$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa File: f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa (raw, json) Hash identifier: J8taveL8zlNL9xqimL5nt4GGPK/j0Te05dSKFsIXji4= Subject key identifier: 49:E0:DD:A1:5A:36:67:B1:ED:13:43:B8:DA:1C:B2:06:5B:50:A2:04 Certificate issuer: /CN=369b937a-2420-4fd7-b5a1-0b6c4ee6c1df Certificate serial: 010D0C9F4328584ED9C767EB3ED98EBF752EE880 Authority key identifier: 43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 589 IP address blocks: 2620:101:1000::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:67:eb:3e:d9:8e:bf:75:2e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369b937a-2420-4fd7-b5a1-0b6c4ee6c1df Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=023fed6e-bede-49e0-b565-77ca8ac3a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:be:b7:95:f7:f7:72:24:ea:48:86:e8:d1: 59:79:bb:c8:0c:63:dc:6a:38:ef:9a:81:28:96:6d: 9c:a2:6a:e8:d8:23:de:34:4c:be:22:dc:84:63:42: 98:ee:5e:e3:1a:d6:5a:9c:c9:ee:9b:e3:e8:ff:61: c5:28:5b:cf:46:23:33:86:c4:63:a6:6e:87:11:f5: 5d:51:ba:ab:2f:f5:35:84:ab:82:8a:74:e0:18:6f: 92:6a:b2:0a:d4:fb:a7:77:4e:b4:a4:87:1b:d4:e5: 3e:7a:3a:26:09:6a:77:08:11:61:3e:be:8a:40:b0: 35:1a:60:67:91:d0:53:70:05:3b:08:ab:b9:88:c5: 39:33:2f:0f:f5:1e:90:5a:4a:c4:e4:30:82:91:a7: 64:e8:72:e1:ab:a6:bc:d9:bb:68:bb:51:ef:6f:09: 46:d1:33:12:42:5d:64:e0:f4:67:fd:60:2c:e2:44: 2b:6a:ae:94:3a:fb:e6:7d:c2:91:cd:44:d8:9e:2e: 33:35:50:af:1e:34:40:2c:81:e6:a0:33:2a:cf:a0: dd:c3:f5:f9:62:2c:4c:51:d4:fa:1b:cf:d2:97:ef: 8a:a0:c4:8d:18:78:10:97:07:b9:6d:45:bb:88:e2: ae:91:f2:63:d9:2a:85:35:27:29:d1:98:f8:aa:f8: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E0:DD:A1:5A:36:67:B1:ED:13:43:B8:DA:1C:B2:06:5B:50:A2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.crl X509v3 Authority Key Identifier: keyid:43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:1000::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f5:18:f8:ee:e3:d6:70:7d:4d:f7:55:3f:8e:c6:40:04:c6: 3b:21:98:f9:c7:98:25:e8:fb:35:08:a4:a4:5b:e9:7a:53:91: 1f:dd:ad:0f:cc:d3:c8:9d:0e:27:55:50:40:22:6d:9e:77:17: 62:3f:e9:b0:cc:00:fc:0a:8a:cb:e1:35:bb:b5:6e:7b:ab:3d: 23:e6:90:36:3b:a1:25:d2:ef:08:2a:53:e2:c5:1b:70:6f:8e: 5b:c5:fe:c6:48:00:e4:2f:0e:94:08:fc:d2:68:d4:ec:a2:c9: 8c:6e:3b:a4:6e:26:0c:ef:6c:67:94:88:c7:e4:c0:53:56:17: aa:8c:64:58:32:3e:95:2f:ae:72:e3:38:b8:2f:2d:cd:9e:7f: dd:e9:d7:05:c2:df:4d:da:7d:93:33:6d:2f:a3:cb:d0:47:94: 43:16:0f:d0:9e:10:ee:ac:6b:b6:ad:95:97:d2:7e:3a:48:b5: 28:77:97:69:1b:0f:8d:2e:37:de:78:1c:22:97:d7:2c:9b:2b: 0d:6c:f5:7b:d3:ce:35:96:2e:bd:68:cf:9e:8f:18:fe:fa:6e: a7:89:be:87:c3:ff:24:de:01:f3:01:95:2f:bd:99:ed:e1:b5: 59:cc:11:e3:af:19:2e:4c:c6:64:df:bd:d7:47:c0:17:22:b6: b9:c2:59:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zx2frPtmOv3Uu6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5YjkzN2EtMjQyMC00ZmQ3LWI1YTEtMGI2YzRlZTZj MWRmMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MDIzZmVkNmUtYmVkZS00OWUwLWI1NjUtNzdjYThhYzNhOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFS+t5X393Ik6kiG6NFZebvIDGPcajjvmoEo lm2comro2CPeNEy+ItyEY0KY7l7jGtZanMnum+Po/2HFKFvPRiMzhsRjpm6HEfVd UbqrL/U1hKuCinTgGG+SarIK1Pund060pIcb1OU+ejomCWp3CBFhPr6KQLA1GmBn kdBTcAU7CKu5iMU5My8P9R6QWkrE5DCCkadk6HLhq6a82btou1HvbwlG0TMSQl1k 4PRn/WAs4kQraq6UOvvmfcKRzUTYni4zNVCvHjRALIHmoDMqz6Ddw/X5YixMUdT6 G8/Sl++KoMSNGHgQlwe5bUW7iOKukfJj2SqFNScp0Zj4qvggMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEng3aFaNmex7RNDuNocsgZbUKIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjli OTM3YS0yNDIwLTRmZDctYjVhMS0wYjZjNGVlNmMxZGYvZjJhN2I1ZGUtZmNlYi0z ZmZiLTg5NzgtNTQ5MWNiNmQxZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY5YjkzN2EtMjQyMC00ZmQ3LWI1 YTEtMGI2YzRlZTZjMWRmLzM2OWI5MzdhLTI0MjAtNGZkNy1iNWExLTBiNmM0ZWU2 YzFkZi5jcmwwHwYDVR0jBBgwFoAUQ0ceCMBbIE5AyjaHdA8FZeJYWA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjliOTM3YS0yNDIwLTRmZDctYjVhMS0wYjZj NGVlNmMxZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiABARAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACj1GPju49ZwfU33VT+OxkAExjshmPnHmCXo+zUIpKRb6XpTkR/d rQ/M08idDidVUEAibZ53F2I/6bDMAPwKisvhNbu1bnurPSPmkDY7oSXS7wgqU+LF G3BvjlvF/sZIAOQvDpQI/NJo1OyiyYxuO6RuJgzvbGeUiMfkwFNWF6qMZFgyPpUv rnLjOLgvLc2ef93p1wXC303afZMzbS+jy9BHlEMWD9CeEO6sa7atlZfSfjpItSh3 l2kbD40uN954HCKX1yybKw1s9XvTzjWWLr1oz56PGP76bqeJvofD/yTeAfMBlS+9 me3htVnMEeOvGS5MxmTfvddHwBcitrnCWQs= -----END CERTIFICATE-----Generated at Fri Aug 21 02:49:42 2026 by rpki-client