$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa File: 8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (raw, json) Hash identifier: 35khfMl0f6aCMyqDlddXeShqsONBoZrWhU3GyBw3TbA= Subject key identifier: 77:6E:24:F8:1A:2C:99:05:E6:BB:36:09:03:35:12:35:EB:27:62:42 Certificate issuer: /CN=331beef2-1596-4a21-8613-1e84adac3bfc Certificate serial: 010D0C9F4328584ED86488A9846BC5920C145460 Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 3359 IP address blocks: 2620:101:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:88:a9:84:6b:c5:92:0c:14:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=b59e4cc6-eaa1-4f65-bb24-b9658fd5a8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:dd:cd:91:a6:b2:9b:69:b8:7b:c6:c2:4f: 2e:ee:5a:21:0a:12:ef:ff:9e:df:c9:62:cf:89:72: 21:e3:14:c8:f6:3f:c0:f7:88:e2:f9:e9:a2:30:e0: cb:11:e3:0d:98:50:a7:a3:dc:02:d2:f5:b8:bf:cd: 63:91:06:72:8b:0f:71:2a:68:b7:4e:56:c4:37:6f: a0:e7:db:c9:38:1a:df:cd:aa:cb:ea:f7:d2:04:b2: 4e:af:33:65:74:93:92:5b:67:32:4b:fd:ad:15:b3: 85:5b:5d:42:7b:14:8e:38:6c:13:18:3b:49:6d:46: 8c:67:3e:e9:8a:30:dc:2c:d6:40:83:bc:49:5d:9f: 3c:b3:c1:ac:ce:c9:80:61:2a:01:df:08:e5:7c:17: f5:93:e9:6b:1f:68:7f:2d:5f:69:17:52:89:9f:5e: a6:3d:23:dc:ff:9c:2d:14:f2:87:d6:e5:26:05:18: 95:30:2a:d9:cb:d3:36:38:a3:f2:1f:60:ae:5f:83: 55:58:c7:14:8c:f2:ed:60:9c:df:41:11:dd:08:33: f8:91:0d:7f:a6:b9:b2:bc:e8:56:b2:9c:97:76:47: 25:43:3a:c8:fe:f1:02:34:4f:43:ae:18:00:eb:88: aa:ea:81:69:a4:f6:57:e1:99:b9:fc:fb:4a:8a:78: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:24:F8:1A:2C:99:05:E6:BB:36:09:03:35:12:35:EB:27:62:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl X509v3 Authority Key Identifier: keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b6:7d:70:0f:17:f3:95:42:37:a9:d3:10:9a:41:7b:b8:fb: f0:f8:62:97:17:3f:20:b7:88:c2:2a:f5:5b:16:0f:6c:88:b0: f6:93:da:20:78:2d:d7:bd:e4:e8:f5:54:27:9d:98:17:a9:1e: 2d:64:04:54:b3:fe:38:7e:fa:f2:83:b0:ad:b4:37:13:8a:ec: 3f:d4:f4:2d:8c:bc:a8:e7:44:34:09:50:11:b7:e1:33:c6:a4: 80:df:ad:74:e5:bf:07:e3:c2:b5:37:11:9f:0e:33:4e:3d:85: 08:5b:00:2a:41:67:63:93:b7:9d:9c:77:4b:1e:53:d9:09:fa: ad:1a:ad:4b:ee:e2:a0:ee:2b:27:57:48:27:2a:1b:02:11:34: 59:01:39:b2:36:bd:79:97:0f:ef:70:c3:bc:05:68:d3:94:4f: d3:6e:3c:03:1d:5e:21:50:75:ba:6d:82:88:21:cc:5a:60:15: 36:6a:75:33:ad:70:ff:01:cb:ba:04:94:40:e1:00:9c:35:f0: 1d:d3:ca:c8:48:0f:a0:58:5b:51:05:40:5b:ff:44:cd:7a:09: 0e:4c:3f:32:0b:47:d4:af:f1:7e:db:33:49:ff:6a:fa:cd:27: 53:42:23:38:8c:78:f2:4a:be:1d:01:76:8b:66:d1:e5:c5:d6: f1:e8:c2:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7YZIiphGvFkgwUVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMxYmVlZjItMTU5Ni00YTIxLTg2MTMtMWU4NGFkYWMz YmZjMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YjU5ZTRjYzYtZWFhMS00ZjY1LWJiMjQtYjk2NThmZDVhOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OndzZGmsptpuHvGwk8u7lohChLv/57fyWLP iXIh4xTI9j/A94ji+emiMODLEeMNmFCno9wC0vW4v81jkQZyiw9xKmi3TlbEN2+g 59vJOBrfzarL6vfSBLJOrzNldJOSW2cyS/2tFbOFW11CexSOOGwTGDtJbUaMZz7p ijDcLNZAg7xJXZ88s8GszsmAYSoB3wjlfBf1k+lrH2h/LV9pF1KJn16mPSPc/5wt FPKH1uUmBRiVMCrZy9M2OKPyH2CuX4NVWMcUjPLtYJzfQRHdCDP4kQ1/prmyvOhW spyXdkclQzrI/vECNE9DrhgA64iq6oFppPZX4Zm5/PtKiniMNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHduJPgaLJkF5rs2CQM1EjXrJ2JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFi ZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0YWRhYzNiZmMvOGEzZDRhYWMtN2FkZC0z NDRkLWE1NDItYTk2ZjkwNWY3Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzMxYmVlZjItMTU5Ni00YTIxLTg2 MTMtMWU4NGFkYWMzYmZjLzMzMWJlZWYyLTE1OTYtNGEyMS04NjEzLTFlODRhZGFj M2JmYy5jcmwwHwYDVR0jBBgwFoAUO+Ro/9pz+cLk1Xujm9IVthNokZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFiZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0 YWRhYzNiZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABAcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiLZ9cA8X85VCN6nTEJpBe7j78Philxc/ILeIwir1WxYPbIiw9pPa IHgt173k6PVUJ52YF6keLWQEVLP+OH768oOwrbQ3E4rsP9T0LYy8qOdENAlQEbfh M8akgN+tdOW/B+PCtTcRnw4zTj2FCFsAKkFnY5O3nZx3Sx5T2Qn6rRqtS+7ioO4r J1dIJyobAhE0WQE5sja9eZcP73DDvAVo05RP0248Ax1eIVB1um2CiCHMWmAVNmp1 M61w/wHLugSUQOEAnDXwHdPKyEgPoFhbUQVAW/9EzXoJDkw/MgtH1K/xftszSf9q +s0nU0IjOIx48kq+HQF2i2bR5cXW8ejCeg== -----END CERTIFICATE-----Generated at Mon Sep 14 23:01:03 2026 by rpki-client