$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa File: d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa (raw, json) Hash identifier: 3UWQsOUnA04Csa1sWSLc13/Ikm/8aS91zNRjGOqC62Y= Subject key identifier: CA:7F:1E:D6:FF:81:5C:4D:9E:C0:B1:DA:54:11:38:D8:FA:01:C2:A3 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584F2ABD1A05A6C7A43380645100 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 20253 IP address blocks: 2606:bc40:f15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1a:05:a6:c7:a4:33:80:64:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=ff65d275-7142-44ee-9b6f-2177dd8def04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:d4:ec:29:64:f5:b7:c8:1b:11:66:61:d7: cc:63:1c:e7:01:48:2b:5a:78:e0:15:ad:2d:35:f1: 9c:ff:77:d9:3e:a4:5b:36:f2:36:bd:64:7b:66:97: ff:23:3c:0e:a9:f8:82:58:06:3a:b8:de:f9:80:19: a2:40:98:4f:95:7d:07:1f:0a:a6:38:a9:0d:16:29: a9:2f:26:c3:34:56:99:b8:ab:07:e5:04:9e:bb:c4: 7e:e8:0d:06:c9:3a:68:42:4a:c8:03:12:9c:3c:b4: 3d:f7:79:1a:5d:13:c8:2d:5a:9e:a5:47:85:17:ad: 56:6d:d9:84:91:7c:19:19:60:d9:3d:06:b5:17:6e: d4:f7:ad:9f:1e:ab:32:ad:46:39:21:36:2c:88:48: a9:d1:21:54:5d:40:8e:de:2c:fd:b2:76:31:81:a0: f9:da:19:58:13:95:17:3c:ad:dd:20:7d:8e:ee:73: de:33:6b:e5:04:8f:cb:3e:60:8c:4e:16:4a:46:05: a7:af:fa:e4:d1:2d:c0:b2:ad:58:6c:87:aa:47:c7: 91:21:a9:2c:aa:24:5e:29:6c:84:70:e5:f9:53:7b: 6f:cd:8b:83:90:57:7d:7b:0f:16:48:1b:91:39:08: 90:3c:72:47:b5:2f:03:e3:a1:87:2b:86:3c:fe:91: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:1E:D6:FF:81:5C:4D:9E:C0:B1:DA:54:11:38:D8:FA:01:C2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:38:d9:db:87:51:33:b8:f9:9a:eb:80:e3:10:3e:aa:ad:c0: 61:f4:6c:16:7a:e9:29:37:8e:d0:05:ce:b1:30:83:a6:c9:29: 52:c1:e4:f3:09:e8:81:5a:c0:3f:cc:f6:5e:88:3d:ec:1f:49: 37:40:89:c8:52:57:09:63:aa:74:32:fb:aa:63:ca:96:b0:3f: 71:5f:d1:ab:a7:cb:54:73:a1:61:33:47:0e:d8:82:cb:b9:e9: 4a:c2:14:3c:95:ef:53:fe:14:56:7b:29:08:f8:c0:59:7b:7b: c9:b5:98:bc:23:4d:8b:e6:fc:23:39:b9:74:2a:67:d9:1f:cc: a2:0f:78:ed:f4:75:0c:98:84:2d:29:a2:bd:9f:f0:2b:be:1d: 97:41:d6:d0:fb:eb:1d:b1:35:2c:b4:af:35:02:e1:1a:11:9a: b6:8e:68:4f:0b:80:50:9f:88:91:14:22:ec:0d:4e:39:97:0b: 6c:c2:1c:f7:46:3e:c2:56:37:a5:64:1f:18:91:c7:fb:31:95: 33:91:38:d7:0c:02:aa:67:2c:21:cd:39:e0:27:4b:25:a7:31: e3:2a:65:9e:db:bf:3f:92:3a:dc:d7:03:78:dd:ea:1c:0d:51: 6f:a0:c5:95:5f:9e:0f:1d:20:da:1f:5a:3f:7a:15:9f:0e:93: 70:f4:bc:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvRoFpsekM4BkUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZmY2NWQyNzUtNzE0Mi00NGVlLTliNmYtMjE3N2RkOGRlZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlrU7Clk9bfIGxFmYdfMYxznAUgrWnjgFa0t NfGc/3fZPqRbNvI2vWR7Zpf/IzwOqfiCWAY6uN75gBmiQJhPlX0HHwqmOKkNFimp LybDNFaZuKsH5QSeu8R+6A0GyTpoQkrIAxKcPLQ993kaXRPILVqepUeFF61WbdmE kXwZGWDZPQa1F27U962fHqsyrUY5ITYsiEip0SFUXUCO3iz9snYxgaD52hlYE5UX PK3dIH2O7nPeM2vlBI/LPmCMThZKRgWnr/rk0S3Asq1YbIeqR8eRIaksqiReKWyE cOX5U3tvzYuDkFd9ew8WSBuROQiQPHJHtS8D46GHK4Y8/pFSUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMp/Htb/gVxNnsCx2lQRONj6AcKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZDY3ODA3YzgtY2I1Mi0z MTEwLTkyZTktZGZhNGUzYTU3ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8V MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALo42duHUTO4+ZrrgOMQPqqtwGH0bBZ66Sk3jtAFzrEwg6bJKVLB 5PMJ6IFawD/M9l6IPewfSTdAichSVwljqnQy+6pjypawP3Ff0auny1RzoWEzRw7Y gsu56UrCFDyV71P+FFZ7KQj4wFl7e8m1mLwjTYvm/CM5uXQqZ9kfzKIPeO30dQyY hC0por2f8Cu+HZdB1tD76x2xNSy0rzUC4RoRmraOaE8LgFCfiJEUIuwNTjmXC2zC HPdGPsJWN6VkHxiRx/sxlTORONcMAqpnLCHNOeAnSyWnMeMqZZ7bvz+SOtzXA3jd 6hwNUW+gxZVfng8dINofWj96FZ8Ok3D0vAk= -----END CERTIFICATE-----Generated at Mon Sep 21 17:51:02 2026 by rpki-client