$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa File: 7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa (raw, json) Hash identifier: 00uxK8UA1cOhvdKnWSMQqjFPSEsyBx3uEV9xzkCdSRo= Subject key identifier: BB:BD:9D:65:19:59:E6:D7:53:C5:12:D2:3A:28:44:90:3E:3F:00:70 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584EF87CCFC84DA4C944668B1900 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 20253 IP address blocks: 2606:bc40:f0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:cf:c8:4d:a4:c9:44:66:8b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=3595dcbd-e16a-4e4d-b9ee-ec88557eac36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:8f:b4:78:60:d1:6e:de:74:ee:3e:9f:9a: 4c:dc:95:04:c8:47:8b:20:43:62:8c:be:c8:cb:f4: 0a:d3:93:f8:73:db:23:1b:ad:ca:f5:24:f9:5d:37: 61:ef:36:25:cb:92:f9:0a:c2:ed:fa:e2:8d:e4:08: 16:69:1c:10:66:3c:e3:c9:24:20:f2:a6:38:51:c4: 11:e7:57:fc:da:78:ab:41:17:f4:fa:a6:e5:f9:05: a6:0b:c6:8d:e8:07:f8:d2:05:d6:26:4e:73:d8:66: 56:a8:ad:65:90:36:0f:8e:05:bc:f4:a4:db:7f:6f: 31:31:87:3e:b5:ce:02:5f:bf:08:bf:30:2c:ce:60: c4:78:39:3b:90:a3:65:e9:d4:49:ec:ce:82:44:89: 86:d3:e1:64:02:24:c4:8f:d9:b0:77:fe:74:12:4d: 4c:90:1a:27:5f:03:ea:3f:66:32:80:0f:b2:48:a4: 91:35:b4:f7:ad:29:c8:3a:3a:e5:2a:de:26:12:77: b8:02:35:f0:a6:25:fa:71:f8:16:19:98:8c:85:2e: 91:0a:1d:9b:d1:ba:e2:40:95:f0:2c:6a:9e:d3:e8: 79:0f:98:2b:92:a4:24:5c:86:d7:e7:10:87:cc:50: 41:3d:f7:c9:45:62:bd:19:8b:97:94:4a:de:fb:68: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BD:9D:65:19:59:E6:D7:53:C5:12:D2:3A:28:44:90:3E:3F:00:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f0d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fe:b1:34:7e:5f:7a:01:d9:14:eb:06:d3:0c:60:a0:11:db: 84:72:94:2a:64:3f:8a:a3:3f:7a:40:6d:00:70:52:e2:5b:90: 82:75:c6:49:63:3f:4b:66:a1:49:99:c2:b4:1f:f5:b7:95:ca: 47:1e:06:36:70:73:7f:58:9d:f8:8b:17:36:38:fc:9a:08:26: 9a:be:ff:04:36:57:3f:69:c0:b2:8b:11:2a:87:ae:8d:d6:07: 73:7a:8c:69:b4:f5:4c:05:de:71:0d:dc:57:94:6d:6a:c0:88: 63:ae:b3:ca:44:d9:58:a0:d7:d9:46:86:ea:50:37:d2:bd:7a: 07:4c:12:a4:74:65:d5:9a:02:a1:c2:70:14:d6:23:9d:03:be: 45:3a:8f:40:41:b6:bb:79:9a:a3:a6:76:2c:fb:86:9a:c0:0f: a5:cd:d7:50:1a:bf:5f:05:4c:ba:6b:0e:69:0c:6d:66:8c:2f: 68:5d:cc:28:55:04:01:54:37:33:a3:96:4b:42:9d:37:e3:9e: 53:72:6c:0c:19:a7:e7:e7:e2:2a:e3:ab:a0:1b:cf:74:84:bd: 09:44:3a:e3:6f:57:94:52:31:3d:4c:e2:bf:77:b1:f8:46:d7: 0f:b1:46:53:be:cc:57:e4:95:86:6b:09:5b:cb:9d:36:90:d6: be:a2:e8:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fM/ITaTJRGaLGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MzU5NWRjYmQtZTE2YS00ZTRkLWI5ZWUtZWM4ODU1N2VhYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeGPtHhg0W7edO4+n5pM3JUEyEeLIENijL7I y/QK05P4c9sjG63K9ST5XTdh7zYly5L5CsLt+uKN5AgWaRwQZjzjySQg8qY4UcQR 51f82nirQRf0+qbl+QWmC8aN6Af40gXWJk5z2GZWqK1lkDYPjgW89KTbf28xMYc+ tc4CX78IvzAszmDEeDk7kKNl6dRJ7M6CRImG0+FkAiTEj9mwd/50Ek1MkBonXwPq P2YygA+ySKSRNbT3rSnIOjrlKt4mEne4AjXwpiX6cfgWGZiMhS6RCh2b0briQJXw LGqe0+h5D5grkqQkXIbX5xCHzFBBPffJRWK9GYuXlEre+2jLkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLu9nWUZWebXU8US0jooRJA+PwBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNzY4NmE0ZGQtNGMyOC0z ZjJmLThhNzgtN2M2N2Q1NmFkODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8N MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH+sTR+X3oB2RTrBtMMYKAR24RylCpkP4qjP3pAbQBwUuJbkIJ1 xkljP0tmoUmZwrQf9beVykceBjZwc39YnfiLFzY4/JoIJpq+/wQ2Vz9pwLKLESqH ro3WB3N6jGm09UwF3nEN3FeUbWrAiGOus8pE2Vig19lGhupQN9K9egdMEqR0ZdWa AqHCcBTWI50DvkU6j0BBtrt5mqOmdiz7hprAD6XN11Aav18FTLprDmkMbWaML2hd zChVBAFUNzOjlktCnTfjnlNybAwZp+fn4irjq6Abz3SEvQlEOuNvV5RSMT1M4r93 sfhG1w+xRlO+zFfklYZrCVvLnTaQ1r6i6DQ= -----END CERTIFICATE-----Generated at Tue Sep 22 10:09:45 2026 by rpki-client