7yxFaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACkXmrIGywOMxp4Ynii8E7DbkQppDa/sb/DypAB3t1NgO/gbSfYpJ dStIGy+vESWcn3L5QDP8u29ffGXnlSKYr1jROiNnokjIARoEimSPumLtNME1Nfxp EtP1vd4p+BGEcz4KQExGQn4sMHOQRpqR5dLZh67RZxpT63Cn07AjyuMj+M91RDQL PrRY6tjFwb0Q0shyVxz3kNqR5Hc7jwFdbx3gQQxm/Rh72rlQawDxT6R9UCHGP4hD Du0PSbU05Crx9j9pVLF8JmS2+JUKAyiZFPyCLS52l/osNPxLaGK1FU0R6im+Engs KbgD4+1y3Lzv4aLwxY1P/5gqDcoPHDT4oQ== -----END CERTIFICATE-----Generated at Thu Aug 20 00:06:02 2026 by rpki-client