$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa File: cc57b996-1472-3501-b7aa-16621af1a48c.roa (raw, json) Hash identifier: tllHHusnhH/aa7NQuEjFp/ZMwWnLnodujLfUzf5asyw= Subject key identifier: 22:48:55:52:C2:96:C8:42:90:38:0E:A5:8D:E4:6B:83:8F:13:91:E4 Certificate issuer: /CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Certificate serial: 010D0C9F4328584ED002112321B131305D150100 Authority key identifier: 03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 393468 IP address blocks: 2620:135:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:11:23:21:b1:31:30:5d:15:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=ffa37751-5111-4ddb-b17f-f757b784f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:05:82:c9:3c:85:ba:54:3f:d4:4d:76:8d: 33:d9:86:99:ad:6d:65:b2:cf:79:27:77:bf:89:c1: 1c:f5:6c:53:c2:5f:a6:a8:52:9c:cb:45:60:6f:2e: 82:52:c8:ec:2c:66:d6:77:ee:d4:ca:69:34:3e:49: f4:19:7f:7a:5c:bd:a0:cd:98:de:ba:35:8c:c7:20: 3d:25:90:a1:ad:9e:87:c2:c3:8f:a3:89:d1:76:6b: 9a:be:62:be:58:da:f6:d4:c2:0e:7f:80:8a:3d:58: d0:56:ac:0f:d8:66:fd:13:ea:da:02:36:b7:0e:1f: 51:1c:3a:fc:2e:58:5f:6c:81:bf:a7:1c:12:22:cd: 52:6c:f9:da:80:02:53:60:46:b1:83:1a:7c:a1:83: b7:48:32:89:fc:b0:e7:a4:a8:b3:49:e1:43:99:5b: 55:cb:25:e1:29:29:eb:7a:36:70:3a:c9:83:1c:eb: 44:50:6a:5c:f2:6f:1a:b2:ab:ca:e9:22:f1:71:87: 1d:93:92:06:23:8b:77:21:aa:79:2e:df:64:01:fb: c0:98:35:c0:58:6d:b9:f5:dc:9c:a4:52:24:f1:e9: ca:48:f7:6e:a5:d7:7d:60:4a:b2:e7:db:72:f0:40: b2:07:9a:63:19:34:0a:a7:1f:73:55:05:fe:7c:61: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:55:52:C2:96:C8:42:90:38:0E:A5:8D:E4:6B:83:8F:13:91:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl X509v3 Authority Key Identifier: keyid:03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c1:2a:2e:d4:5c:37:8d:a9:6b:5e:e3:29:0b:4e:ed:69:04: 2d:77:f7:66:f0:0c:a9:a6:c4:4c:d6:3e:31:09:a1:ff:3f:6d: a5:aa:23:a0:6a:1f:68:72:e2:d9:e7:c1:4a:dd:76:45:ea:c4: 37:1b:a0:0e:30:42:d0:ac:3b:d6:9f:71:88:36:05:81:36:4e: c0:30:4e:d7:c5:06:27:ae:55:73:bc:54:9e:d3:40:aa:44:c4: cb:9c:de:1c:ae:e8:bf:5c:01:07:cd:7d:65:9e:af:7e:d3:bf: 69:59:5d:6d:14:41:5c:f0:a5:64:2a:93:a8:12:ef:3f:12:be: 72:c3:dd:d8:82:43:8d:b3:72:10:09:44:a5:75:36:18:6d:e5: ef:d9:9c:4a:13:3e:45:03:b7:64:7d:84:64:92:eb:16:29:8c: 06:61:25:ab:68:dc:36:c8:7d:b3:22:3f:71:14:c4:f6:3e:48: b5:da:76:f8:06:fa:00:b1:dc:d5:45:2f:29:a2:18:4f:90:ac: 59:63:ff:7c:af:4c:f2:6c:88:77:28:c4:5a:8a:22:f6:f1:89: 67:3d:27:f9:27:2d:e1:39:64:87:7f:0b:04:b4:26:3a:dc:3a: 62:43:12:4e:29:0a:97:7c:87:66:12:d9:dc:2c:f4:70:fa:5d: 14:1f:b3:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7QAhEjIbExMF0VAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2ZTk4YzYtYzMxNy00YmFlLThhNGItMjNlMjYwMzdl MWYxMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmZhMzc3NTEtNTExMS00ZGRiLWIxN2YtZjc1N2I3ODRmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaAFgsk8hbpUP9RNdo0z2YaZrW1lss95J3e/ icEc9WxTwl+mqFKcy0Vgby6CUsjsLGbWd+7Uymk0Pkn0GX96XL2gzZjeujWMxyA9 JZChrZ6HwsOPo4nRdmuavmK+WNr21MIOf4CKPVjQVqwP2Gb9E+raAja3Dh9RHDr8 LlhfbIG/pxwSIs1SbPnagAJTYEaxgxp8oYO3SDKJ/LDnpKizSeFDmVtVyyXhKSnr ejZwOsmDHOtEUGpc8m8asqvK6SLxcYcdk5IGI4t3Iap5Lt9kAfvAmDXAWG259dyc pFIk8enKSPdupdd9YEqy59ty8ECyB5pjGTQKpx9zVQX+fGHVYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJIVVLClshCkDgOpY3ka4OPE5HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZl OThjNi1jMzE3LTRiYWUtOGE0Yi0yM2UyNjAzN2UxZjEvY2M1N2I5OTYtMTQ3Mi0z NTAxLWI3YWEtMTY2MjFhZjFhNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWM2ZTk4YzYtYzMxNy00YmFlLThh NGItMjNlMjYwMzdlMWYxLzFjNmU5OGM2LWMzMTctNGJhZS04YTRiLTIzZTI2MDM3 ZTFmMS5jcmwwHwYDVR0jBBgwFoAUA+WSeohZmvcYVk8y/ASdnW5FSvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZlOThjNi1jMzE3LTRiYWUtOGE0Yi0yM2Uy NjAzN2UxZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNfAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLBKi7UXDeNqWte4ykLTu1pBC1392bwDKmmxEzWPjEJof8/baWq I6BqH2hy4tnnwUrddkXqxDcboA4wQtCsO9afcYg2BYE2TsAwTtfFBieuVXO8VJ7T QKpExMuc3hyu6L9cAQfNfWWer37Tv2lZXW0UQVzwpWQqk6gS7z8SvnLD3diCQ42z chAJRKV1Nhht5e/ZnEoTPkUDt2R9hGSS6xYpjAZhJato3DbIfbMiP3EUxPY+SLXa dvgG+gCx3NVFLymiGE+QrFlj/3yvTPJsiHcoxFqKIvbxiWc9J/knLeE5ZId/CwS0 JjrcOmJDEk4pCpd8h2YS2dws9HD6XRQfs7Y= -----END CERTIFICATE-----Generated at Fri Aug 21 01:15:19 2026 by rpki-client