$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa File: fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json) Hash identifier: onPaLKBeJJZ77+9/hV/+pUnWODf+U/COE68ezELQvu0= Subject key identifier: 5F:6E:55:E4:31:8D:E8:7A:F9:FC:23:47:98:1D:58:64:21:DE:34:7D Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584EF7175E3A038B29F7ABB75D80 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 2607:3000::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:5e:3a:03:8b:29:f7:ab:b7:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=7e654650-7aae-4f80-8193-663c3fffb949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3a:93:c1:ab:38:26:13:f1:ce:d7:1e:4e:67: 73:a5:cf:f6:b2:17:c7:20:8b:04:51:7e:ab:51:c8: aa:16:67:b6:02:d0:d3:9f:8d:07:ab:21:d8:07:c7: 32:64:25:2d:2c:bc:27:8d:37:18:28:48:35:46:e3: c0:d8:48:74:00:a7:6b:d8:35:61:1a:46:b2:d3:dc: cd:84:40:ac:2e:4d:e8:a1:5b:37:19:ed:36:d5:07: d8:6e:2b:ff:33:0a:7e:07:3e:f1:cd:5d:00:fc:18: 8c:9f:d8:83:6d:a0:9c:10:3d:24:98:f2:1f:52:b3: a2:e7:7b:82:fa:6f:07:2f:03:24:02:6d:ea:dd:5d: 24:eb:c2:c7:83:37:75:25:7d:6b:fd:24:a5:39:d0: 7b:66:0c:d5:35:35:dc:a1:0a:a3:5c:9f:ce:e4:4a: 08:22:f7:fb:33:f5:e0:6f:c8:98:cb:36:5d:a3:0b: 79:da:c6:1d:35:aa:71:fe:2c:72:1b:af:b7:21:c7: 35:25:85:6f:2c:54:fe:83:a2:ca:54:85:b2:ec:f8: c6:fa:e2:be:f1:f9:eb:23:36:57:81:5b:10:a2:40: e6:f5:f0:52:e1:83:39:b9:0c:ff:36:7a:32:60:7d: 0c:e4:87:fe:ee:3c:27:d8:76:ba:1c:36:f3:ad:0d: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:55:E4:31:8D:E8:7A:F9:FC:23:47:98:1D:58:64:21:DE:34:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv6: 2607:3000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:87:e7:f1:6f:6f:be:82:20:bf:f0:53:5b:48:eb:07:88:d2: 9e:b9:5d:8d:ae:5f:61:53:87:2a:a9:cb:f1:34:0f:9d:36:e3: e6:dd:7d:95:13:2a:be:27:0e:54:dd:0d:cd:dd:2d:42:0c:17: 68:38:d9:21:62:90:d4:e3:ee:d4:5b:82:f3:7b:08:5d:a9:21: 62:25:0d:73:49:8d:09:da:36:4b:d7:6a:32:68:f3:60:98:94: ec:8f:b8:88:7b:6a:87:3b:5b:46:0b:b0:c4:61:b1:ef:59:06: c0:48:4c:99:3f:64:c2:64:be:d6:30:15:23:fc:bc:05:0d:06: a5:7a:48:04:7b:88:d9:b0:b3:f2:c2:49:31:8c:37:a5:42:65: fc:45:09:4c:a4:1c:63:b7:0a:dc:26:7f:c3:7b:49:dc:67:4c: d8:2e:f9:d7:f0:5f:08:bc:7b:e8:96:71:59:c0:44:77:9c:f0: 24:9d:c2:c7:f6:b0:a9:6c:00:44:34:b8:9d:41:d3:17:a0:66: a8:2e:22:8d:07:18:17:16:62:80:4d:75:d0:aa:12:10:4a:10: 60:62:0e:a4:40:9f:d3:3a:04:11:fd:e9:c2:7e:6f:5e:88:3c: 36:61:a1:3f:d4:79:5d:22:d5:d7:64:1c:30:c2:d0:1e:e1:5d: 62:80:fe:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE73F146A4sp96u3XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk N2U2NTQ2NTAtN2FhZS00ZjgwLTgxOTMtNjYzYzNmZmZiOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TqTwas4JhPxztceTmdzpc/2shfHIIsEUX6r UciqFme2AtDTn40HqyHYB8cyZCUtLLwnjTcYKEg1RuPA2Eh0AKdr2DVhGkay09zN hECsLk3ooVs3Ge021QfYbiv/Mwp+Bz7xzV0A/BiMn9iDbaCcED0kmPIfUrOi53uC +m8HLwMkAm3q3V0k68LHgzd1JX1r/SSlOdB7ZgzVNTXcoQqjXJ/O5EoIIvf7M/Xg b8iYyzZdowt52sYdNapx/ixyG6+3Icc1JYVvLFT+g6LKVIWy7PjG+uK+8fnrIzZX gVsQokDm9fBS4YM5uQz/NnoyYH0M5If+7jwn2Ha6HDbzrQ2BGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF9uVeQxjeh6+fwjR5gdWGQh3jR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmE0ZWQ0NjQtMjliMy0z NDUyLWJkZDktNjg0NGZiNGRiOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjh+fxb2++giC/8FNbSOsHiNKeuV2Nrl9hU4cqqcvxNA+dNuPm3X2V Eyq+Jw5U3Q3N3S1CDBdoONkhYpDU4+7UW4LzewhdqSFiJQ1zSY0J2jZL12oyaPNg mJTsj7iIe2qHO1tGC7DEYbHvWQbASEyZP2TCZL7WMBUj/LwFDQalekgEe4jZsLPy wkkxjDelQmX8RQlMpBxjtwrcJn/De0ncZ0zYLvnX8F8IvHvolnFZwER3nPAkncLH 9rCpbABENLidQdMXoGaoLiKNBxgXFmKATXXQqhIQShBgYg6kQJ/TOgQR/enCfm9e iDw2YaE/1HldItXXZBwwwtAe4V1igP7T -----END CERTIFICATE-----Generated at Mon Sep 21 07:00:04 2026 by rpki-client