$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/a0df2f64-2f0e-3626-9c15-77e0fcc823c1.roa File: a0df2f64-2f0e-3626-9c15-77e0fcc823c1.roa (raw, json) Hash identifier: lI+qvN95d2jMvFv0CQC/T1oxMVJEYgdtZ6CJ+q0uNj8= Subject key identifier: 7F:6D:4E:02:F6:02:86:63:96:C1:BC:BE:80:2A:A7:A8:85:A7:A9:51 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584EF71776A7B88D9ACF83C31100 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/a0df2f64-2f0e-3626-9c15-77e0fcc823c1.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3630 IP address blocks: 2620:f:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:76:a7:b8:8d:9a:cf:83:c3:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d7ee5bc3-9c41-48b4-882d-57378515915a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:ba:c6:6b:2d:9c:a3:00:a9:61:5d:cd:f3: 50:5b:34:10:92:04:f8:b2:92:bc:96:d3:bb:99:00: 8b:c9:31:f0:e2:39:6a:bb:6f:fe:87:1d:df:4a:5d: 31:6d:93:88:83:58:8d:f1:95:df:cc:84:1e:e2:41: b1:f0:4b:2f:8d:6f:71:67:a6:3f:f6:aa:7f:16:cf: 45:cf:66:4d:a0:c0:27:e1:07:30:0b:77:30:dc:f6: 48:f0:99:86:b1:76:ed:f7:d9:f9:14:81:49:c7:c3: 9c:0b:ae:75:f3:ee:c3:6d:9b:18:b9:62:56:53:c3: e1:92:79:d9:59:a5:d9:2d:3c:11:21:0e:e5:7f:5b: 21:05:12:dc:27:1f:5c:ed:18:da:9a:d3:79:3b:fe: 08:b4:2c:23:04:ce:52:5b:be:24:24:50:a6:c8:87: 2d:55:08:ef:97:0b:14:da:65:eb:f5:a2:05:e1:db: 67:3a:c9:a8:5e:22:57:f0:bb:6e:47:25:17:d1:4c: 37:94:38:5b:24:48:e7:98:46:64:f2:b9:c2:a4:14: 92:0f:a3:0e:f0:6d:04:fb:fe:9c:79:5f:f5:a0:b2: b9:d7:5f:eb:2d:f5:91:a0:94:39:80:83:b3:cc:99: 20:01:d0:76:5b:05:34:61:9e:71:1f:71:e2:32:41: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6D:4E:02:F6:02:86:63:96:C1:BC:BE:80:2A:A7:A8:85:A7:A9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/a0df2f64-2f0e-3626-9c15-77e0fcc823c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:66:e1:d7:13:b7:90:85:83:60:20:bf:ee:24:bf:49:63:8e: e3:45:85:1e:40:31:4b:b6:5b:b0:16:81:33:3f:61:1a:86:5a: 32:bb:43:07:ec:21:df:53:33:2c:2d:76:ce:61:77:5b:60:1c: 1d:ce:93:e0:18:54:2d:f0:93:b3:0c:78:e1:71:85:61:4f:a8: 6a:9d:03:d8:9f:b5:05:ee:e7:d7:b6:58:53:9d:e5:21:cd:ae: 3f:62:18:61:e1:50:8e:82:95:71:8d:fd:82:52:0d:7f:3d:5f: e4:71:c9:9f:7d:b3:f4:46:e6:eb:cd:d3:a8:5c:bb:18:93:51: a8:6f:dd:d1:f2:93:d9:61:96:4e:31:1e:d2:0d:ac:ce:82:e8: 35:5d:e7:cd:74:a5:a2:37:73:f1:a9:28:ed:8e:da:b9:9e:50: 91:f9:2e:f8:38:dc:76:35:4a:17:6a:e9:ae:a2:33:7c:ba:cb: d6:e7:16:5f:d2:86:c8:06:ff:ca:4d:1a:f0:a8:b6:93:10:f1: 74:6d:cf:7c:ae:f8:f1:ff:00:5a:03:ea:e9:58:98:93:d3:42: 0d:a5:d2:f0:ec:56:1a:0e:ef:67:5d:eb:a4:57:d4:1f:12:e8: 38:b0:49:65:23:8a:90:d9:70:ae:f4:53:0d:7a:a9:ec:09:8f: 77:6d:87:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F3anuI2az4PDEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDdlZTViYzMtOWM0MS00OGI0LTg4MmQtNTczNzg1MTU5MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRi6xmstnKMAqWFdzfNQWzQQkgT4spK8ltO7 mQCLyTHw4jlqu2/+hx3fSl0xbZOIg1iN8ZXfzIQe4kGx8EsvjW9xZ6Y/9qp/Fs9F z2ZNoMAn4QcwC3cw3PZI8JmGsXbt99n5FIFJx8OcC6518+7DbZsYuWJWU8PhknnZ WaXZLTwRIQ7lf1shBRLcJx9c7RjamtN5O/4ItCwjBM5SW74kJFCmyIctVQjvlwsU 2mXr9aIF4dtnOsmoXiJX8LtuRyUX0Uw3lDhbJEjnmEZk8rnCpBSSD6MO8G0E+/6c eV/1oLK511/rLfWRoJQ5gIOzzJkgAdB2WwU0YZ5xH3HiMkFYbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9tTgL2AoZjlsG8voAqp6iFp6lRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvYTBkZjJmNjQtMmYwZS0z NjI2LTljMTUtNzdlMGZjYzgyM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG1m4dcTt5CFg2Agv+4kv0ljjuNFhR5AMUu2W7AWgTM/YRqGWjK7 QwfsId9TMywtds5hd1tgHB3Ok+AYVC3wk7MMeOFxhWFPqGqdA9iftQXu59e2WFOd 5SHNrj9iGGHhUI6ClXGN/YJSDX89X+RxyZ99s/RG5uvN06hcuxiTUahv3dHyk9lh lk4xHtINrM6C6DVd5810paI3c/GpKO2O2rmeUJH5Lvg43HY1Shdq6a6iM3y6y9bn Fl/ShsgG/8pNGvCotpMQ8XRtz3yu+PH/AFoD6ulYmJPTQg2l0vDsVhoO72dd66RX 1B8S6DiwSWUjipDZcK70Uw16qewJj3dthws= -----END CERTIFICATE-----Generated at Tue Sep 22 20:41:51 2026 by rpki-client