$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa File: 6e1bfdd4-6910-383a-a378-bf872efdea0e.roa (raw, json) Hash identifier: 9Av89mQKgc8pu4knni0yLaj60Fhq0Zed10RoxawAYw4= Subject key identifier: 44:B3:DF:F8:3A:D2:72:26:18:E8:3D:33:B6:82:9B:5B:CB:5B:FA:76 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584F02421CC5C92DBD8C35D0E080 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 174 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1c:c5:c9:2d:bd:8c:35:d0:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=2f0863be-b6e2-42ea-b4a5-8f0a5b73a582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:9c:a8:4d:61:88:43:9f:dd:b2:9c:ea:c6: 38:2b:ba:1b:73:3c:0f:1c:04:59:d9:dc:62:f7:c4: 19:67:45:2f:ff:1f:f7:3b:db:2a:f1:81:ce:a7:a5: a7:7b:08:dc:0c:eb:53:36:9e:40:56:10:ef:9e:50: 58:aa:02:2e:ff:b6:bf:9a:3f:fa:9d:db:a0:ec:2b: 4c:38:5b:5b:62:b1:fa:c6:10:29:4d:19:29:e6:4f: ae:ec:f5:87:a2:71:86:fb:8d:95:14:db:48:99:64: 61:2d:0e:59:0a:e2:ee:81:22:63:40:23:ba:82:2d: 12:d6:90:d5:3e:13:e8:ed:b3:22:f5:30:08:ba:14: 88:dc:ad:94:a5:6b:84:13:c9:e6:4e:16:37:34:47: 7d:43:fe:ab:ec:d2:30:26:d0:de:ed:16:e9:66:0b: ae:34:3d:e8:0d:81:68:b3:06:06:36:dd:4c:3b:20: 44:0d:ca:8f:4b:b1:62:60:a0:74:ad:66:96:ac:2d: f4:ac:0c:60:40:2e:09:e7:03:95:55:bf:9c:40:e9: 76:69:05:cf:eb:c3:b0:9e:c6:2b:8f:70:ac:d1:e1: 07:da:48:0d:68:71:81:ef:cd:31:d4:98:95:f7:aa: 9e:a8:56:d3:ee:ec:6a:53:4c:bc:17:ab:80:a4:4c: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B3:DF:F8:3A:D2:72:26:18:E8:3D:33:B6:82:9B:5B:CB:5B:FA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8a:e8:ac:7b:ef:fc:3c:71:9d:52:af:a2:53:68:dd:e2:0f: 2a:27:85:c5:68:ea:17:52:fc:db:4a:d9:5e:c3:30:5f:01:ab: 17:8d:dc:a6:10:c1:f6:b1:90:57:20:98:0f:f0:68:be:cd:a5: 56:aa:94:8f:20:af:49:6e:1b:0a:74:ec:3e:b5:8e:ad:f2:08: bd:60:7c:98:f7:37:24:d1:de:bd:fc:b6:b0:41:b1:45:c0:2c: bd:ce:a1:a4:a0:e3:81:a3:32:24:41:29:3c:09:f4:a7:3b:7a: 5f:b3:20:5e:50:84:ef:46:21:ac:d3:96:ca:a6:a5:27:d0:e9: 0c:43:3b:91:d9:c3:ff:31:01:5e:9d:89:ad:1c:71:43:0c:97: 7c:5c:02:1f:d1:d5:9d:0e:2b:ef:c5:b4:c5:ac:1d:72:95:37: d1:78:9d:eb:63:51:5d:27:a9:bd:8e:37:2b:0e:d2:d9:dc:b4: da:d0:b2:ad:ad:c6:9f:b7:c1:d0:a2:19:49:5a:e5:1c:02:d3: 8c:54:4b:94:73:3d:d8:e7:a0:4a:32:60:df:06:44:19:83:4f: 16:4a:be:53:5b:b2:68:7c:da:b4:bd:a9:b8:f7:db:ed:77:0a: d6:b2:23:85:e0:85:91:23:15:6f:d8:e4:cb:0d:22:49:de:82: df:bb:7a:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8CQhzFyS29jDXQ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MmYwODYzYmUtYjZlMi00MmVhLWI0YTUtOGYwYTViNzNhNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzecqE1hiEOf3bKc6sY4K7obczwPHARZ2dxi 98QZZ0Uv/x/3O9sq8YHOp6WnewjcDOtTNp5AVhDvnlBYqgIu/7a/mj/6ndug7CtM OFtbYrH6xhApTRkp5k+u7PWHonGG+42VFNtImWRhLQ5ZCuLugSJjQCO6gi0S1pDV PhPo7bMi9TAIuhSI3K2UpWuEE8nmThY3NEd9Q/6r7NIwJtDe7RbpZguuND3oDYFo swYGNt1MOyBEDcqPS7FiYKB0rWaWrC30rAxgQC4J5wOVVb+cQOl2aQXP68OwnsYr j3Cs0eEH2kgNaHGB780x1JiV96qeqFbT7uxqU0y8F6uApEzBqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFESz3/g60nImGOg9M7aCm1vLW/p2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvNmUxYmZkZDQtNjkxMC0z ODNhLWEzNzgtYmY4NzJlZmRlYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgiuise+/8PHGdUq+iU2jd4g8qJ4XFaOoXUvzbStlewzBfAasXjdym EMH2sZBXIJgP8Gi+zaVWqpSPIK9JbhsKdOw+tY6t8gi9YHyY9zck0d69/LawQbFF wCy9zqGkoOOBozIkQSk8CfSnO3pfsyBeUITvRiGs05bKpqUn0OkMQzuR2cP/MQFe nYmtHHFDDJd8XAIf0dWdDivvxbTFrB1ylTfReJ3rY1FdJ6m9jjcrDtLZ3LTa0LKt rcaft8HQohlJWuUcAtOMVEuUcz3Y56BKMmDfBkQZg08WSr5TW7JofNq0vam499vt dwrWsiOF4IWRIxVv2OTLDSJJ3oLfu3o5 -----END CERTIFICATE-----Generated at Sun Sep 20 13:03:15 2026 by rpki-client