$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: 9b9cXDlDyyVbBV7ATn8kRkJAQgZly3v3uD+xLF8qn4M= Subject key identifier: 6D:F8:F0:2B:91:22:7E:0F:5D:33:CC:BD:37:6E:EB:26:B7:58:99:31 Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F4328584EFCACCB4414D301A6B2538120 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cb:44:14:d3:01:a6:b2:53:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=13abfeb7-baaa-42ed-b36b-19eab03e82f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:92:2d:20:96:1f:63:a9:f8:d4:f1:d1:0c: 0a:bc:9c:f3:f3:37:79:e9:1a:aa:40:ef:a7:90:78: f3:a9:a0:12:d0:66:16:04:52:92:ca:b3:f3:53:64: 0f:a3:27:07:7c:ab:79:74:9b:73:ad:01:8a:23:39: ad:bb:c0:71:0d:36:1f:a3:55:c2:ae:fd:b6:da:88: 69:a7:b7:35:78:bc:7c:05:ce:b2:bc:cd:36:86:28: d4:d7:35:f6:74:50:5c:84:10:fb:d3:60:30:d7:a5: ef:ab:01:fe:d0:e6:18:7a:52:e4:8b:8f:d0:1d:bf: da:3a:43:4b:07:93:e3:4f:5f:f3:b6:4d:d1:31:67: 15:b2:0e:e7:f6:a2:07:cf:9a:18:ac:69:3c:9e:7b: 4a:8e:63:d0:d7:58:5a:f8:e1:6b:95:e6:c6:28:65: f6:9a:b0:d5:c1:3c:33:8c:29:2e:56:f2:b8:ed:90: 17:88:12:88:5d:57:87:8a:c1:b7:f9:67:8d:f9:3f: 62:2f:9e:ec:45:77:76:cb:40:0c:88:5f:17:68:7f: 8a:f4:8c:8d:c2:24:c8:94:7b:a7:77:8e:8e:45:61: d8:68:c0:71:85:37:e6:5d:71:c1:70:ec:a3:e7:8f: 2d:9d:20:7c:1a:9b:92:01:cc:b1:4e:d9:48:88:23: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:F0:2B:91:22:7E:0F:5D:33:CC:BD:37:6E:EB:26:B7:58:99:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ef:aa:9a:2d:2a:0a:9a:60:fc:64:60:38:85:f8:a4:52:dc: 3b:37:19:1e:7b:8d:b3:9e:50:19:64:d8:2e:74:05:c4:07:41: b3:5d:43:8b:75:22:1e:7d:d8:78:8f:7c:4a:7f:ed:a8:98:50: e1:67:54:83:2d:b2:ce:d3:13:cc:ac:f0:49:08:fd:33:6e:22: 78:1e:bc:52:bc:68:45:a5:5d:29:89:a7:da:a3:a0:c0:9d:f3: 46:d2:74:52:da:26:85:c6:35:4a:f1:0f:ec:d9:11:cb:fd:0e: 28:c3:1d:6d:d8:47:96:06:45:3b:46:59:eb:3c:b0:fd:5a:b6: f7:a9:6a:49:13:9b:a9:74:1c:c1:7e:0e:af:ba:01:01:ca:17: 98:b5:c4:a5:1b:ab:b3:f5:45:f3:31:22:55:39:4a:08:ff:9b: 59:1b:76:7f:01:b9:f4:98:09:8e:a2:ec:61:9e:22:37:e4:59: 2f:ef:4a:a1:64:7d:05:f4:c9:f9:cf:9f:66:9f:f7:e1:6c:45: 31:c0:d3:5d:43:0c:1c:7f:82:4a:5c:06:7b:7e:f0:67:f4:42: 30:f2:f0:ca:c6:29:6d:12:63:33:05:23:f7:fd:4f:79:ee:e9: ae:36:6b:34:60:c8:1e:eb:ec:ea:15:b7:fe:d9:b3:08:d8:94: 22:db:32:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMtEFNMBprJTgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTNhYmZlYjctYmFhYS00MmVkLWIzNmItMTllYWIwM2U4MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti+SLSCWH2Op+NTx0QwKvJzz8zd56RqqQO+n kHjzqaAS0GYWBFKSyrPzU2QPoycHfKt5dJtzrQGKIzmtu8BxDTYfo1XCrv222ohp p7c1eLx8Bc6yvM02hijU1zX2dFBchBD702Aw16XvqwH+0OYYelLki4/QHb/aOkNL B5PjT1/ztk3RMWcVsg7n9qIHz5oYrGk8nntKjmPQ11ha+OFrlebGKGX2mrDVwTwz jCkuVvK47ZAXiBKIXVeHisG3+WeN+T9iL57sRXd2y0AMiF8XaH+K9IyNwiTIlHun d46ORWHYaMBxhTfmXXHBcOyj548tnSB8GpuSAcyxTtlIiCMNEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG348CuRIn4PXTPMvTdu6ya3WJkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA276qaLSoKmmD8ZGA4hfikUtw7Nxkee42znlAZZNgudAXEB0GzXUOL dSIefdh4j3xKf+2omFDhZ1SDLbLO0xPMrPBJCP0zbiJ4HrxSvGhFpV0piafao6DA nfNG0nRS2iaFxjVK8Q/s2RHL/Q4owx1t2EeWBkU7RlnrPLD9Wrb3qWpJE5updBzB fg6vugEByheYtcSlG6uz9UXzMSJVOUoI/5tZG3Z/Abn0mAmOouxhniI35Fkv70qh ZH0F9Mn5z59mn/fhbEUxwNNdQwwcf4JKXAZ7fvBn9EIw8vDKxiltEmMzBSP3/U95 7umuNms0YMge6+zqFbf+2bMI2JQi2zIe -----END CERTIFICATE-----Generated at Fri Sep 25 18:01:05 2026 by rpki-client