$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/20d83ae2-7e0b-3590-ae6b-6e2744d8fb55.roa File: 20d83ae2-7e0b-3590-ae6b-6e2744d8fb55.roa (raw, json) Hash identifier: BB1JOQ/TRqyP4h161Pgpmb75E0FtLb/EAU9sTg7duYo= Subject key identifier: 5C:DF:D3:3A:B1:B8:DD:8A:2A:1B:C7:83:F6:16:90:2A:7E:8B:29:58 Certificate issuer: /CN=784a28b3-20e1-4112-a8cf-9df39cd32e6e Certificate serial: 010D0C9F4328584F093CE1291F30370ADD7F2100 Authority key identifier: A2:97:C5:73:DD:0C:02:7C:A5:D7:38:A4:68:A3:A1:B5:28:0E:1E:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/20d83ae2-7e0b-3590-ae6b-6e2744d8fb55.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 398216 IP address blocks: 2604:eac0::/32 maxlen: 32 2604:eac0:1::/48 maxlen: 48 2604:eac0:1:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/784a28b3-20e1-4112-a8cf-9df39cd32e6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/784a28b3-20e1-4112-a8cf-9df39cd32e6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e1:29:1f:30:37:0a:dd:7f:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784a28b3-20e1-4112-a8cf-9df39cd32e6e Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f65e1c3a-7460-4a35-98a5-8f18de7d3832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:d1:85:b6:9f:57:59:9a:5a:a9:45:5f:4b: b6:14:7a:44:30:58:b6:10:a6:56:6c:a6:73:03:02: a0:04:f9:fa:15:9a:de:22:f9:a5:17:b7:5b:30:16: f7:0c:9f:9f:76:34:1d:ac:30:86:97:3c:35:a6:9c: b9:fb:c3:4f:f4:9d:bf:b7:35:06:02:89:ed:9f:e6: f2:17:8f:ec:69:3c:d2:61:0d:d0:a5:20:c1:85:f3: d3:95:50:03:cf:d8:03:d8:e3:49:a0:5a:02:8e:f8: 72:5d:db:6b:e8:03:97:75:71:89:2e:55:b0:40:92: 46:0c:32:3d:4b:20:ed:de:dd:bc:95:8c:35:6c:4f: 91:d2:15:d3:d4:cf:cc:4e:07:69:f3:86:84:42:c5: d1:d1:fb:ad:54:36:89:b9:03:6d:a2:de:a9:5e:41: 17:48:30:80:5f:6d:d9:d9:17:05:ea:01:12:13:9e: 3e:40:8d:c3:0e:f7:ab:cf:47:1f:bd:cd:5b:1a:cd: 48:28:91:f8:7f:67:40:dc:91:28:ac:39:86:57:d8: 6f:96:80:76:91:ac:d6:27:72:9c:c1:17:0f:f9:84: 35:70:a0:8d:27:b2:c3:1b:1c:37:19:e2:93:22:f8: 40:d0:10:bc:39:b4:49:c0:81:37:70:37:9c:8a:df: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:D3:3A:B1:B8:DD:8A:2A:1B:C7:83:F6:16:90:2A:7E:8B:29:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/20d83ae2-7e0b-3590-ae6b-6e2744d8fb55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e/784a28b3-20e1-4112-a8cf-9df39cd32e6e.crl X509v3 Authority Key Identifier: keyid:A2:97:C5:73:DD:0C:02:7C:A5:D7:38:A4:68:A3:A1:B5:28:0E:1E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/784a28b3-20e1-4112-a8cf-9df39cd32e6e.cer sbgp-ipAddrBlock: critical IPv6: 2604:eac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:48:0d:1b:0f:67:d9:66:7a:aa:c7:fa:91:65:fe:fb:0b:f3: ba:74:69:b1:dd:41:8e:87:88:67:51:a5:f2:2c:c6:55:bb:de: 69:92:33:93:ad:79:cc:c8:c1:e7:f4:ae:e1:30:d7:14:a4:03: a8:f5:59:c1:47:f3:5b:9a:c8:30:4f:14:da:b8:a8:e2:b2:72: 53:7f:f0:c0:e4:69:ae:ac:88:0c:ee:20:64:ad:0e:45:11:8a: 52:8c:26:42:15:8b:c9:a7:c4:23:dc:2a:d0:bf:da:72:0a:9d: fd:20:df:ad:a0:b5:d8:dc:85:4a:d3:59:21:ea:ca:a6:4b:1e: d9:53:99:90:96:da:9b:17:be:37:45:c7:04:eb:31:d4:46:85: 49:4e:18:76:68:69:5a:8b:41:7e:96:9a:c9:17:02:b0:69:a7: 36:8b:19:80:c7:ea:a5:50:a1:f4:50:e3:c4:1c:c3:99:8b:79: 15:59:5c:1d:30:3f:f4:3a:96:0d:c3:d5:cb:6a:0c:30:5e:d4: 9b:aa:ce:53:67:b9:7f:7f:69:ab:33:a7:cf:bc:b5:3a:65:d8: 9e:ff:76:e8:51:f0:99:aa:d1:8a:e8:58:f7:ab:90:ac:6e:a1: c8:d5:4a:b2:85:9e:09:db:3d:c9:a5:48:45:dc:06:f6:ee:c1: a0:97:f3:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8JPOEpHzA3Ct1/IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg0YTI4YjMtMjBlMS00MTEyLWE4Y2YtOWRmMzljZDMy ZTZlMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjY1ZTFjM2EtNzQ2MC00YTM1LTk4YTUtOGYxOGRlN2QzODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwLRhbafV1maWqlFX0u2FHpEMFi2EKZWbKZz AwKgBPn6FZreIvmlF7dbMBb3DJ+fdjQdrDCGlzw1ppy5+8NP9J2/tzUGAontn+by F4/saTzSYQ3QpSDBhfPTlVADz9gD2ONJoFoCjvhyXdtr6AOXdXGJLlWwQJJGDDI9 SyDt3t28lYw1bE+R0hXT1M/MTgdp84aEQsXR0futVDaJuQNtot6pXkEXSDCAX23Z 2RcF6gESE54+QI3DDverz0cfvc1bGs1IKJH4f2dA3JEorDmGV9hvloB2kazWJ3Kc wRcP+YQ1cKCNJ7LDGxw3GeKTIvhA0BC8ObRJwIE3cDecit/znQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFzf0zqxuN2KKhvHg/YWkCp+iylYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83ODRh MjhiMy0yMGUxLTQxMTItYThjZi05ZGYzOWNkMzJlNmUvMjBkODNhZTItN2UwYi0z NTkwLWFlNmItNmUyNzQ0ZDhmYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzg0YTI4YjMtMjBlMS00MTEyLWE4 Y2YtOWRmMzljZDMyZTZlLzc4NGEyOGIzLTIwZTEtNDExMi1hOGNmLTlkZjM5Y2Qz MmU2ZS5jcmwwHwYDVR0jBBgwFoAUopfFc90MAnyl1zikaKOhtSgOHrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83ODRhMjhiMy0yMGUxLTQxMTItYThjZi05ZGYz OWNkMzJlNmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTqwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFSA0bD2fZZnqqx/qRZf77C/O6dGmx3UGOh4hnUaXyLMZVu95pkjOT rXnMyMHn9K7hMNcUpAOo9VnBR/NbmsgwTxTauKjisnJTf/DA5GmurIgM7iBkrQ5F EYpSjCZCFYvJp8Qj3CrQv9pyCp39IN+toLXY3IVK01kh6sqmSx7ZU5mQltqbF743 RccE6zHURoVJThh2aGlai0F+lprJFwKwaac2ixmAx+qlUKH0UOPEHMOZi3kVWVwd MD/0OpYNw9XLagwwXtSbqs5TZ7l/f2mrM6fPvLU6Zdie/3boUfCZqtGK6Fj3q5Cs bqHI1UqyhZ4J2z3JpUhF3Ab27sGgl/Py -----END CERTIFICATE-----Generated at Fri Sep 11 14:56:57 2026 by rpki-client