$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa File: b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa (raw, json) Hash identifier: dIsZ/HY/rPJoJ8D5UZkbfiZXWlI9r/B5cwz1JAPrDhQ= Subject key identifier: 72:BD:98:C2:B4:C9:AD:33:FF:92:6F:B8:41:0A:29:23:0B:D6:A4:A0 Certificate issuer: /CN=4a595a80-2106-455a-be91-2aa623280126 Certificate serial: 010D0C9F4328584ED001C6FE040EC594B5EA0200 Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2604:11a0:1000::/40 maxlen: 48 2604:11a0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:c6:fe:04:0e:c5:94:b5:ea:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a595a80-2106-455a-be91-2aa623280126 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=c49cf2c7-c56e-4214-a5fe-a4ab190e3660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:51:45:51:7b:a4:67:0e:e0:d3:d5:50:76: 79:d6:ab:7e:d5:9c:61:47:80:51:30:50:c4:d6:45: e0:8c:1c:44:02:43:0a:d9:ee:5c:7f:75:b4:3b:30: df:dd:38:dd:7c:fc:01:f6:55:4f:c5:4f:b6:a6:f5: a3:6f:ec:41:e8:d8:8c:f8:b8:1d:b7:bf:17:66:75: 6f:a1:3e:30:d6:1e:a4:ba:3a:91:9b:07:4f:cb:5d: 8a:a2:c9:0b:a1:63:9c:d2:d9:fb:73:7b:22:f9:38: d9:d2:0e:02:9e:4a:78:26:8d:02:d3:04:1e:b6:ee: 03:7f:dd:6f:aa:5a:10:4c:7a:ad:e1:74:47:40:6a: 7d:c2:d6:32:ab:d5:0c:c7:e9:59:f8:e7:5a:ba:c1: 80:57:34:74:ea:3b:f6:d6:7d:bc:1c:61:5d:74:19: 4a:b8:54:43:17:41:78:97:0a:37:0d:b4:9f:0b:97: ac:4b:8d:0e:2e:6d:d3:ce:b9:45:15:92:15:04:6d: b5:4d:86:6d:7c:75:b2:e2:36:0c:13:32:21:50:1b: b8:93:31:ea:b4:fe:8c:9d:06:a7:50:f5:b9:2c:07: 0e:35:d0:64:dc:d2:26:f7:e7:ee:ea:79:b1:07:39: f6:29:32:5a:f3:9f:53:09:c3:90:8b:a5:8e:11:9e: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:98:C2:B4:C9:AD:33:FF:92:6F:B8:41:0A:29:23:0B:D6:A4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl X509v3 Authority Key Identifier: keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer sbgp-ipAddrBlock: critical IPv6: 2604:11a0:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:af:a8:6c:95:1a:d2:7c:cf:00:d9:b3:b5:f1:16:50:7b:d3: 58:42:01:95:92:7d:01:f7:76:96:12:f2:e8:00:be:85:2a:d2: 8c:de:e2:89:a3:d1:92:37:ea:57:c6:b5:1a:ff:3f:59:d2:17: 5d:f5:9e:77:0e:03:c9:57:1b:06:46:95:48:16:5c:67:61:e3: 09:96:10:e1:f5:02:a7:48:4d:36:00:ed:4c:01:99:f3:89:e1: 9e:60:e9:74:bf:86:f3:15:2a:35:24:2f:99:bd:6b:b6:73:2e: 7c:8a:4b:85:c4:02:2b:e0:67:90:c5:50:38:ff:ff:07:b0:e4: 1b:b3:7b:49:7c:b4:f0:12:f6:32:6a:ca:43:3e:60:75:85:b7: e3:73:15:8c:70:85:4b:5f:d0:97:fb:24:68:30:05:ba:19:29: 2b:84:78:d4:91:71:4e:bb:6c:0d:cd:79:83:11:8f:d5:62:85: 0d:60:52:62:b2:33:d8:20:45:8f:ac:40:b5:04:34:c3:03:f0: 84:91:7e:4b:66:50:3d:5d:71:74:5e:87:9c:a7:4d:53:7e:f2: 02:c4:b3:72:0b:ff:65:16:10:15:3e:75:85:fb:c0:f7:b1:a8: 71:a7:32:f8:6b:4c:e6:7c:6d:b2:27:df:7b:fc:d4:08:0c:c4: 0f:db:72:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7QAcb+BA7FlLXqAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgw MTI2MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YzQ5Y2YyYzctYzU2ZS00MjE0LWE1ZmUtYTRhYjE5MGUzNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGNRRVF7pGcO4NPVUHZ51qt+1ZxhR4BRMFDE 1kXgjBxEAkMK2e5cf3W0OzDf3TjdfPwB9lVPxU+2pvWjb+xB6NiM+Lgdt78XZnVv oT4w1h6kujqRmwdPy12KoskLoWOc0tn7c3si+TjZ0g4Cnkp4Jo0C0wQetu4Df91v qloQTHqt4XRHQGp9wtYyq9UMx+lZ+OdausGAVzR06jv21n28HGFddBlKuFRDF0F4 lwo3DbSfC5esS40OLm3TzrlFFZIVBG21TYZtfHWy4jYMEzIhUBu4kzHqtP6MnQan UPW5LAcONdBk3NIm9+fu6nmxBzn2KTJa859TCcOQi6WOEZ436QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHK9mMK0ya0z/5JvuEEKKSML1qSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5 NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvYjMxZjdhYTMtNmYyYi0z MzMyLWIwNTgtZmRiMjIwOWEzZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGE1OTVhODAtMjEwNi00NTVhLWJl OTEtMmFhNjIzMjgwMTI2LzRhNTk1YTgwLTIxMDYtNDU1YS1iZTkxLTJhYTYyMzI4 MDEyNi5jcmwwHwYDVR0jBBgwFoAUUtbV5rISIADa5K6P/GUha7XbT7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2 MjMyODAxMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgQRoBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV6+obJUa0nzPANmztfEWUHvTWEIBlZJ9Afd2lhLy6AC+hSrSjN7i iaPRkjfqV8a1Gv8/WdIXXfWedw4DyVcbBkaVSBZcZ2HjCZYQ4fUCp0hNNgDtTAGZ 84nhnmDpdL+G8xUqNSQvmb1rtnMufIpLhcQCK+BnkMVQOP//B7DkG7N7SXy08BL2 MmrKQz5gdYW343MVjHCFS1/Ql/skaDAFuhkpK4R41JFxTrtsDc15gxGP1WKFDWBS YrIz2CBFj6xAtQQ0wwPwhJF+S2ZQPV1xdF6HnKdNU37yAsSzcgv/ZRYQFT51hfvA 97Gocacy+GtM5nxtsiffe/zUCAzED9tyOQ== -----END CERTIFICATE-----Generated at Thu Aug 20 21:57:57 2026 by rpki-client