$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/daf701f3-04b3-3ca1-9491-62a259ce0180.roa File: daf701f3-04b3-3ca1-9491-62a259ce0180.roa (raw, json) Hash identifier: 8GlIJGHSfm+vx6x6MhV5K8tjXwpkNrZZQaDVASZ8TlI= Subject key identifier: 44:A8:A8:3F:FF:43:C8:2C:00:1D:8A:A8:5B:91:73:F9:AB:4E:F5:76 Certificate issuer: /CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1 Certificate serial: 010D0C9F4328584F268D0F373752210868123CE0 Authority key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/daf701f3-04b3-3ca1-9491-62a259ce0180.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 2606:c250:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0f:37:37:52:21:08:68:12:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=69cd44d9-2aea-46f7-9708-99fc8c3f3f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:0f:e8:48:14:6d:1c:48:04:d7:57:d2:b7: 11:89:3a:17:ad:80:ef:3b:55:ee:1d:17:23:48:f5: 72:38:6a:96:7f:d7:39:49:bd:f0:88:9b:9c:90:77: 57:28:54:7e:da:49:4f:73:1f:85:db:f1:03:88:19: 62:76:61:04:90:22:c8:b6:ac:62:1c:3d:71:94:ac: b3:4f:ab:73:62:3b:3e:4b:43:8d:62:09:a3:58:b1: 33:10:ca:22:ca:40:9f:6e:36:e2:d2:75:38:4f:36: a3:20:37:66:8f:2f:41:90:49:3e:5c:ef:cf:98:fc: 4f:f1:83:2a:bb:86:26:f2:43:60:88:e4:02:4d:2b: 97:c7:03:b4:28:4e:c1:f5:76:04:cd:9b:77:98:6b: 58:66:f5:83:94:30:51:40:34:a0:f4:b7:ba:99:93: 3a:b2:c6:cc:a5:24:0d:e3:7f:d1:b5:d9:21:29:81: 53:70:cb:a1:03:f9:68:0c:fb:ea:43:e4:cd:73:a5: 50:54:55:7a:30:8c:a5:8c:5f:b7:b8:63:04:28:5e: b4:6b:b1:3b:29:bb:dc:ca:08:fb:89:0c:af:53:f0: 3d:c2:3b:1f:46:bb:3e:45:c6:0e:5a:21:3b:45:ef: 8c:f7:e7:f5:15:54:07:05:fd:e1:64:4c:ee:6a:50: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:A8:3F:FF:43:C8:2C:00:1D:8A:A8:5B:91:73:F9:AB:4E:F5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/daf701f3-04b3-3ca1-9491-62a259ce0180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl X509v3 Authority Key Identifier: keyid:1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer sbgp-ipAddrBlock: critical IPv6: 2606:c250:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bc:d7:9e:f5:95:5e:29:26:f6:54:f8:85:f7:79:f7:31:08: dc:bf:d7:18:5e:78:cd:cc:1f:e8:50:bd:d4:f4:d9:dd:eb:a5: 44:18:a8:07:36:51:f9:b4:a7:9b:62:b5:63:ab:e7:fe:20:ac: 7a:29:3c:e1:c0:4f:b8:cc:90:70:f3:02:ba:dc:55:57:d7:6a: 38:2a:07:44:a0:95:12:cb:d1:41:40:c1:c3:62:d5:08:11:ea: 0d:df:6f:56:d9:52:61:b5:08:42:a9:75:e3:80:9a:64:91:6f: 44:ff:da:cb:cc:f3:57:3c:a7:f1:cf:c5:09:5d:74:f0:08:7f: 88:d5:c4:dd:93:dd:8e:c9:e5:c5:be:6f:f5:12:9b:de:0f:b1: ca:53:9b:cb:8e:19:11:55:9a:a3:10:71:08:10:65:29:5a:7b: a4:cc:e5:dc:78:69:b1:d9:b6:38:e9:04:d3:0c:77:bb:ad:54: 4f:14:04:f4:73:80:42:62:37:f5:58:c6:dd:ab:2b:61:d3:a1: 56:ab:43:23:ec:82:ba:bd:ee:f3:01:43:0b:a0:c6:c6:e5:da: 1f:78:4d:ac:97:9e:1d:2c:82:ec:af:c1:04:9a:90:2d:f9:a1: de:2e:38:21:0f:2d:31:77:f8:76:8c:43:16:fe:ec:b3:63:6f: bb:f1:89:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8mjQ83N1IhCGgSPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2YmMzYjItZTYyMS00MjcyLWI2MDQtMTBlZDVkYmI0 ZWMxMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk NjljZDQ0ZDktMmFlYS00NmY3LTk3MDgtOTlmYzhjM2YzZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s4P6EgUbRxIBNdX0rcRiToXrYDvO1XuHRcj SPVyOGqWf9c5Sb3wiJuckHdXKFR+2klPcx+F2/EDiBlidmEEkCLItqxiHD1xlKyz T6tzYjs+S0ONYgmjWLEzEMoiykCfbjbi0nU4TzajIDdmjy9BkEk+XO/PmPxP8YMq u4Ym8kNgiOQCTSuXxwO0KE7B9XYEzZt3mGtYZvWDlDBRQDSg9Le6mZM6ssbMpSQN 43/RtdkhKYFTcMuhA/loDPvqQ+TNc6VQVFV6MIyljF+3uGMEKF60a7E7Kbvcygj7 iQyvU/A9wjsfRrs+RcYOWiE7Re+M9+f1FVQHBf3hZEzualC1IwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFESoqD//Q8gsAB2KqFuRc/mrTvV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZjZi YzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRiYjRlYzEvZGFmNzAxZjMtMDRiMy0z Y2ExLTk0OTEtNjJhMjU5Y2UwMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGY2YmMzYjItZTYyMS00MjcyLWI2 MDQtMTBlZDVkYmI0ZWMxL2RmNmJjM2IyLWU2MjEtNDI3Mi1iNjA0LTEwZWQ1ZGJi NGVjMS5jcmwwHwYDVR0jBBgwFoAUHbzuz2fzaXVgghaLRvzxi44vCacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVk NWRiYjRlYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbCUAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfLzXnvWVXikm9lT4hfd59zEI3L/XGF54zcwf6FC91PTZ3eulRBio BzZR+bSnm2K1Y6vn/iCseik84cBPuMyQcPMCutxVV9dqOCoHRKCVEsvRQUDBw2LV CBHqDd9vVtlSYbUIQql144CaZJFvRP/ay8zzVzyn8c/FCV108Ah/iNXE3ZPdjsnl xb5v9RKb3g+xylOby44ZEVWaoxBxCBBlKVp7pMzl3Hhpsdm2OOkE0wx3u61UTxQE 9HOAQmI39VjG3asrYdOhVqtDI+yCur3u8wFDC6DGxuXaH3hNrJeeHSyC7K/BBJqQ Lfmh3i44IQ8tMXf4doxDFv7ss2Nvu/GJ+Q== -----END CERTIFICATE-----Generated at Tue Sep 22 16:33:48 2026 by rpki-client