$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/80347e08-8069-34a2-a64f-043eb3928f25.roa File: 80347e08-8069-34a2-a64f-043eb3928f25.roa (raw, json) Hash identifier: krTnNaHF6Cx0yK6Pibbfv95DA+2uaiCRNoS6XAeRYRs= Subject key identifier: 23:12:C5:C9:DE:32:BD:05:85:5A:9E:8B:9F:BC:3D:95:29:CD:81:F4 Certificate issuer: /CN=786ab4fb-a46d-40d6-8281-3c79061676da Certificate serial: 010D0C9F4328584F3CE28B732BE9B48DF17B9DC0 Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/80347e08-8069-34a2-a64f-043eb3928f25.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 30263 IP address blocks: 2607:1000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:8b:73:2b:e9:b4:8d:f1:7b:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=9582a5c3-0516-4615-8c71-f3ac150d4d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:1e:55:fa:df:26:3a:b1:8d:a8:27:6b:42: 97:6b:a9:cc:02:76:f4:ca:37:a9:eb:3b:7f:a6:c9: 61:13:01:67:0a:82:46:bb:e9:82:af:cd:10:58:69: 3f:6e:9d:83:c1:ea:e8:ad:d7:38:5d:8a:05:e2:ce: 8b:7a:e9:26:7b:86:f7:76:89:ab:a3:50:67:13:1c: 36:b2:c7:31:a0:ee:9c:4d:75:aa:0f:c1:4d:ad:81: e2:79:b7:36:98:5e:48:5e:2f:7b:a2:8e:f8:80:ae: 2d:d2:49:c7:40:f8:3f:c0:98:f0:a8:82:d5:4f:ca: 1b:d0:06:ef:15:a8:fd:11:34:bd:c9:15:99:41:66: e6:c8:cd:6f:a9:fc:aa:09:a4:a0:04:b3:4c:f7:b0: 4b:4e:12:43:7b:e5:7a:36:fd:88:15:49:77:de:fb: e9:6e:1c:44:49:77:95:61:6d:53:22:67:ff:8f:85: c8:94:a7:32:39:cf:e2:6d:65:95:88:d7:05:cc:98: 23:46:22:e7:3e:f0:03:2a:84:49:c4:50:46:a9:ee: a4:cd:f3:c7:85:92:df:a1:af:4c:de:4d:9c:3d:45: 6e:6a:97:5d:1b:3d:6a:cb:7c:e6:e5:9d:b6:63:91: 44:12:5b:03:df:86:d4:21:a3:93:90:e9:8f:55:b0: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:12:C5:C9:DE:32:BD:05:85:5A:9E:8B:9F:BC:3D:95:29:CD:81:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/80347e08-8069-34a2-a64f-043eb3928f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl X509v3 Authority Key Identifier: keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer sbgp-ipAddrBlock: critical IPv6: 2607:1000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f5:39:64:de:c3:57:c4:7f:f3:88:93:62:f3:04:35:9f:e6: c2:ac:e2:ec:fc:a6:98:2c:15:75:57:10:ec:12:fd:01:23:12: 39:e6:4b:1c:68:24:df:71:68:14:b5:58:cc:31:8f:0d:8e:b3: 91:c6:69:59:9b:d9:f8:5b:92:11:a5:47:3a:19:a9:68:c2:99: be:e2:7c:7c:0b:0c:47:57:c2:f2:f0:3f:67:6e:b3:43:31:c9: 65:3f:9c:42:4e:ef:21:4d:f7:53:4a:0f:57:0e:be:60:d2:81: 82:4b:99:b5:8e:30:f6:6c:1f:0e:58:af:70:8c:c8:29:c6:e9: 01:f6:4c:3d:d3:34:ca:6a:fc:23:b5:ea:ae:64:ab:a5:27:b8: 50:11:f6:86:31:e7:a8:fe:d5:6c:11:c4:2f:6e:87:d5:4d:0f: 0f:6c:78:e6:18:ab:45:db:08:41:38:30:1b:30:69:75:ba:b7: cf:49:28:04:20:f5:8d:6c:26:7b:16:63:27:c6:48:22:16:fe: 6a:77:00:df:03:00:0c:33:b1:b4:2c:43:ad:55:41:89:ec:4e: 52:9e:76:1e:b2:b5:d2:aa:a8:44:01:04:d0:af:25:fe:02:ff: d9:d8:70:bb:db:d0:13:ce:7b:3f:00:91:0b:7c:8c:25:c6:2d: 34:cd:ed:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE884otzK+m0jfF7ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3 NmRhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OTU4MmE1YzMtMDUxNi00NjE1LThjNzEtZjNhYzE1MGQ0ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ0eVfrfJjqxjagna0KXa6nMAnb0yjep6zt/ pslhEwFnCoJGu+mCr80QWGk/bp2Dwerordc4XYoF4s6Leukme4b3domro1BnExw2 sscxoO6cTXWqD8FNrYHiebc2mF5IXi97oo74gK4t0knHQPg/wJjwqILVT8ob0Abv Faj9ETS9yRWZQWbmyM1vqfyqCaSgBLNM97BLThJDe+V6Nv2IFUl33vvpbhxESXeV YW1TImf/j4XIlKcyOc/ibWWViNcFzJgjRiLnPvADKoRJxFBGqe6kzfPHhZLfoa9M 3k2cPUVuapddGz1qy3zm5Z22Y5FEElsD34bUIaOTkOmPVbDRjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMSxcneMr0FhVqei5+8PZUpzYH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvODAzNDdlMDgtODA2OS0z NGEyLWE2NGYtMDQzZWIzOTI4ZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2 NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5 MDYxNjc2ZGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa9Tlk3sNXxH/ziJNi8wQ1n+bCrOLs/KaYLBV1VxDsEv0BIxI55ksc aCTfcWgUtVjMMY8NjrORxmlZm9n4W5IRpUc6Galowpm+4nx8CwxHV8Ly8D9nbrND McllP5xCTu8hTfdTSg9XDr5g0oGCS5m1jjD2bB8OWK9wjMgpxukB9kw90zTKavwj tequZKulJ7hQEfaGMeeo/tVsEcQvbofVTQ8PbHjmGKtF2whBODAbMGl1urfPSSgE IPWNbCZ7FmMnxkgiFv5qdwDfAwAMM7G0LEOtVUGJ7E5SnnYesrXSqqhEAQTQryX+ Av/Z2HC729ATzns/AJELfIwlxi00ze1h -----END CERTIFICATE-----Generated at Sun Oct 11 20:13:03 2026 by rpki-client