$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/47ba168f-306b-3959-a461-b968f5e0233b.roa File: 47ba168f-306b-3959-a461-b968f5e0233b.roa (raw, json) Hash identifier: nyIwRqEMVyxUkkkmMKXHkkqt8nUZnvn3YVB3iFufgWc= Subject key identifier: 9C:C1:A3:CD:01:DA:18:69:6C:2F:A1:3C:15:36:16:6C:79:49:B3:8C Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584EFCACB64F7B6A795F47BEF300 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/47ba168f-306b-3959-a461-b968f5e0233b.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 3486 IP address blocks: 2620:11:60::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:b6:4f:7b:6a:79:5f:47:be:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=86e84d0c-432c-48a7-ba3f-f1ee0e37f3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:e1:41:d8:98:7a:96:22:98:47:4b:02:23: 0f:28:0e:5a:c4:41:34:10:7a:38:0a:35:d6:8d:bd: 9d:56:20:e7:bb:e4:7b:5a:c1:5e:d1:87:44:13:48: 23:f0:8d:73:cd:36:ed:c1:55:78:71:28:31:d3:63: d4:f2:5e:41:ab:48:69:c1:17:87:c4:10:be:1a:a6: 5a:fc:3f:5b:8d:9c:81:22:bf:de:f0:28:77:1e:09: c7:d3:3b:d2:ed:5f:29:a2:88:7a:11:67:b0:99:d1: 06:20:f8:e9:23:2f:e0:a8:7a:15:1c:7b:6a:b1:9e: 4c:59:7e:10:ca:24:02:ba:b1:c3:2b:ff:4e:04:88: bd:74:0d:de:20:90:47:c0:7b:f9:6f:47:7d:37:b8: 2d:09:c3:7f:8b:a2:f9:8a:00:d3:39:ef:4e:ac:d2: f3:22:7e:5e:3b:61:d7:6c:da:0e:c9:2d:81:dc:61: 05:d8:c0:09:44:64:2a:a8:22:33:9c:91:04:56:4c: a3:82:3d:72:08:36:77:d4:a1:21:48:ac:a4:0c:10: 51:7c:85:c9:e1:56:b0:df:91:9d:8e:51:f9:b5:52: 93:75:49:1f:15:c9:cc:76:fd:7d:e1:80:7c:a2:92: d8:9c:49:6b:fa:c6:fa:b6:b9:b8:33:aa:24:9b:10: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:A3:CD:01:DA:18:69:6C:2F:A1:3C:15:36:16:6C:79:49:B3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/47ba168f-306b-3959-a461-b968f5e0233b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11:60::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cf:ce:6f:1c:2a:34:81:16:e9:ff:f3:e8:ef:f6:61:c6:65: 39:3f:f7:dd:6a:1b:a0:57:c5:39:c0:cd:b5:ff:e0:22:70:83: c8:96:53:44:91:47:66:ee:a7:7c:d4:84:45:66:63:01:4b:bd: a3:15:0d:0a:e1:d2:e0:e4:f4:d7:a4:0f:b6:1b:7e:1e:59:bf: db:79:57:73:a5:dd:8e:2a:0d:1d:5e:e6:fc:0d:03:45:ff:4b: 2e:42:6f:e8:21:74:2f:23:d6:db:38:0e:a0:a0:7c:10:5c:74: 91:b2:db:3a:75:09:e7:f0:72:8e:64:7e:3b:dd:a1:c3:8d:56: 43:a9:e0:b3:56:41:1e:30:8e:5f:d3:51:30:38:de:c9:f3:f8: 3c:45:08:80:e8:81:08:60:2d:90:21:a4:7d:c1:e2:14:d9:31: 29:88:a2:9d:99:25:9e:82:91:62:f3:c2:40:f5:6a:aa:0d:43: 35:fa:6c:24:0d:0d:3c:12:3c:06:5b:d6:ec:c6:9c:d8:20:2e: 37:54:d1:ec:57:db:9a:aa:77:8f:78:96:19:5d:99:63:4d:7d: e5:87:6b:50:b3:ee:d4:de:85:9d:0c:3f:0d:94:53:d7:7d:b6: e0:e5:94:19:0d:33:41:e6:78:48:c4:55:88:e0:d7:54:2c:f7: a2:88:28:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rLZPe2p5X0e+8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODZlODRkMGMtNDMyYy00OGE3LWJhM2YtZjFlZTBlMzdmM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg/hQdiYepYimEdLAiMPKA5axEE0EHo4CjXW jb2dViDnu+R7WsFe0YdEE0gj8I1zzTbtwVV4cSgx02PU8l5Bq0hpwReHxBC+GqZa /D9bjZyBIr/e8Ch3HgnH0zvS7V8pooh6EWewmdEGIPjpIy/gqHoVHHtqsZ5MWX4Q yiQCurHDK/9OBIi9dA3eIJBHwHv5b0d9N7gtCcN/i6L5igDTOe9OrNLzIn5eO2HX bNoOyS2B3GEF2MAJRGQqqCIznJEEVkyjgj1yCDZ31KEhSKykDBBRfIXJ4Vaw35Gd jlH5tVKTdUkfFcnMdv194YB8opLYnElr+sb6trm4M6okmxBgdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJzBo80B2hhpbC+hPBU2Fmx5SbOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvNDdiYTE2OGYtMzA2Yi0z OTU5LWE0NjEtYjk2OGY1ZTAyMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAEQBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzPzm8cKjSBFun/8+jv9mHGZTk/991qG6BXxTnAzbX/4CJwg8iW U0SRR2bup3zUhEVmYwFLvaMVDQrh0uDk9NekD7Ybfh5Zv9t5V3Ol3Y4qDR1e5vwN A0X/Sy5Cb+ghdC8j1ts4DqCgfBBcdJGy2zp1Cefwco5kfjvdocONVkOp4LNWQR4w jl/TUTA43snz+DxFCIDogQhgLZAhpH3B4hTZMSmIop2ZJZ6CkWLzwkD1aqoNQzX6 bCQNDTwSPAZb1uzGnNggLjdU0exX25qqd494lhldmWNNfeWHa1Cz7tTehZ0MPw2U U9d9tuDllBkNM0HmeEjEVYjg11Qs96KIKME= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:54 2026 by rpki-client