$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa File: 857171dc-1cf1-350c-bc80-6881e5f008ea.roa (raw, json) Hash identifier: UMAFBnT42BX7eTGm2u6YyBSPcmFxJYP7MK85GXaLjfQ= Subject key identifier: 32:0E:75:AD:11:70:31:C7:EC:B2:30:5D:31:DC:AC:6C:82:C4:92:06 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F2EED26B79E15F8145A2DF400 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 11232 IP address blocks: 2605:4a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:26:b7:9e:15:f8:14:5a:2d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=fd5da82b-6bcd-44bd-be1b-93e41ae50a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:46:23:bc:2e:17:0d:8a:3f:af:87:dd:ac: 8b:9f:fc:4e:ed:a9:91:b7:40:8a:6a:97:ac:d5:5b: 3f:30:d5:a8:86:cc:bb:82:a8:9d:f8:3b:e8:10:c4: fd:3c:ea:e5:5d:b4:82:bd:b7:2e:7a:51:a9:18:d1: 2b:ed:d5:31:bd:43:ed:d6:04:8c:5f:d7:d9:58:b3: 08:36:90:5e:ba:5f:c5:30:ae:67:04:b5:40:91:6d: df:2f:b7:b0:a0:ad:f3:ea:fc:41:8d:28:8e:c6:08: 9f:08:1a:6e:c8:37:42:ff:4d:39:2f:96:3c:97:71: 2d:62:c3:f1:cc:11:2c:c8:c9:82:9a:77:e4:6f:b0: bf:9f:02:f9:e1:2e:16:0f:d4:6f:bd:65:af:20:fe: aa:47:2c:31:11:bc:32:7c:a9:f6:50:81:dd:76:b2: 54:0b:2a:8e:fd:cf:38:87:e0:fc:10:fb:3c:0a:6f: 6e:f6:07:97:ad:c1:d0:9a:d7:98:cb:58:5b:c5:32: 56:78:a4:99:76:72:23:c3:d1:3f:d1:ef:d2:39:eb: b7:9a:9f:b9:ab:0c:c0:36:13:67:08:8b:cd:62:11: f9:5f:05:c5:44:e4:ff:05:07:f7:06:af:f2:26:a7: dd:8f:31:fd:e2:03:2a:2f:7f:5c:5b:1c:0a:3c:9c: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0E:75:AD:11:70:31:C7:EC:B2:30:5D:31:DC:AC:6C:82:C4:92:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2605:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d1:d6:86:e7:0c:28:c9:ce:de:56:e2:c9:48:ed:7a:3c:76: 73:e7:ca:8a:65:81:27:46:3d:7d:69:80:ae:4f:10:87:cb:70: 99:f4:75:ed:71:fd:66:3a:16:1f:18:f4:4b:81:32:21:c0:6d: c2:bb:10:4e:56:e7:71:a7:cf:21:67:8f:00:f1:39:19:95:b6: ae:ff:ca:ae:bc:14:1c:42:fe:d0:6c:16:e9:ed:f0:c0:c5:1e: 60:c8:06:5f:c1:6e:c0:2f:cf:63:01:1c:7a:87:62:22:26:8c: d5:ae:bc:8e:bb:70:7e:91:04:03:ee:96:d3:e5:c2:e7:d1:b5: f0:ac:29:f4:96:0c:73:82:2a:31:cb:19:0e:66:17:c3:2b:04: 0b:09:37:c3:b7:ab:8c:ed:dc:d2:29:83:b0:d6:c1:1a:f7:6c: 81:00:10:f6:4d:ee:ee:7d:0c:93:85:5c:57:da:cc:9d:b8:20: ca:5b:48:b9:26:95:28:f2:55:60:00:2b:84:91:68:ff:ab:cb: 3c:ed:b6:15:23:2e:7f:ea:38:ca:ad:22:da:92:d9:de:2c:43: 06:df:d6:f9:62:af:d9:22:1e:01:a1:29:37:b7:54:e1:fb:39: af:b8:b6:5e:76:20:25:ad:8e:16:13:c4:3b:0c:03:98:a1:cd: 6f:d3:47:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7Sa3nhX4FFot9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ1ZGE4MmItNmJjZC00NGJkLWJlMWItOTNlNDFhZTUwYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGRGI7wuFw2KP6+H3ayLn/xO7amRt0CKapes 1Vs/MNWohsy7gqid+DvoEMT9POrlXbSCvbcuelGpGNEr7dUxvUPt1gSMX9fZWLMI NpBeul/FMK5nBLVAkW3fL7ewoK3z6vxBjSiOxgifCBpuyDdC/005L5Y8l3EtYsPx zBEsyMmCmnfkb7C/nwL54S4WD9RvvWWvIP6qRywxEbwyfKn2UIHddrJUCyqO/c84 h+D8EPs8Cm9u9geXrcHQmteYy1hbxTJWeKSZdnIjw9E/0e/SOeu3mp+5qwzANhNn CIvNYhH5XwXFROT/BQf3Bq/yJqfdjzH94gMqL39cWxwKPJyGBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIOda0RcDHH7LIwXTHcrGyCxJIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODU3MTcxZGMtMWNmMS0z NTBjLWJjODAtNjg4MWU1ZjAwOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVKgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCc0daG5wwoyc7eVuLJSO16PHZz58qKZYEnRj19aYCuTxCHy3CZ9HXt cf1mOhYfGPRLgTIhwG3CuxBOVudxp88hZ48A8TkZlbau/8quvBQcQv7QbBbp7fDA xR5gyAZfwW7AL89jARx6h2IiJozVrryOu3B+kQQD7pbT5cLn0bXwrCn0lgxzgiox yxkOZhfDKwQLCTfDt6uM7dzSKYOw1sEa92yBABD2Te7ufQyThVxX2syduCDKW0i5 JpUo8lVgACuEkWj/q8s87bYVIy5/6jjKrSLaktneLEMG39b5Yq/ZIh4BoSk3t1Th +zmvuLZediAlrY4WE8Q7DAOYoc1v00c3 -----END CERTIFICATE-----Generated at Tue Sep 22 11:57:37 2026 by rpki-client