$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/a02b5773-dac3-30b0-bf4d-3ade863cc456.roa File: a02b5773-dac3-30b0-bf4d-3ade863cc456.roa (raw, json) Hash identifier: MF5Xs+kaIDFickJGrPa2zYdV8GCUwWVJQXmYoN1NEbY= Subject key identifier: 80:44:07:6F:DC:4C:72:A0:E1:43:76:14:84:14:31:C6:A1:AE:E8:45 Certificate issuer: /CN=40e6b9eb-cf05-46dd-9c23-df16609e271b Certificate serial: 010D0C9F4328584EFB475ED97AF818B417889D80 Authority key identifier: FE:55:27:16:1C:27:57:AC:A8:61:83:BB:45:64:9A:7F:92:38:99:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/a02b5773-dac3-30b0-bf4d-3ade863cc456.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 18872 IP address blocks: 2620:128:f021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/40e6b9eb-cf05-46dd-9c23-df16609e271b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/40e6b9eb-cf05-46dd-9c23-df16609e271b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:5e:d9:7a:f8:18:b4:17:88:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e6b9eb-cf05-46dd-9c23-df16609e271b Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=13fa5a90-4ac3-4361-ae4a-b366e12f8fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:e3:87:2b:fa:ed:ec:c0:9f:23:e4:29:2a: 73:76:ec:65:25:86:5f:f6:88:e9:c3:54:cb:57:d2: 9c:d2:5a:58:e9:21:45:bc:e0:e9:ff:2f:1c:ea:9d: f9:37:38:a8:a2:44:37:55:42:e8:2c:db:ab:78:9e: 9e:13:42:d2:8d:fd:67:1e:fd:e7:c4:3d:82:5c:67: 04:ba:0f:71:72:c9:52:ec:2a:cb:47:0d:e3:82:ef: 30:81:40:62:3c:ce:01:db:de:98:a7:a2:cd:91:e9: 64:4d:10:0f:d7:f1:66:6f:ea:fd:46:00:d7:9e:b4: a3:d2:3b:16:05:6b:0c:1c:c9:c0:f6:dd:0f:5b:d9: 05:98:31:d2:c8:0a:bf:94:c4:1e:a1:b7:73:c4:c5: 6f:1f:c9:cd:b5:d2:8e:a8:01:ec:ba:7f:88:e6:91: 8d:3f:4b:88:6c:b3:0d:2c:a4:d6:01:b5:fa:3e:d8: c7:fb:b1:56:c8:68:c8:ca:f1:a5:9b:84:d2:8d:9d: 95:c1:be:20:e1:b0:f5:30:5c:87:0e:74:37:30:8b: 78:60:50:15:13:3f:f6:97:68:fa:e2:11:45:8c:33: 1f:a6:e9:80:4d:33:72:72:c2:c3:be:73:fc:2f:da: c3:77:4c:c2:33:d2:ed:fc:10:5c:34:03:5b:e7:56: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:44:07:6F:DC:4C:72:A0:E1:43:76:14:84:14:31:C6:A1:AE:E8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/a02b5773-dac3-30b0-bf4d-3ade863cc456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b/40e6b9eb-cf05-46dd-9c23-df16609e271b.crl X509v3 Authority Key Identifier: keyid:FE:55:27:16:1C:27:57:AC:A8:61:83:BB:45:64:9A:7F:92:38:99:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40e6b9eb-cf05-46dd-9c23-df16609e271b.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:f021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a0:92:32:66:93:9a:54:42:e2:d7:72:36:c4:b7:48:eb:c7: 9a:30:1b:69:33:bc:4b:73:8a:f2:5e:fd:be:70:a7:dc:a3:20: 81:12:01:f3:8e:97:a4:1d:30:3e:a1:eb:e7:d8:fe:21:17:42: b9:a4:86:0b:7d:9d:5c:ae:3a:db:30:1c:8a:60:02:5f:06:9d: bb:5c:42:2d:26:78:69:9c:cb:b9:0b:bb:40:bf:0c:ac:6b:85: 96:f1:82:d2:73:c3:b9:48:73:4b:5f:69:e7:d5:86:e8:6c:d1: db:1b:81:0b:17:88:1b:5c:2c:ad:30:e6:31:ee:cd:7f:de:8c: cc:51:0e:4a:a1:6b:e6:c9:6c:28:de:0b:49:93:c6:77:cb:56: 63:8f:02:52:e3:46:52:b2:1b:72:18:0d:f8:3e:0a:f6:43:49: 59:9e:f6:44:8c:ee:dd:cb:ad:71:07:57:7a:7a:cd:74:ef:f5: e8:2b:25:9a:ca:f3:2d:6c:63:48:56:0e:65:d8:64:94:d9:48: 1f:a4:17:75:64:5e:a7:bd:a0:b0:f8:6f:7a:05:00:13:7e:42: 7e:67:86:92:52:4e:7e:df:8e:27:13:fb:16:f4:bf:99:dd:a7: 1b:a8:b2:e7:ba:94:17:fc:96:cb:8b:04:d5:88:c4:0b:3c:fa: 09:62:10:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE77R17ZevgYtBeInYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNmI5ZWItY2YwNS00NmRkLTljMjMtZGYxNjYwOWUy NzFiMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk MTNmYTVhOTAtNGFjMy00MzYxLWFlNGEtYjM2NmUxMmY4ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/jhyv67ezAnyPkKSpzduxlJYZf9ojpw1TL V9Kc0lpY6SFFvODp/y8c6p35NziookQ3VULoLNureJ6eE0LSjf1nHv3nxD2CXGcE ug9xcslS7CrLRw3jgu8wgUBiPM4B296Yp6LNkelkTRAP1/Fmb+r9RgDXnrSj0jsW BWsMHMnA9t0PW9kFmDHSyAq/lMQeobdzxMVvH8nNtdKOqAHsun+I5pGNP0uIbLMN LKTWAbX6PtjH+7FWyGjIyvGlm4TSjZ2Vwb4g4bD1MFyHDnQ3MIt4YFAVEz/2l2j6 4hFFjDMfpumATTNycsLDvnP8L9rDd0zCM9Lt/BBcNANb51Z2nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBEB2/cTHKg4UN2FIQUMcahruhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MGU2 YjllYi1jZjA1LTQ2ZGQtOWMyMy1kZjE2NjA5ZTI3MWIvYTAyYjU3NzMtZGFjMy0z MGIwLWJmNGQtM2FkZTg2M2NjNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDBlNmI5ZWItY2YwNS00NmRkLTlj MjMtZGYxNjYwOWUyNzFiLzQwZTZiOWViLWNmMDUtNDZkZC05YzIzLWRmMTY2MDll MjcxYi5jcmwwHwYDVR0jBBgwFoAU/lUnFhwnV6yoYYO7RWSaf5I4mZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MGU2YjllYi1jZjA1LTQ2ZGQtOWMyMy1kZjE2 NjA5ZTI3MWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKPAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImgkjJmk5pUQuLXcjbEt0jrx5owG2kzvEtzivJe/b5wp9yjIIES AfOOl6QdMD6h6+fY/iEXQrmkhgt9nVyuOtswHIpgAl8GnbtcQi0meGmcy7kLu0C/ DKxrhZbxgtJzw7lIc0tfaefVhuhs0dsbgQsXiBtcLK0w5jHuzX/ejMxRDkqha+bJ bCjeC0mTxnfLVmOPAlLjRlKyG3IYDfg+CvZDSVme9kSM7t3LrXEHV3p6zXTv9egr JZrK8y1sY0hWDmXYZJTZSB+kF3VkXqe9oLD4b3oFABN+Qn5nhpJSTn7fjicT+xb0 v5ndpxuosue6lBf8lsuLBNWIxAs8+gliEDA= -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:13 2026 by rpki-client