$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/3ca5fc08-f5ed-3515-8229-1c4dca6fbdcd.roa File: 3ca5fc08-f5ed-3515-8229-1c4dca6fbdcd.roa (raw, json) Hash identifier: VCvGV3lF7Yc8gTNnZy5DkO5y4BzqZj5d1G6E/zCUO1A= Subject key identifier: 34:04:9D:25:B8:7F:C2:6F:BD:F0:05:8A:72:6C:25:F5:B1:C1:B2:C9 Certificate issuer: /CN=394f8a71-e67c-4be3-b260-617b3f6602fe Certificate serial: 010D0C9F4328584EFB26BE59431AFA35113E8BC0 Authority key identifier: CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/3ca5fc08-f5ed-3515-8229-1c4dca6fbdcd.roa Signing time: Thu 27 Aug 2026 23:54:28 +0000 ROA not before: Thu 27 Aug 2026 23:54:28 +0000 ROA not after: Thu 26 Nov 2026 00:54:28 +0000 asID: 394581 IP address blocks: 2607:e80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:26:be:59:43:1a:fa:35:11:3e:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394f8a71-e67c-4be3-b260-617b3f6602fe Validity Not Before: Aug 27 23:54:28 2026 GMT Not After : Nov 26 00:54:28 2026 GMT Subject: CN=e1c6d8d8-2d5f-47ea-b95f-49680c23f597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:7a:07:d0:8c:b7:d5:1d:c5:62:c3:9a:0d: f4:51:1a:3f:b6:fe:77:01:00:34:a6:e1:87:92:f0: bb:11:8c:cb:fa:f5:c7:85:3d:8d:d0:f7:d1:b4:e1: 97:ac:77:7a:bb:55:36:67:75:77:1b:13:20:1d:9b: 9d:fa:03:cf:54:10:3b:71:17:bc:b9:09:2f:3a:1e: 93:58:7c:87:82:51:f5:f6:19:1d:41:a5:62:df:71: c4:e3:9c:bf:45:10:8e:3d:7b:0b:6d:6f:f1:2a:7b: 39:32:71:1b:44:f7:3e:53:22:e2:9e:07:aa:24:d7: 94:c4:b7:21:d0:59:fd:ac:a3:6c:44:07:f9:6e:f7: 22:2e:ea:d4:d7:f4:73:33:8e:7d:06:82:2b:e9:ef: 10:e3:f0:ce:9d:96:f9:34:1c:5e:cf:ee:77:d9:16: ec:61:f7:9f:b4:7c:9d:ab:6a:10:8f:60:24:61:6e: 02:b6:4d:1f:42:65:ee:14:e1:d7:bd:86:c1:88:9b: 93:5f:0e:29:aa:62:8d:ed:b6:31:35:f5:57:fa:47: 35:1a:b1:b8:bb:48:cb:5b:e0:fa:4a:ab:dc:04:c6: 22:ad:ef:1b:2b:7c:ea:4d:cc:08:1e:b5:f7:0b:39: e8:de:2f:b7:d8:f7:cb:42:ec:df:9c:7d:05:5d:0b: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:9D:25:B8:7F:C2:6F:BD:F0:05:8A:72:6C:25:F5:B1:C1:B2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/3ca5fc08-f5ed-3515-8229-1c4dca6fbdcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe/394f8a71-e67c-4be3-b260-617b3f6602fe.crl X509v3 Authority Key Identifier: keyid:CE:93:CA:03:FE:BF:F4:6C:2C:FE:B8:06:1C:66:46:1E:AC:A2:E5:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/394f8a71-e67c-4be3-b260-617b3f6602fe.cer sbgp-ipAddrBlock: critical IPv6: 2607:e80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7d:20:62:ee:29:3b:26:86:5f:f9:db:c1:4d:24:fe:a3:fe: 6c:45:53:e7:4a:d7:10:ab:da:bc:f3:27:10:22:c6:60:af:f3: d9:91:05:6c:fb:a7:1f:61:d8:92:5b:b0:83:94:c5:db:f5:1d: a4:7e:ef:b4:22:a8:99:89:64:b2:1a:5e:67:99:0e:d9:d0:aa: 6c:05:d6:b0:06:00:ca:df:c9:ca:0c:63:06:0b:65:76:3a:97: ae:96:48:39:3a:73:ab:0a:1a:73:f6:10:3c:66:35:27:01:a4: 85:44:fa:fb:e5:eb:26:b7:fd:64:23:cf:4d:dd:18:06:c8:95: 39:e3:4a:59:f5:f9:bc:a2:5e:9a:63:bb:e8:72:6a:76:94:dd: 19:53:ac:7e:7f:af:a5:67:3c:38:40:01:c6:fd:a0:47:a8:8d: 9e:96:c8:1d:fe:0f:f1:e1:a0:76:0d:67:9c:80:fa:d9:47:f1: 0c:0e:0e:b0:4d:83:70:3e:f7:06:5e:ba:f1:45:b6:be:6b:f4: c9:b0:5f:fb:62:17:15:e1:c9:28:19:5c:3a:37:2b:bc:ce:9e: 5c:8e:fd:54:98:94:2a:1e:80:e6:e9:ac:d7:f6:5d:ef:96:0b: 61:11:24:ee:da:65:b9:fe:b3:0c:d4:53:02:0a:3e:dd:fc:89: ad:01:20:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE77Jr5ZQxr6NRE+i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk0ZjhhNzEtZTY3Yy00YmUzLWIyNjAtNjE3YjNmNjYw MmZlMB4XDTI2MDgyNzIzNTQyOFoXDTI2MTEyNjAwNTQyOFowLzEtMCsGA1UEAxMk ZTFjNmQ4ZDgtMmQ1Zi00N2VhLWI5NWYtNDk2ODBjMjNmNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLN6B9CMt9UdxWLDmg30URo/tv53AQA0puGH kvC7EYzL+vXHhT2N0PfRtOGXrHd6u1U2Z3V3GxMgHZud+gPPVBA7cRe8uQkvOh6T WHyHglH19hkdQaVi33HE45y/RRCOPXsLbW/xKns5MnEbRPc+UyLingeqJNeUxLch 0Fn9rKNsRAf5bvciLurU1/RzM459BoIr6e8Q4/DOnZb5NBxez+532RbsYfeftHyd q2oQj2AkYW4Ctk0fQmXuFOHXvYbBiJuTXw4pqmKN7bYxNfVX+kc1GrG4u0jLW+D6 SqvcBMYire8bK3zqTcwIHrX3Czno3i+32PfLQuzfnH0FXQtLUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDQEnSW4f8JvvfAFinJsJfWxwbLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zOTRm OGE3MS1lNjdjLTRiZTMtYjI2MC02MTdiM2Y2NjAyZmUvM2NhNWZjMDgtZjVlZC0z NTE1LTgyMjktMWM0ZGNhNmZiZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzk0ZjhhNzEtZTY3Yy00YmUzLWIy NjAtNjE3YjNmNjYwMmZlLzM5NGY4YTcxLWU2N2MtNGJlMy1iMjYwLTYxN2IzZjY2 MDJmZS5jcmwwHwYDVR0jBBgwFoAUzpPKA/6/9Gws/rgGHGZGHqyi5XMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zOTRmOGE3MS1lNjdjLTRiZTMtYjI2MC02MTdi M2Y2NjAyZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcOgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqfSBi7ik7JoZf+dvBTST+o/5sRVPnStcQq9q88ycQIsZgr/PZkQVs +6cfYdiSW7CDlMXb9R2kfu+0IqiZiWSyGl5nmQ7Z0KpsBdawBgDK38nKDGMGC2V2 Opeulkg5OnOrChpz9hA8ZjUnAaSFRPr75esmt/1kI89N3RgGyJU540pZ9fm8ol6a Y7vocmp2lN0ZU6x+f6+lZzw4QAHG/aBHqI2elsgd/g/x4aB2DWecgPrZR/EMDg6w TYNwPvcGXrrxRba+a/TJsF/7YhcV4ckoGVw6Nyu8zp5cjv1UmJQqHoDm6azX9l3v lgthESTu2mW5/rMM1FMCCj7d/ImtASCi -----END CERTIFICATE-----Generated at Tue Sep 22 18:36:15 2026 by rpki-client