$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa File: 8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa (raw, json) Hash identifier: nGAqSd9t48P3CxUr8DVBlASc/Mx2IPNPomxSE50htjw= Subject key identifier: 04:73:6D:5F:52:7B:37:96:E7:84:90:C7:47:54:61:65:81:4B:E1:75 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423580E24884A746D783710 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Sat 09 Mar 2030 05:00:00 +0000 asID: 8070 IP address blocks: 2001:489a:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:0e:24:88:4a:74:6d:78:37:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 9 05:00:00 2030 GMT Subject: CN=41abfda6-67ab-4909-8eb7-b0667377dc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:0b:96:3a:f8:b7:a1:74:6d:14:f7:88:3e: 2f:09:3a:54:95:75:26:5c:04:23:e7:8d:74:ab:14: a0:57:15:b9:2f:b2:a5:50:cd:bb:b1:43:36:dc:fc: d6:80:53:98:70:2a:27:a9:9d:88:9e:5e:65:5a:57: cf:d0:65:f9:16:fb:3b:bc:78:27:17:8e:eb:d6:ab: 0d:e2:ea:f6:32:fc:c7:6b:d1:e0:36:02:0e:ab:e5: 91:30:48:f6:48:bc:84:ca:3b:08:4d:dc:5d:c8:84: a2:d7:e2:60:b1:44:87:ad:68:95:71:8a:7d:01:ca: 1c:4b:23:b7:0c:7b:b7:a9:25:e1:25:43:f4:d5:92: 2d:f3:71:a6:1f:22:85:b0:d0:fb:31:50:aa:c2:fd: be:93:c5:c6:7a:b5:dc:3b:58:eb:c8:db:91:08:4f: 2b:e9:f5:9e:c3:7d:f8:4e:e6:92:46:e1:ab:42:f7: f4:b8:07:d0:88:c2:0b:bf:3d:95:0a:f4:9f:7d:06: b1:bb:a1:82:84:f1:51:1d:58:1b:dd:93:4e:ac:db: a5:a7:00:47:00:30:cf:ef:c7:07:69:0e:7c:fe:b6: 7b:d0:d6:6e:dc:cb:98:20:78:f4:40:3e:51:11:1c: 5f:56:35:80:7d:7c:35:9b:21:d5:8f:f6:0c:ae:3b: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:6D:5F:52:7B:37:96:E7:84:90:C7:47:54:61:65:81:4B:E1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8a8a9fe1-c822-3225-8a21-34a6e24ad25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2001:489a:2000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:7a:b2:f6:f4:19:f9:ce:5c:a4:a4:dd:f0:66:92:b1:21:cb: e0:0f:8b:d0:1a:09:df:a1:93:91:a5:61:e7:e7:67:1c:4f:f2: 11:59:53:9b:28:82:c4:05:81:ad:1e:01:26:a5:de:19:55:37: f8:57:d2:40:5f:0f:fd:34:6d:99:54:3d:19:4f:7c:68:8a:ef: 9d:25:ab:90:14:3c:02:9f:cc:69:44:45:c6:b7:9d:fa:40:3f: ca:23:df:2a:19:cb:ce:4c:e3:60:8d:79:85:1d:44:81:83:e4: 56:4a:6d:38:a1:60:2b:e4:9f:ad:a0:ac:2e:66:df:72:9b:7a: 92:ac:25:67:30:15:30:59:0b:76:32:c4:ff:b8:43:16:67:62: 3e:64:fb:f0:ad:73:ac:75:77:e4:c4:d6:23:36:84:77:20:74: 07:b3:b8:0f:fc:81:c0:fc:bd:7b:bc:a1:fc:bf:fa:cc:66:c8: 8e:39:ee:29:4e:60:35:af:71:c6:65:61:27:dd:74:93:26:b1: 44:48:3e:fb:fd:24:cd:7d:a3:b4:f6:a0:69:3e:09:51:1f:ad: 14:a6:e6:7d:1d:7d:0d:3a:2f:ec:a0:1c:ed:52:32:e3:37:3f: 6a:ee:72:ad:68:13:45:0c:77:e9:27:48:8a:6e:90:20:6b:0c: 6c:6a:e6:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7kI1gOJIhKdG14NxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk NDFhYmZkYTYtNjdhYi00OTA5LThlYjctYjA2NjczNzdkYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKELljr4t6F0bRT3iD4vCTpUlXUmXAQj5410 qxSgVxW5L7KlUM27sUM23PzWgFOYcConqZ2Inl5lWlfP0GX5Fvs7vHgnF47r1qsN 4ur2MvzHa9HgNgIOq+WRMEj2SLyEyjsITdxdyISi1+JgsUSHrWiVcYp9AcocSyO3 DHu3qSXhJUP01ZIt83GmHyKFsND7MVCqwv2+k8XGerXcO1jryNuRCE8r6fWew334 TuaSRuGrQvf0uAfQiMILvz2VCvSffQaxu6GChPFRHVgb3ZNOrNulpwBHADDP78cH aQ58/rZ70NZu3MuYIHj0QD5RERxfVjWAfXw1myHVj/YMrjuMrwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFARzbV9SezeW54SQx0dUYWWBS+F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGE4YTlmZTEtYzgyMi0z MjI1LThhMjEtMzRhNmUyNGFkMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFIAFImiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk3qy9vQZ+c5cpKTd8GaSsSHL4A+L0BoJ36GTkaVh5+dnHE/yEVlT myiCxAWBrR4BJqXeGVU3+FfSQF8P/TRtmVQ9GU98aIrvnSWrkBQ8Ap/MaURFxred +kA/yiPfKhnLzkzjYI15hR1EgYPkVkptOKFgK+SfraCsLmbfcpt6kqwlZzAVMFkL djLE/7hDFmdiPmT78K1zrHV35MTWIzaEdyB0B7O4D/yBwPy9e7yh/L/6zGbIjjnu KU5gNa9xxmVhJ910kyaxREg++/0kzX2jtPagaT4JUR+tFKbmfR19DTov7KAc7VIy 4zc/au5yrWgTRQx36SdIim6QIGsMbGrm0A== -----END CERTIFICATE-----Generated at Sun Sep 13 12:56:13 2026 by rpki-client