$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa File: b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json) Hash identifier: l8eEvCL04yldgLsIceBwMPN4TYdNL/+6IuY/qQVvZ4I= Subject key identifier: 44:84:03:D5:18:FE:58:D7:C4:6A:1C:97:71:9F:BF:F8:F5:A3:67:95 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F4328584EF71779768D377BAFC5A74900 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2607:d540:fc0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:79:76:8d:37:7b:af:c5:a7:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=4f1a69e2-3f77-4cc8-bbb8-4b4430ffefa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4d:74:af:f6:ac:b7:d9:5e:7c:62:49:31:92: 49:1b:df:3c:0d:68:f0:cc:e2:56:b3:b5:6f:7e:b0: a1:38:08:88:c6:db:74:e6:6c:01:89:37:bb:e2:32: 78:89:3c:ad:81:e0:81:4f:15:65:bd:37:16:06:a5: f5:ed:5a:5e:34:57:49:41:3d:1b:95:3d:67:52:8d: 9a:20:17:06:c6:94:da:1f:8e:5e:0a:0a:a5:49:b1: d7:6e:af:16:12:a2:c2:ce:a8:5f:88:db:4a:5e:4c: 7f:26:56:50:ed:50:8f:b8:53:75:50:cd:ef:6d:6d: 1e:8c:a9:6f:9c:c2:21:b8:89:fc:9d:3d:73:67:4f: fe:70:77:07:50:61:69:7c:5b:40:bd:9b:cc:cc:d3: e4:62:93:08:b7:e4:1f:b8:d5:cf:27:e4:87:a2:6b: 0c:08:d4:d2:9e:3b:06:2e:66:6a:a7:31:93:45:51: fd:05:95:52:47:55:d6:82:f7:13:19:82:49:59:d6: 4f:e8:cc:ca:29:86:f6:72:d6:58:d0:2a:f3:bd:2d: be:95:1b:d3:90:85:40:bf:1f:2e:e9:97:10:10:14: d4:5e:a0:1e:0c:e1:01:1d:90:08:2a:60:18:c4:38: 73:32:d0:fc:24:9e:f0:f4:3e:49:b9:a7:79:8a:0f: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:84:03:D5:18:FE:58:D7:C4:6A:1C:97:71:9F:BF:F8:F5:A3:67:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv6: 2607:d540:fc0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:db:67:84:62:f0:6c:f8:59:ec:56:64:e0:00:82:9e:8c:35: df:23:c4:5c:e8:a6:bc:e9:f9:ef:1f:1d:d9:e7:4a:dd:91:e5: 0e:74:32:67:84:4c:03:3c:ec:68:89:96:a3:1b:0a:f6:c9:04: 9a:35:6e:da:01:60:d1:59:8b:e6:fc:bb:c2:f3:f7:26:72:28: 50:70:20:e3:43:80:33:fe:e1:6d:f1:a4:03:67:e9:25:bb:70: 07:3d:1d:76:39:1f:86:5e:c9:61:83:7b:f2:2f:82:9c:67:df: f9:5a:fd:f8:ef:a3:81:c6:a5:e8:53:96:ba:a6:04:59:0b:ef: d0:a5:82:00:51:95:f7:ab:4f:ab:ec:20:15:3f:ce:e4:af:bf: c9:87:eb:dd:38:d3:8d:35:11:15:a8:98:2e:87:23:3d:f5:8f: c1:5e:ed:bc:b5:a3:9e:47:8e:a9:5a:b5:65:7a:8a:75:97:31: 0b:0c:2d:de:a6:88:4a:65:ca:31:d3:3e:e9:7a:9b:38:11:a2: 15:0b:93:5e:f1:77:7b:b3:9c:5a:97:bb:54:78:14:2c:21:9b: 32:a2:e0:47:2d:cb:63:b5:05:d8:0c:a0:b5:0e:69:1e:b9:ed: ab:b3:00:ff:a9:9e:ba:e7:10:80:29:42:39:ab:55:dd:03:4e: 63:51:a8:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F3l2jTd7r8WnSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NGYxYTY5ZTItM2Y3Ny00Y2M4LWJiYjgtNGI0NDMwZmZlZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk10r/ast9lefGJJMZJJG988DWjwzOJWs7Vv frChOAiIxtt05mwBiTe74jJ4iTytgeCBTxVlvTcWBqX17VpeNFdJQT0blT1nUo2a IBcGxpTaH45eCgqlSbHXbq8WEqLCzqhfiNtKXkx/JlZQ7VCPuFN1UM3vbW0ejKlv nMIhuIn8nT1zZ0/+cHcHUGFpfFtAvZvMzNPkYpMIt+QfuNXPJ+SHomsMCNTSnjsG LmZqpzGTRVH9BZVSR1XWgvcTGYJJWdZP6MzKKYb2ctZY0CrzvS2+lRvTkIVAvx8u 6ZcQEBTUXqAeDOEBHZAIKmAYxDhzMtD8JJ7w9D5Juad5ig8mQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESEA9UY/ljXxGocl3Gfv/j1o2eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvYjdiYTIyMWItNDhjZS0z ZjMwLWEyNDMtMjExYjg2MzU3OTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgfVQA/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDbZ4Ri8Gz4WexWZOAAgp6MNd8jxFzoprzp+e8fHdnnSt2R5Q50 MmeETAM87GiJlqMbCvbJBJo1btoBYNFZi+b8u8Lz9yZyKFBwIONDgDP+4W3xpANn 6SW7cAc9HXY5H4ZeyWGDe/Ivgpxn3/la/fjvo4HGpehTlrqmBFkL79ClggBRlfer T6vsIBU/zuSvv8mH69040401ERWomC6HIz31j8Fe7by1o55HjqlatWV6inWXMQsM Ld6miEplyjHTPul6mzgRohULk17xd3uznFqXu1R4FCwhmzKi4Ecty2O1BdgMoLUO aR657auzAP+pnrrnEIApQjmrVd0DTmNRqLo= -----END CERTIFICATE-----Generated at Mon Sep 21 12:34:26 2026 by rpki-client