$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa File: 7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json) Hash identifier: 5ah4kRLBMY15Bs4PBnmL2by3UVQpFhAQAlnmKkIvTVU= Subject key identifier: 40:CE:53:49:44:A0:01:73:77:1D:67:AB:4D:FC:71:74:04:18:08:00 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584F3E47E01604C75C7BE3D21F00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 21949 IP address blocks: 2606:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e0:16:04:c7:5c:7b:e3:d2:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=cb5ac080-5337-4c1a-a800-ae0669e49a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:f9:66:98:c2:b5:aa:60:c9:49:03:d2:d7: 4d:7d:d3:90:30:6e:2f:87:eb:cf:47:6c:2f:20:21: 51:5a:b5:3b:2a:c3:92:c2:8e:dc:55:a9:49:03:0c: 34:90:73:33:1e:1a:31:d6:82:c7:a3:a8:1d:a3:68: 39:cd:e1:db:bc:12:f1:ae:fb:72:04:d6:71:e6:d8: d2:d8:51:06:00:7a:81:d1:fa:01:90:8e:42:60:c8: b6:c2:ba:0e:1d:d8:2c:08:a9:ee:e9:74:b3:61:14: 69:9e:a3:56:43:4d:bf:a2:b3:ef:9a:15:9c:b1:26: 4d:49:44:29:86:7a:35:d8:a4:b1:e8:73:24:bd:77: fe:f2:03:d8:f5:58:d9:c1:fa:b6:e9:95:f7:32:dc: d4:82:60:3e:a2:ca:90:4d:0b:31:54:a3:35:67:49: 5f:39:c7:bf:94:02:46:4b:7c:7c:fb:a6:ed:b4:cc: 36:78:14:59:d0:48:ca:06:ad:69:4c:4e:70:e8:ad: 12:1d:50:c4:69:2a:a3:85:04:52:fa:f9:9f:af:2e: 8c:39:39:0b:e0:47:2f:45:1d:da:8f:79:b5:9c:45: 0c:54:0f:63:99:71:47:d1:80:3e:88:75:31:7a:7c: f3:13:00:d4:b5:d5:9d:0a:78:f8:0c:37:23:2b:91: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CE:53:49:44:A0:01:73:77:1D:67:AB:4D:FC:71:74:04:18:08:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2606:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:2a:fa:b3:a2:8e:92:0b:d9:d3:55:c8:d6:55:74:02:26: 5c:9f:d2:c4:59:78:2d:a9:48:a7:31:4b:f5:37:e5:e0:96:a7: 43:bb:79:50:62:10:fe:93:c4:88:e9:b8:06:7c:75:0b:5e:88: 7f:e9:4a:86:39:b0:b3:e1:89:89:a7:74:53:8a:2a:3c:18:00: 36:35:aa:88:31:54:d5:23:68:61:4a:d8:95:a7:47:1d:65:47: 22:b4:a3:ce:3e:9f:78:c2:34:f5:4a:3a:e8:92:c5:85:89:f9: 74:19:ae:ca:14:f5:97:a0:e9:a9:e0:0f:e0:f6:58:5a:41:e4: 28:57:a9:68:1d:c2:a9:49:f6:67:21:6b:24:ba:3d:a0:96:4b: df:60:8f:db:bd:55:19:1a:90:b5:d7:03:87:19:f6:12:59:ae: 06:b3:c8:a2:16:20:9d:b5:34:bb:0e:49:60:5a:bd:f8:5e:29: 5e:eb:b0:fd:6e:d5:e1:4e:52:db:e6:14:62:0a:21:d1:a5:a3: a1:ee:72:94:12:47:92:fd:5e:24:52:0d:a2:9c:db:93:a8:bd: 50:f0:3b:05:57:1c:df:b9:5e:84:73:f8:94:ba:10:7f:23:c2: 3a:0b:91:40:d3:78:f9:a7:e4:6b:5c:a6:32:71:11:9f:98:f1: a1:a1:ef:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8+R+AWBMdce+PSHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Y2I1YWMwODAtNTMzNy00YzFhLWE4MDAtYWUwNjY5ZTQ5YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQT5ZpjCtapgyUkD0tdNfdOQMG4vh+vPR2wv ICFRWrU7KsOSwo7cValJAww0kHMzHhox1oLHo6gdo2g5zeHbvBLxrvtyBNZx5tjS 2FEGAHqB0foBkI5CYMi2wroOHdgsCKnu6XSzYRRpnqNWQ02/orPvmhWcsSZNSUQp hno12KSx6HMkvXf+8gPY9VjZwfq26ZX3MtzUgmA+osqQTQsxVKM1Z0lfOce/lAJG S3x8+6bttMw2eBRZ0EjKBq1pTE5w6K0SHVDEaSqjhQRS+vmfry6MOTkL4EcvRR3a j3m1nEUMVA9jmXFH0YA+iHUxenzzEwDUtdWdCnj4DDcjK5ESVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEDOU0lEoAFzdx1nq038cXQEGAgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2UwYzdkNGYtODZiYi0z Njg1LWIxYjQtN2NjNjVjNmYyNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeYCr6s6KOkgvZ01XI1lV0AiZcn9LEWXgtqUinMUv1N+XglqdDu3lQ YhD+k8SI6bgGfHULXoh/6UqGObCz4YmJp3RTiio8GAA2NaqIMVTVI2hhStiVp0cd ZUcitKPOPp94wjT1SjroksWFifl0Ga7KFPWXoOmp4A/g9lhaQeQoV6loHcKpSfZn IWskuj2glkvfYI/bvVUZGpC11wOHGfYSWa4Gs8iiFiCdtTS7DklgWr34Xile67D9 btXhTlLb5hRiCiHRpaOh7nKUEkeS/V4kUg2inNuTqL1Q8DsFVxzfuV6Ec/iUuhB/ I8I6C5FA03j5p+RrXKYycRGfmPGhoe/n -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:58 2026 by rpki-client