$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa File: 0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json) Hash identifier: GBLiY8LPZ7zP+TXXCDx2SEt7mesUki3GzUXdtuG3F9M= Subject key identifier: 31:44:12:C8:6D:3F:3B:C3:CD:B3:9B:49:58:29:F4:FC:80:86:5C:F2 Certificate issuer: /CN=285991ba-0db5-48fe-92ff-d202c357d86d Certificate serial: 010D0C9F4328584F2ABD1CCF9BFA9C4C11D2A000 Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 31998 IP address blocks: 2605:ed40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1c:cf:9b:fa:9c:4c:11:d2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=ad31ca3e-2a1c-4de4-9b0c-b8a630320637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:f0:b5:43:a5:4d:5e:da:3a:2b:60:30:04: 5c:68:1a:c5:e9:8c:f7:26:35:4d:d5:af:d5:6e:ce: c3:54:8f:34:5f:cc:61:0c:c5:5a:dd:90:e5:19:d8: 33:fb:66:ee:d5:55:31:30:a7:ac:b2:d0:d6:86:3a: c2:ca:fb:bd:7b:09:7e:51:f1:b9:ac:23:1f:cd:76: 2e:6f:5c:d9:b2:03:56:ed:a5:dd:a0:2e:f8:e8:99: d7:bc:10:a6:93:d1:e3:86:f3:70:1c:61:68:57:f8: 10:e5:58:02:3c:e6:f1:35:15:3d:94:b4:0e:c2:98: 25:f1:57:4d:9b:c2:b2:28:e1:49:bc:71:57:f1:26: 0b:3c:f5:55:0b:9d:26:8c:e9:1f:c1:46:93:f3:77: f9:0e:b7:45:4b:62:0b:df:59:fa:2a:3e:1c:df:02: ee:3f:97:6f:ba:ae:50:fc:4a:0a:08:cb:1d:bc:6b: 82:6e:10:d4:e9:ff:32:e6:c7:3a:86:3e:d6:e0:09: 3f:c7:e7:a5:f5:fe:6b:cf:0a:94:4e:4c:47:5b:4e: a2:14:4e:47:08:92:c7:f8:7f:4d:20:de:8b:20:01: 5e:1e:f2:4c:2f:c4:b4:f9:fe:52:11:9a:7f:93:18: e5:fa:bb:3e:85:10:0b:3c:0d:d8:f6:cb:b1:46:4b: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:12:C8:6D:3F:3B:C3:CD:B3:9B:49:58:29:F4:FC:80:86:5C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl X509v3 Authority Key Identifier: keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer sbgp-ipAddrBlock: critical IPv6: 2605:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d5:54:0c:11:6d:10:26:c0:07:37:d7:5b:45:43:74:b3:43: db:dd:a6:92:05:fe:a2:35:dc:cc:ad:62:75:21:2c:71:a0:fb: c5:c5:44:45:4b:dd:38:de:f2:46:84:f6:89:09:cf:e1:b5:14: 72:6d:3f:a2:ca:a9:17:ad:23:d7:fc:05:51:2d:01:90:e5:2c: a2:a3:a1:bf:4b:2a:64:ad:9d:66:8f:bf:30:f0:4d:15:b2:5b: c1:41:ec:be:38:c1:1b:cf:8f:f1:e8:02:8d:23:13:3b:c7:42: 48:ed:46:16:26:5c:1f:ad:81:58:f6:e8:dd:09:47:6a:2e:70: 9c:c6:2d:30:64:23:bb:03:9b:8e:ac:f0:33:b2:04:52:bf:cd: 76:42:8c:22:32:bf:47:ca:68:c5:fa:82:4d:f0:e3:ca:d6:5d: d0:7a:85:a9:67:38:5b:bd:b2:eb:b5:4b:1f:33:de:7e:76:a1: 2a:26:f8:2f:83:a1:81:dd:5e:66:12:c5:c5:82:9f:55:a5:21: 58:a4:0e:de:15:90:1a:e6:3e:76:8e:b8:77:4b:a5:bc:4f:7c: a2:a5:0d:57:b1:9a:cf:e2:6f:b6:a8:5a:44:29:26:2b:5f:05: fd:d3:82:8e:8e:3a:e1:bf:6b:05:ab:7e:5d:3a:b4:16:11:d5: 91:f7:67:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvRzPm/qcTBHSoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTkxYmEtMGRiNS00OGZlLTkyZmYtZDIwMmMzNTdk ODZkMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YWQzMWNhM2UtMmExYy00ZGU0LTliMGMtYjhhNjMwMzIwNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbnwtUOlTV7aOitgMARcaBrF6Yz3JjVN1a/V bs7DVI80X8xhDMVa3ZDlGdgz+2bu1VUxMKesstDWhjrCyvu9ewl+UfG5rCMfzXYu b1zZsgNW7aXdoC746JnXvBCmk9HjhvNwHGFoV/gQ5VgCPObxNRU9lLQOwpgl8VdN m8KyKOFJvHFX8SYLPPVVC50mjOkfwUaT83f5DrdFS2IL31n6Kj4c3wLuP5dvuq5Q /EoKCMsdvGuCbhDU6f8y5sc6hj7W4Ak/x+el9f5rzwqUTkxHW06iFE5HCJLH+H9N IN6LIAFeHvJML8S0+f5SEZp/kxjl+rs+hRALPA3Y9suxRks92wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDFEEshtPzvDzbObSVgp9PyAhlzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yODU5 OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAyYzM1N2Q4NmQvMGZmMmY2MzItOTU5Ny0z ZTgyLWE3YTktYzNkZDRlNWMwYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjg1OTkxYmEtMGRiNS00OGZlLTky ZmYtZDIwMmMzNTdkODZkLzI4NTk5MWJhLTBkYjUtNDhmZS05MmZmLWQyMDJjMzU3 ZDg2ZC5jcmwwHwYDVR0jBBgwFoAUhmmOSco8aoME1RojxGFir6wBQq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yODU5OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAy YzM1N2Q4NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXtQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBB1VQMEW0QJsAHN9dbRUN0s0Pb3aaSBf6iNdzMrWJ1ISxxoPvFxURF S9043vJGhPaJCc/htRRybT+iyqkXrSPX/AVRLQGQ5Syio6G/SypkrZ1mj78w8E0V slvBQey+OMEbz4/x6AKNIxM7x0JI7UYWJlwfrYFY9ujdCUdqLnCcxi0wZCO7A5uO rPAzsgRSv812QowiMr9HymjF+oJN8OPK1l3QeoWpZzhbvbLrtUsfM95+dqEqJvgv g6GB3V5mEsXFgp9VpSFYpA7eFZAa5j52jrh3S6W8T3yipQ1XsZrP4m+2qFpEKSYr XwX904KOjjrhv2sFq35dOrQWEdWR92fA -----END CERTIFICATE-----Generated at Mon Sep 21 16:22:50 2026 by rpki-client