$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa File: e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa (raw, json) Hash identifier: /QbLaem/AgfauhJKka2eavOlrsyOwx6XYy+Ijllcxvw= Subject key identifier: 53:A0:B5:44:34:2A:48:0D:AE:31:DA:79:77:F0:18:D6:17:28:24:95 Certificate issuer: /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f Certificate serial: 010D0C9F4328584F14679F66C6517A849C92E440 Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 394195 IP address blocks: 2606:b640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9f:66:c6:51:7a:84:9c:92:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=7d3e10f1-5618-4e52-8047-01b9c8a29a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:e9:a8:0e:1a:ea:db:6d:81:6b:b0:24:92: 8e:ca:c2:de:01:1d:0c:3f:fb:ce:3c:2d:9f:74:54: 35:cb:21:8a:33:dc:8a:c7:b8:77:37:92:c6:a4:29: aa:0d:d5:3d:94:bb:37:3e:19:70:25:32:bd:66:ab: e3:83:e6:80:ba:35:fd:a8:29:9a:2d:4f:a7:16:62: 43:a6:8f:a1:8e:06:0f:03:dc:f1:5d:db:52:af:87: e8:f3:02:18:f9:8a:16:f1:a2:24:5d:b4:31:84:12: a4:07:d9:1a:9a:92:8f:91:49:80:8a:71:2a:30:9b: e6:47:63:c5:39:f0:0e:bd:80:0c:7a:79:45:f3:e5: 8d:46:f8:67:fa:68:62:47:20:49:8d:79:b6:d6:60: 53:de:0a:f0:37:92:17:a1:9b:32:e4:53:52:ae:81: 8d:65:83:44:c4:86:65:8b:93:bb:83:6d:1f:35:61: f6:ac:65:18:12:b2:16:ca:c9:90:c1:fa:8a:f7:db: 25:93:6d:26:1d:91:53:c7:55:aa:93:08:ab:b4:b9: bf:6a:22:80:01:14:25:2d:88:95:76:ee:5f:fc:20: 2b:ba:56:fa:73:85:8d:b7:1b:5e:76:c7:a8:b7:91: 37:3e:33:f4:ba:ea:ce:7b:bb:8a:33:1a:ba:d6:98: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:B5:44:34:2A:48:0D:AE:31:DA:79:77:F0:18:D6:17:28:24:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl X509v3 Authority Key Identifier: keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer sbgp-ipAddrBlock: critical IPv6: 2606:b640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:42:33:cb:05:07:5e:60:24:d2:e3:ac:bb:80:ed:09:ac:5e: d8:c0:7d:7c:f4:dc:a2:08:5d:51:b5:20:e4:c7:fd:d7:61:64: 02:02:73:6c:82:da:f1:10:4e:78:2f:73:5c:1c:48:79:e5:01: c0:c4:7c:b9:34:23:64:ee:0c:bc:00:79:36:0e:bd:3d:01:2e: e4:d5:a0:ac:93:18:90:62:da:e8:54:79:4b:65:9d:cd:15:11: 6f:fc:30:ee:3a:ba:e9:7c:e5:e4:04:65:cc:bd:4b:9f:ad:b6: bd:af:78:0f:cc:bb:12:49:21:1a:40:6f:aa:c0:a5:1d:da:98: 68:5c:18:06:13:40:fb:64:51:76:4f:60:64:bf:11:39:82:91: 6a:70:49:e0:2d:9e:88:56:a3:26:c1:48:32:ba:ba:40:96:7a: 4f:fd:4b:fe:2d:c4:d2:30:f6:ca:ae:76:4d:6e:87:2a:62:05: fa:02:75:b1:7e:3d:b5:61:13:7f:53:13:35:50:ac:74:d7:9c: d1:24:23:f0:1b:fd:cf:f6:43:9c:d5:06:61:3f:ec:dd:6f:d9: 62:f0:45:59:bb:2a:ca:ce:35:be:33:8b:e3:88:c0:e2:2f:42: 4d:1c:ed:92:a9:c4:1c:8f:90:0d:23:b2:33:f9:5d:2f:9a:12: 20:83:4d:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ59mxlF6hJyS5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjNmQzMDEtZjJiOC00Y2ExLWEwZWUtZGU4MTQ0MDlj NTVmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk N2QzZTEwZjEtNTYxOC00ZTUyLTgwNDctMDFiOWM4YTI5YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3bpqA4a6tttgWuwJJKOysLeAR0MP/vOPC2f dFQ1yyGKM9yKx7h3N5LGpCmqDdU9lLs3PhlwJTK9Zqvjg+aAujX9qCmaLU+nFmJD po+hjgYPA9zxXdtSr4fo8wIY+YoW8aIkXbQxhBKkB9kampKPkUmAinEqMJvmR2PF OfAOvYAMenlF8+WNRvhn+mhiRyBJjXm21mBT3grwN5IXoZsy5FNSroGNZYNExIZl i5O7g20fNWH2rGUYErIWysmQwfqK99slk20mHZFTx1WqkwirtLm/aiKAARQlLYiV du5f/CArulb6c4WNtxtedseot5E3PjP0uurOe7uKMxq61pjYeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFOgtUQ0KkgNrjHaeXfwGNYXKCSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2M2 ZDMwMS1mMmI4LTRjYTEtYTBlZS1kZTgxNDQwOWM1NWYvZTg3Zjg3N2ItNmY1Ni0z ZGFkLWJkN2MtY2FjZDkwNDVjZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdjNmQzMDEtZjJiOC00Y2ExLWEw ZWUtZGU4MTQ0MDljNTVmLzQ3YzZkMzAxLWYyYjgtNGNhMS1hMGVlLWRlODE0NDA5 YzU1Zi5jcmwwHwYDVR0jBBgwFoAUuJo2/OUSmkrhCtwAhiyt1dz/bawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2M2ZDMwMS1mMmI4LTRjYTEtYTBlZS1kZTgx NDQwOWM1NWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJga2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOQjPLBQdeYCTS46y7gO0JrF7YwH189NyiCF1RtSDkx/3XYWQCAnNs gtrxEE54L3NcHEh55QHAxHy5NCNk7gy8AHk2Dr09AS7k1aCskxiQYtroVHlLZZ3N FRFv/DDuOrrpfOXkBGXMvUufrba9r3gPzLsSSSEaQG+qwKUd2phoXBgGE0D7ZFF2 T2BkvxE5gpFqcEngLZ6IVqMmwUgyurpAlnpP/Uv+LcTSMPbKrnZNbocqYgX6AnWx fj21YRN/UxM1UKx015zRJCPwG/3P9kOc1QZhP+zdb9li8EVZuyrKzjW+M4vjiMDi L0JNHO2SqcQcj5ANI7Iz+V0vmhIgg033 -----END CERTIFICATE-----Generated at Tue Sep 22 15:12:25 2026 by rpki-client