$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa File: 043db50e-d504-35e2-a949-f1fdfd29043a.roa (raw, json) Hash identifier: ky1jcCZOs9yx+N+tXR2WITmlIKKfzKTeZS0eJLKkb1I= Subject key identifier: 40:BE:FB:2C:CB:E5:2F:96:A4:81:76:9F:AF:FD:76:B9:D6:5A:2B:D2 Certificate issuer: /CN=7db346f0-17b1-4b0d-942b-291f70e18910 Certificate serial: 010D0C9F4328584F3FAD3221D6125E1F0BA36F00 Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 40317 IP address blocks: 2605:5e00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:32:21:d6:12:5e:1f:0b:a3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=17d3740a-64d9-4df4-8444-a7dfe26a213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:62:9a:87:fe:31:5e:77:bb:ae:77:b1:6a: 72:cb:49:97:27:44:c3:31:3f:5c:fd:92:25:4a:cc: 73:44:7f:d2:cf:11:cb:d2:ce:2c:cc:77:7b:66:be: 1f:5f:88:e8:60:6a:bf:0f:8f:e6:ec:85:88:cd:ca: d7:37:48:98:f5:3c:a9:3e:96:e3:f0:c8:0b:e5:40: b1:35:10:4c:cb:2f:38:c5:17:f2:17:df:27:b1:2d: 0f:ad:21:6e:a7:5b:fc:48:e5:2c:c0:75:f5:b4:cc: 30:49:e1:4d:b1:ae:a3:3e:de:77:97:38:46:5d:62: 89:49:6c:92:fe:b9:6b:e6:42:75:b9:73:aa:0c:14: e8:3c:78:8a:d0:e4:97:48:bd:22:20:9c:e7:31:32: b1:c5:04:be:ae:f3:d7:e5:f4:e6:cb:44:4e:0e:79: 6c:f7:d2:fd:dc:36:1c:49:43:a9:31:51:6a:20:4e: 6a:f4:39:74:03:da:37:f8:a2:77:1e:91:cb:f0:60: 8a:0b:10:69:3c:b5:28:24:68:7e:ac:30:95:cb:c9: 89:f5:41:5a:db:cc:e2:b0:36:58:71:f4:54:4d:ae: 7f:cf:f9:c4:fc:e3:2c:41:47:f4:45:f0:49:e6:92: 9e:3d:40:9b:a8:e9:2f:1d:31:46:f5:e2:52:58:2d: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:FB:2C:CB:E5:2F:96:A4:81:76:9F:AF:FD:76:B9:D6:5A:2B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl X509v3 Authority Key Identifier: keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer sbgp-ipAddrBlock: critical IPv6: 2605:5e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2c:08:e0:e1:ee:84:1d:5b:fc:4f:35:a7:fd:7c:ce:8c:e5: dc:c3:67:2f:96:42:25:61:62:8d:de:ad:97:2d:95:75:70:c3: be:47:35:96:17:a2:5e:7c:d2:12:dd:01:38:31:27:3d:c9:75: 97:06:01:84:b3:c7:e8:9b:45:ed:45:4c:95:a8:81:42:78:2e: e5:51:ea:2d:d7:60:a4:f1:c7:ff:0c:1c:86:6a:2a:ad:89:0e: c3:19:38:9a:a5:14:67:a6:0e:39:53:c3:08:dc:34:74:aa:cb: 43:bf:32:84:ff:ef:ac:6e:9c:c4:9e:94:8e:3e:3a:7c:7e:35: c6:f1:f2:29:05:c3:b3:19:b7:cd:e3:7b:67:03:ba:72:5f:22: 81:ae:fd:ab:f3:52:30:cf:12:50:89:f8:0b:ef:58:e8:21:8d: 0b:f2:87:93:d5:91:51:40:32:22:46:50:39:3b:91:b9:2f:16: e7:15:19:6f:bb:1b:c8:01:b6:ca:dd:ce:c4:ca:19:e7:cc:86: c8:34:d8:19:7e:ec:dc:f9:6a:f4:64:5e:42:47:a8:7b:9c:52: 5f:ac:67:d9:e7:6d:3c:ac:8c:ec:9b:1a:a9:7d:13:fb:4b:a6: 55:6a:14:66:e3:e0:34:85:c0:f0:62:ad:4c:28:89:73:5b:f7: 9e:b9:b0:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8/rTIh1hJeHwujbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RiMzQ2ZjAtMTdiMS00YjBkLTk0MmItMjkxZjcwZTE4 OTEwMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MTdkMzc0MGEtNjRkOS00ZGY0LTg0NDQtYTdkZmUyNmEyMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9limof+MV53u653sWpyy0mXJ0TDMT9c/ZIl SsxzRH/SzxHL0s4szHd7Zr4fX4joYGq/D4/m7IWIzcrXN0iY9TypPpbj8MgL5UCx NRBMyy84xRfyF98nsS0PrSFup1v8SOUswHX1tMwwSeFNsa6jPt53lzhGXWKJSWyS /rlr5kJ1uXOqDBToPHiK0OSXSL0iIJznMTKxxQS+rvPX5fTmy0RODnls99L93DYc SUOpMVFqIE5q9Dl0A9o3+KJ3HpHL8GCKCxBpPLUoJGh+rDCVy8mJ9UFa28zisDZY cfRUTa5/z/nE/OMsQUf0RfBJ5pKePUCbqOkvHTFG9eJSWC2ikwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEC++yzL5S+WpIF2n6/9drnWWivSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIz NDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFmNzBlMTg5MTAvMDQzZGI1MGUtZDUwNC0z NWUyLWE5NDktZjFmZGZkMjkwNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2RiMzQ2ZjAtMTdiMS00YjBkLTk0 MmItMjkxZjcwZTE4OTEwLzdkYjM0NmYwLTE3YjEtNGIwZC05NDJiLTI5MWY3MGUx ODkxMC5jcmwwHwYDVR0jBBgwFoAUTbPFBWyI3eroJnR1Sup1ONV6S1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIzNDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFm NzBlMTg5MTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/LAjg4e6EHVv8TzWn/XzOjOXcw2cvlkIlYWKN3q2XLZV1cMO+RzWW F6JefNIS3QE4MSc9yXWXBgGEs8fom0XtRUyVqIFCeC7lUeot12Ck8cf/DByGaiqt iQ7DGTiapRRnpg45U8MI3DR0qstDvzKE/++sbpzEnpSOPjp8fjXG8fIpBcOzGbfN 43tnA7pyXyKBrv2r81IwzxJQifgL71joIY0L8oeT1ZFRQDIiRlA5O5G5LxbnFRlv uxvIAbbK3c7EyhnnzIbINNgZfuzc+Wr0ZF5CR6h7nFJfrGfZ5208rIzsmxqpfRP7 S6ZVahRm4+A0hcDwYq1MKIlzW/eeubBp -----END CERTIFICATE-----Generated at Sat Oct 10 17:58:30 2026 by rpki-client