$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa File: 027cdea3-3e6f-3338-aa14-c0aea267feab.roa (raw, json) Hash identifier: KAclfD7uCiq6dG3wx3bCyw5S2B3BPuvVEDBy1IVDZ2g= Subject key identifier: 7C:47:5F:D0:F2:52:CE:00:72:D7:0D:BB:0B:68:EA:77:AD:7A:EC:C0 Certificate issuer: /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Certificate serial: 010D0C9F4328584ECD371EFFC656A17DBF601200 Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 14432 IP address blocks: 2001:504:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:1e:ff:c6:56:a1:7d:bf:60:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=5a9911a5-b79c-4861-a3a6-3b89de37b976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:d8:b4:85:7b:e0:01:4f:09:c4:e3:bd:40: 88:5c:b2:44:ec:e4:93:b4:b0:c5:1a:c9:6c:95:51: 70:91:08:ae:77:99:54:d7:11:9f:43:e2:85:86:fa: 53:0f:c4:45:95:d7:f6:b9:27:02:42:26:54:64:d6: c9:84:c2:00:14:99:f9:2e:c0:be:9c:8f:c2:cb:3a: 04:7a:d6:1e:71:6b:ba:87:bd:d4:cc:ae:dd:30:18: e2:79:26:5b:54:63:04:3c:67:29:f5:a6:79:ac:d5: 22:ef:d1:fb:48:f1:52:15:e5:ee:df:4f:a4:99:f5: c9:75:cc:76:22:76:08:58:fa:9c:d9:47:12:7a:58: 85:89:fc:c5:ae:2e:4a:8d:d1:bc:27:ce:2a:91:2a: 11:e3:09:d0:b0:38:54:fc:f3:32:c5:af:e4:89:75: 5f:bb:44:66:d2:2a:71:33:fa:a5:c3:de:46:c4:8d: 7f:42:69:89:35:e2:2a:00:85:ed:77:0a:ad:1e:1c: 90:6a:76:7d:be:88:f0:d3:cd:d1:b8:bd:35:f4:c7: 83:12:24:c1:d3:81:c6:fc:22:17:d1:12:3e:f4:b9: 57:37:27:af:69:30:83:6c:47:89:66:64:99:b2:6f: bf:06:0d:f9:54:a2:d4:a2:ad:94:fa:eb:f5:51:ff: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:47:5F:D0:F2:52:CE:00:72:D7:0D:BB:0B:68:EA:77:AD:7A:EC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/027cdea3-3e6f-3338-aa14-c0aea267feab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl X509v3 Authority Key Identifier: keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d4:b0:85:27:d1:70:08:6e:cb:2b:8f:90:0e:6e:1f:e6:1a: c4:90:d7:0c:f2:58:18:4b:bf:4a:25:49:d3:62:37:a6:92:22: 50:e5:d4:7a:c9:a1:01:e6:a4:98:e0:7b:b5:7a:9c:02:4f:c6: d4:f4:1d:79:e5:88:9a:bc:1e:28:ea:60:c8:96:a6:ea:a8:bb: 7d:e1:0e:db:0b:03:e1:7d:ff:05:d0:1d:34:0e:eb:07:a5:13: 09:d5:c4:79:ef:64:f9:cc:de:71:d4:16:a1:26:6a:5a:c2:2d: 08:db:f0:3e:45:ea:0d:c7:67:9a:9e:de:f7:b2:46:e4:7f:a8: 43:02:8c:14:2c:7d:42:14:21:92:26:85:e2:2c:4b:59:73:48: d2:10:cc:3c:91:83:33:dd:bc:7d:e2:7a:31:bd:9e:f8:a9:0f: 06:b8:21:f7:25:32:e0:15:52:c2:61:69:f7:d8:96:32:e3:c0: 6e:ee:58:fe:1b:37:53:67:8d:25:2e:cd:e5:73:b5:ee:8e:f8: 0e:63:f4:b6:f5:48:3f:8a:59:0c:01:64:9c:85:7d:46:f6:b8: 6a:2b:fd:42:74:48:e5:39:f4:5c:7b:24:87:76:70:e7:f4:d3: 2a:64:7a:7b:a3:8b:cc:f7:bb:c7:02:f2:14:90:47:00:53:c2: ba:cd:e0:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7NNx7/xlahfb9gEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFhOGUwMTgtODhmNC00MDY3LTkzNWUtZWY4ZTIwYTU1 M2M1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NWE5OTExYTUtYjc5Yy00ODYxLWEzYTYtM2I4OWRlMzdiOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRXYtIV74AFPCcTjvUCIXLJE7OSTtLDFGsls lVFwkQiud5lU1xGfQ+KFhvpTD8RFldf2uScCQiZUZNbJhMIAFJn5LsC+nI/CyzoE etYecWu6h73UzK7dMBjieSZbVGMEPGcp9aZ5rNUi79H7SPFSFeXu30+kmfXJdcx2 InYIWPqc2UcSeliFifzFri5KjdG8J84qkSoR4wnQsDhU/PMyxa/kiXVfu0Rm0ipx M/qlw95GxI1/QmmJNeIqAIXtdwqtHhyQanZ9vojw083RuL019MeDEiTB04HG/CIX 0RI+9LlXNyevaTCDbEeJZmSZsm+/Bg35VKLUoq2U+uv1Uf+kNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHxHX9DyUs4ActcNuwto6neteuzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4 ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBhNTUzYzUvMDI3Y2RlYTMtM2U2Zi0z MzM4LWFhMTQtYzBhZWEyNjdmZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTFhOGUwMTgtODhmNC00MDY3LTkz NWUtZWY4ZTIwYTU1M2M1L2ExYThlMDE4LTg4ZjQtNDA2Ny05MzVlLWVmOGUyMGE1 NTNjNS5jcmwwHwYDVR0jBBgwFoAUdezwcZfkdSWR6NkbnryrZ+1adSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhl MjBhNTUzYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfUsIUn0XAIbssrj5AObh/mGsSQ1wzyWBhLv0olSdNiN6aSIlDl 1HrJoQHmpJjge7V6nAJPxtT0HXnliJq8HijqYMiWpuqou33hDtsLA+F9/wXQHTQO 6welEwnVxHnvZPnM3nHUFqEmalrCLQjb8D5F6g3HZ5qe3veyRuR/qEMCjBQsfUIU IZImheIsS1lzSNIQzDyRgzPdvH3iejG9nvipDwa4IfclMuAVUsJhaffYljLjwG7u WP4bN1NnjSUuzeVzte6O+A5j9Lb1SD+KWQwBZJyFfUb2uGor/UJ0SOU59Fx7JId2 cOf00ypkenuji8z3u8cC8hSQRwBTwrrN4GU= -----END CERTIFICATE-----Generated at Wed Aug 26 21:54:03 2026 by rpki-client