$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/1a6df82d-9c02-3cda-a36d-6f5d69fb17b1.roa File: 1a6df82d-9c02-3cda-a36d-6f5d69fb17b1.roa (raw, json) Hash identifier: ns4dV8uTen7r+gWmXvZK1lvdxFPErdDu+dNRs6Zl2Hs= Subject key identifier: EB:C8:4C:2C:5F:11:04:8F:6C:19:68:6F:F0:38:73:5C:DF:8F:37:ED Certificate issuer: /CN=8dd4f161-715c-4c6f-9df2-5d5f535bf944 Certificate serial: 010D0C9F4328584EEBECA358A56D6C98B0A61080 Authority key identifier: 85:D1:E9:26:31:5D:D5:1F:F9:43:33:98:AA:65:8D:E1:77:6A:67:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/1a6df82d-9c02-3cda-a36d-6f5d69fb17b1.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2620:119:e0f4::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/8dd4f161-715c-4c6f-9df2-5d5f535bf944.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/8dd4f161-715c-4c6f-9df2-5d5f535bf944.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:a3:58:a5:6d:6c:98:b0:a6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd4f161-715c-4c6f-9df2-5d5f535bf944 Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=a157440c-f457-4c60-b79c-33ab676cb713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:35:27:3b:60:2d:52:37:e9:f8:25:86:b8: b1:c5:73:db:37:89:30:5d:f8:36:0b:91:fc:1e:90: 81:d5:ac:31:5f:10:bb:83:03:4c:4c:b7:14:49:4e: 98:d4:9c:1b:be:e9:e9:ec:78:7b:45:2e:69:26:76: 95:8a:49:d4:07:b1:5a:bb:39:f5:6a:ce:b0:aa:d9: 9a:fb:ff:58:c8:ba:a5:13:74:7d:72:f8:d8:ad:c9: 61:81:ef:bf:56:bc:c0:c0:14:3b:8f:08:ff:df:3b: 8e:14:89:70:9e:ec:ef:9d:0a:bf:ad:f5:04:ac:ae: 89:9b:f4:85:be:5c:f2:22:8d:6b:ea:a7:b5:2f:73: d0:ad:97:66:39:01:c9:7f:3e:17:99:14:05:e2:2c: 41:d6:eb:81:60:51:c6:db:ea:d3:8c:d7:79:86:ab: 7b:02:36:3c:46:a4:e1:19:fa:ed:44:62:c5:d5:4d: f3:1d:ae:7b:ed:42:b4:57:d5:d2:70:f4:bb:38:1d: 14:0b:f5:56:1d:19:fb:ed:78:df:77:ff:20:89:d1: 97:19:3c:ab:71:4a:8f:6a:53:bb:8b:31:f6:a5:e6: 7b:54:01:39:8a:1c:3b:2d:36:52:44:75:f9:89:57: f3:35:75:6f:1a:eb:3d:a6:15:6e:51:07:a2:99:0c: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:4C:2C:5F:11:04:8F:6C:19:68:6F:F0:38:73:5C:DF:8F:37:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/1a6df82d-9c02-3cda-a36d-6f5d69fb17b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/8dd4f161-715c-4c6f-9df2-5d5f535bf944.crl X509v3 Authority Key Identifier: keyid:85:D1:E9:26:31:5D:D5:1F:F9:43:33:98:AA:65:8D:E1:77:6A:67:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:e0f4::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d6:47:c4:57:5b:2e:fd:39:58:8e:53:34:bf:2f:cd:00:49: 36:7b:d7:b6:ce:12:99:bb:e8:82:24:33:9c:ee:10:27:5d:49: 89:c1:77:27:0d:f0:0a:ba:16:0f:33:85:dc:85:70:f2:94:6d: 02:b3:a8:ec:aa:7a:d7:18:90:ea:b3:2e:9a:61:92:c5:6d:d1: 63:56:ac:5f:45:a7:97:d3:65:b7:7b:57:40:06:07:12:75:be: 79:8e:92:0d:e7:44:d8:b6:83:0c:02:df:0f:5e:bb:1f:07:a8: 79:12:88:ca:53:67:3a:2d:1c:51:6b:77:d6:0f:ac:27:9d:da: 85:a8:d2:7f:df:a2:30:fb:a1:78:f3:34:d8:64:e1:3d:0f:a6: 6f:73:cf:03:0b:29:b1:b4:5a:f0:37:8d:60:8a:ba:1c:9c:e4: 66:23:41:c3:a6:32:a0:c1:03:77:b3:a4:b4:b8:af:73:45:05: 2c:91:4a:01:1f:1b:21:65:80:d4:b5:e1:f4:1e:bc:ce:9d:b7: 03:c4:4e:ab:76:20:fa:67:c1:1f:e2:5a:1b:1b:11:2c:9b:1c: 7a:63:b6:01:71:ee:c5:08:ca:fb:79:01:e0:6f:38:f3:61:fe: ba:dc:90:99:b7:9a:b9:36:67:28:37:08:b0:20:1b:80:3d:88: fd:68:b8:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7r7KNYpW1smLCmEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRkNGYxNjEtNzE1Yy00YzZmLTlkZjItNWQ1ZjUzNWJm OTQ0MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTE1NzQ0MGMtZjQ1Ny00YzYwLWI3OWMtMzNhYjY3NmNiNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFc1JztgLVI36fglhrixxXPbN4kwXfg2C5H8 HpCB1awxXxC7gwNMTLcUSU6Y1Jwbvunp7Hh7RS5pJnaViknUB7Fauzn1as6wqtma +/9YyLqlE3R9cvjYrclhge+/VrzAwBQ7jwj/3zuOFIlwnuzvnQq/rfUErK6Jm/SF vlzyIo1r6qe1L3PQrZdmOQHJfz4XmRQF4ixB1uuBYFHG2+rTjNd5hqt7AjY8RqTh GfrtRGLF1U3zHa577UK0V9XScPS7OB0UC/VWHRn77Xjfd/8gidGXGTyrcUqPalO7 izH2peZ7VAE5ihw7LTZSRHX5iVfzNXVvGus9phVuUQeimQxleQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOvITCxfEQSPbBlob/A4c1zfjzftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZGQ0 ZjE2MS03MTVjLTRjNmYtOWRmMi01ZDVmNTM1YmY5NDQvMWE2ZGY4MmQtOWMwMi0z Y2RhLWEzNmQtNmY1ZDY5ZmIxN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGRkNGYxNjEtNzE1Yy00YzZmLTlk ZjItNWQ1ZjUzNWJmOTQ0LzhkZDRmMTYxLTcxNWMtNGM2Zi05ZGYyLTVkNWY1MzVi Zjk0NC5jcmwwHwYDVR0jBBgwFoAUhdHpJjFd1R/5QzOYqmWN4XdqZ80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZGQ0ZjE2MS03MTVjLTRjNmYtOWRmMi01ZDVm NTM1YmY5NDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABGeD0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjWR8RXWy79OViOUzS/L80ASTZ717bOEpm76IIkM5zuECddSYnB dycN8Aq6Fg8zhdyFcPKUbQKzqOyqetcYkOqzLpphksVt0WNWrF9Fp5fTZbd7V0AG BxJ1vnmOkg3nRNi2gwwC3w9eux8HqHkSiMpTZzotHFFrd9YPrCed2oWo0n/fojD7 oXjzNNhk4T0Ppm9zzwMLKbG0WvA3jWCKuhyc5GYjQcOmMqDBA3ezpLS4r3NFBSyR SgEfGyFlgNS14fQevM6dtwPETqt2IPpnwR/iWhsbESybHHpjtgFx7sUIyvt5AeBv OPNh/rrckJm3mrk2Zyg3CLAgG4A9iP1ouEA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:42:57 2026 by rpki-client