$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/06a5f77a-7a2d-388a-a041-776666f39631.roa File: 06a5f77a-7a2d-388a-a041-776666f39631.roa (raw, json) Hash identifier: UTSc5WQ9g9NMp1YogA850Qb2r1OuJe1RBF+NGqBGyUI= Subject key identifier: FB:9B:63:22:02:24:8D:C3:DA:BC:2A:62:CB:19:94:B0:4E:A2:00:5B Certificate issuer: /CN=a01694e6-82f3-4f1f-9e78-52d23a92940b Certificate serial: 010D0C9F4328584EF717B92FFAFD77BE87A74200 Authority key identifier: EA:3C:CA:00:A4:99:68:E6:5A:B3:CA:BA:B9:DE:9F:16:8E:6B:CF:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/06a5f77a-7a2d-388a-a041-776666f39631.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 11257 IP address blocks: 2620:11e:d000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/a01694e6-82f3-4f1f-9e78-52d23a92940b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/a01694e6-82f3-4f1f-9e78-52d23a92940b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b9:2f:fa:fd:77:be:87:a7:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01694e6-82f3-4f1f-9e78-52d23a92940b Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=32847694-5d88-4158-8671-47d572fe12d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:0b:88:af:2c:ea:e9:13:c8:a0:4c:bf:05: 04:4b:ea:ad:40:bb:12:ef:72:84:e4:5c:2d:56:d5: d6:c8:7a:5b:04:63:77:be:f1:d4:12:a3:5a:9b:05: e6:52:a5:91:1f:cc:6d:de:3a:9c:3c:f6:e2:79:d5: 54:96:04:16:2c:3e:8d:80:7e:1f:92:d2:b2:8c:fb: 61:94:b1:21:00:71:03:ea:a6:3b:c3:3a:b7:39:aa: e0:50:0c:34:93:67:c2:75:46:1d:ac:a5:07:62:a1: b1:cf:ac:f8:9a:0f:67:1f:a8:ed:fb:c6:d4:ae:10: 45:26:0e:4c:9d:e0:08:1d:b7:51:b9:00:53:0b:1a: a0:c1:6b:67:cc:7a:39:14:e1:92:33:04:a6:a6:4e: bc:be:97:40:3f:99:c5:91:06:60:7f:12:6f:b7:d6: 91:15:cd:8e:8e:a0:af:84:5d:c4:de:92:7d:c3:d3: 78:57:0d:df:94:3b:94:f5:f1:a4:af:81:f1:0a:c8: bd:65:04:64:d6:26:cc:26:84:e0:56:76:1e:93:37: 47:22:b4:99:e5:c2:9f:c1:34:1b:5d:dc:b9:c9:ac: dd:1e:75:de:7f:44:b0:71:e1:c3:3d:cf:ed:31:94: f9:b7:6c:3f:74:11:d8:b0:bc:25:74:df:3f:d8:c1: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:63:22:02:24:8D:C3:DA:BC:2A:62:CB:19:94:B0:4E:A2:00:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/06a5f77a-7a2d-388a-a041-776666f39631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/a01694e6-82f3-4f1f-9e78-52d23a92940b.crl X509v3 Authority Key Identifier: keyid:EA:3C:CA:00:A4:99:68:E6:5A:B3:CA:BA:B9:DE:9F:16:8E:6B:CF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b.cer sbgp-ipAddrBlock: critical IPv6: 2620:11e:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:11:3f:b4:40:9a:25:fb:6b:2a:88:54:a8:39:ce:f3:de:35: cb:e4:5e:d8:f2:7f:8a:35:5a:85:b3:83:77:67:73:9b:d7:57: f0:b6:fa:25:9b:f3:c4:5d:38:8f:1a:4a:3b:c4:1a:ee:c0:4d: f8:d1:11:21:8d:da:6a:12:1c:af:6d:e1:f2:d5:e9:e2:91:63: 7e:b8:4c:43:6c:6b:42:a5:d0:77:63:18:50:a6:4f:d7:51:92: eb:9b:28:45:de:96:a0:49:1d:d3:dd:25:ef:c8:0c:d4:90:0b: b8:b7:10:e9:ec:82:eb:7f:fd:d3:75:3e:b7:75:db:6d:9e:4e: 27:8e:c2:d2:43:d0:85:62:a6:93:fa:bb:24:94:68:6b:25:a6: ab:30:28:dd:e5:30:9e:54:56:fa:6a:ad:42:70:74:b9:6c:16: d7:23:2c:0a:63:79:48:58:d5:be:ec:51:36:48:50:bc:07:ec: 4a:a8:52:a2:73:7b:56:5a:95:aa:2b:94:ae:08:ba:84:1f:5e: 06:2b:14:cc:72:07:3a:fb:b7:24:73:28:c5:6e:8c:8d:12:b4: 91:9c:6a:44:a2:cd:10:4d:c6:a6:2c:70:98:1f:9d:64:3f:39: 28:30:93:91:de:64:02:67:85:2b:3b:4b:09:8f:4d:1e:f0:6a: 9c:5f:60:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7kv+v13voenQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxNjk0ZTYtODJmMy00ZjFmLTllNzgtNTJkMjNhOTI5 NDBiMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MzI4NDc2OTQtNWQ4OC00MTU4LTg2NzEtNDdkNTcyZmUxMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDMLiK8s6ukTyKBMvwUES+qtQLsS73KE5Fwt VtXWyHpbBGN3vvHUEqNamwXmUqWRH8xt3jqcPPbiedVUlgQWLD6NgH4fktKyjPth lLEhAHED6qY7wzq3OargUAw0k2fCdUYdrKUHYqGxz6z4mg9nH6jt+8bUrhBFJg5M neAIHbdRuQBTCxqgwWtnzHo5FOGSMwSmpk68vpdAP5nFkQZgfxJvt9aRFc2OjqCv hF3E3pJ9w9N4Vw3flDuU9fGkr4HxCsi9ZQRk1ibMJoTgVnYekzdHIrSZ5cKfwTQb Xdy5yazdHnXef0SwceHDPc/tMZT5t2w/dBHYsLwldN8/2MG40wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPubYyICJI3D2rwqYssZlLBOogBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMDE2 OTRlNi04MmYzLTRmMWYtOWU3OC01MmQyM2E5Mjk0MGIvMDZhNWY3N2EtN2EyZC0z ODhhLWEwNDEtNzc2NjY2ZjM5NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTAxNjk0ZTYtODJmMy00ZjFmLTll NzgtNTJkMjNhOTI5NDBiL2EwMTY5NGU2LTgyZjMtNGYxZi05ZTc4LTUyZDIzYTky OTQwYi5jcmwwHwYDVR0jBBgwFoAU6jzKAKSZaOZas8q6ud6fFo5rzy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMDE2OTRlNi04MmYzLTRmMWYtOWU3OC01MmQy M2E5Mjk0MGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABHtAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgRP7RAmiX7ayqIVKg5zvPeNcvkXtjyf4o1WoWzg3dnc5vXV/C2 +iWb88RdOI8aSjvEGu7ATfjRESGN2moSHK9t4fLV6eKRY364TENsa0Kl0HdjGFCm T9dRkuubKEXelqBJHdPdJe/IDNSQC7i3EOnsgut//dN1Prd1222eTieOwtJD0IVi ppP6uySUaGslpqswKN3lMJ5UVvpqrUJwdLlsFtcjLApjeUhY1b7sUTZIULwH7Eqo UqJze1ZalaorlK4IuoQfXgYrFMxyBzr7tyRzKMVujI0StJGcakSizRBNxqYscJgf nWQ/OSgwk5HeZAJnhSs7SwmPTR7wapxfYAU= -----END CERTIFICATE-----Generated at Sun Sep 27 11:41:37 2026 by rpki-client