$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa File: d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa (raw, json) Hash identifier: mfnx5xOlC6syOqbOsLP72mXasHzIOf+EdsemlL0Rl38= Subject key identifier: 38:AD:64:52:16:83:2E:4A:CE:7F:4C:1D:4C:B1:EE:0B:02:69:97:F0 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584ED001D51B9DCAB8136FF7E200 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 5769 IP address blocks: 2606:3c00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d5:1b:9d:ca:b8:13:6f:f7:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=4b29559d-8d2c-4530-885a-aa434f46a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:0f:d7:c2:1e:14:fa:dd:e8:57:01:a9:d9: 21:fa:d6:9b:a2:87:15:89:46:a8:1c:d0:a7:df:d1: 9f:f3:50:b4:d4:48:33:e6:52:c9:eb:d6:96:ff:75: 1b:95:26:ca:d6:6e:2f:54:98:36:b3:df:1c:72:44: b3:9e:45:68:12:40:2d:6a:8c:09:4b:cb:47:1c:95: aa:83:ad:15:ce:de:0e:6e:f6:7e:6e:f1:d4:1d:17: 6d:24:35:9a:1a:d8:ef:12:be:e1:88:56:59:e1:72: 1e:ec:e5:83:94:66:22:c3:68:af:b3:db:f5:d3:0f: 71:c1:f9:65:16:02:1a:d8:73:06:ba:3d:df:67:f3: 7e:5d:7f:fc:94:29:30:c3:43:c1:dd:08:a1:c9:b2: f1:fa:8c:13:6f:dc:4e:09:8b:06:fd:f1:b5:34:1b: 58:21:a2:b6:04:48:92:d0:7e:c6:24:a1:3b:9e:3b: cb:a3:b0:4f:01:67:40:84:64:57:b5:fc:0b:16:b2: 84:95:f8:50:80:1a:fb:bb:ae:42:f5:80:51:06:9f: 58:4a:7e:95:62:64:a3:31:16:66:ed:31:7b:95:b4: b9:59:0a:38:06:9e:68:22:d2:fa:12:9d:fc:ab:a7: 98:cd:6b:1a:40:cd:3d:33:ac:94:ab:63:77:89:42: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:64:52:16:83:2E:4A:CE:7F:4C:1D:4C:B1:EE:0B:02:69:97:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3c00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:50:3b:c8:5e:6a:02:13:15:69:d6:ca:c4:16:90:ae:d0:10: 48:51:30:eb:7c:fe:04:b7:d1:9a:9b:8d:99:a6:a7:ab:78:48: 9a:26:84:fa:bb:65:7d:18:09:f3:4b:8c:a1:1d:42:11:2a:43: f3:b2:de:93:4a:6e:e6:66:e0:ab:2a:b1:4b:77:5d:e3:d4:79: f3:7d:49:2c:53:f7:c6:0f:e7:65:46:bb:eb:5b:cf:29:e7:eb: f8:31:0c:da:dc:3b:1b:19:b5:8f:9a:01:59:f9:38:1f:05:46: ed:f3:05:0e:24:cd:f8:9c:42:1f:40:cc:62:f6:03:83:65:1e: 76:94:ff:fd:83:8b:bf:f1:fb:5e:e7:7b:97:ea:62:ff:0a:10: fa:f3:45:d7:03:ea:0e:65:a6:da:d8:c5:5c:67:fe:ef:b0:19: 0a:82:52:26:5f:11:72:b6:98:1b:fb:52:0c:df:fc:e9:a1:86: a5:ea:f8:c8:e3:83:32:70:38:d4:f3:6a:45:6c:a5:3e:43:4e: b2:49:c7:b9:22:b5:92:31:c4:f7:25:3a:01:94:c3:af:1f:d9: e0:ac:08:0e:c5:5a:4f:bc:08:43:70:21:dd:7d:17:c9:36:f1: 21:fd:5e:06:0a:02:6f:b0:53:1a:81:ff:07:57:e6:b7:1d:f4: 3b:1a:8c:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7QAdUbncq4E2/34gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGIyOTU1OWQtOGQyYy00NTMwLTg4NWEtYWE0MzRmNDZhOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlAP18IeFPrd6FcBqdkh+taboocViUaoHNCn 39Gf81C01Egz5lLJ69aW/3UblSbK1m4vVJg2s98cckSznkVoEkAtaowJS8tHHJWq g60Vzt4ObvZ+bvHUHRdtJDWaGtjvEr7hiFZZ4XIe7OWDlGYiw2ivs9v10w9xwfll FgIa2HMGuj3fZ/N+XX/8lCkww0PB3QihybLx+owTb9xOCYsG/fG1NBtYIaK2BEiS 0H7GJKE7njvLo7BPAWdAhGRXtfwLFrKElfhQgBr7u65C9YBRBp9YSn6VYmSjMRZm 7TF7lbS5WQo4Bp5oItL6Ep38q6eYzWsaQM09M6yUq2N3iUKd1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDitZFIWgy5Kzn9MHUyx7gsCaZfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZDAwYTIxZjItYmM3MC0z Y2RkLTk0ZGUtNmUwZDYwYTA1NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY8ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8UDvIXmoCExVp1srEFpCu0BBIUTDrfP4Et9Gam42ZpqereEiaJoT6 u2V9GAnzS4yhHUIRKkPzst6TSm7mZuCrKrFLd13j1HnzfUksU/fGD+dlRrvrW88p 5+v4MQza3DsbGbWPmgFZ+TgfBUbt8wUOJM34nEIfQMxi9gODZR52lP/9g4u/8fte 53uX6mL/ChD680XXA+oOZaba2MVcZ/7vsBkKglImXxFytpgb+1IM3/zpoYal6vjI 44MycDjU82pFbKU+Q06ySce5IrWSMcT3JToBlMOvH9ngrAgOxVpPvAhDcCHdfRfJ NvEh/V4GCgJvsFMagf8HV+a3HfQ7GozB -----END CERTIFICATE-----Generated at Tue Sep 22 15:55:09 2026 by rpki-client