$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa File: a2328d6d-dc98-3180-b744-6ba5123d887a.roa (raw, json) Hash identifier: q0nyV3Qd7gZzpiqM2/zwZqyGVgZ2i8cZtA/1KVsBODs= Subject key identifier: D9:2B:C5:E6:42:5E:BC:BD:1C:1F:D5:C2:E3:5D:00:CB:D9:97:4C:6D Certificate issuer: /CN=a4f253af-de59-456e-9354-4078d22e8677 Certificate serial: 010D0C9F4328584F5768135C5CF9FAEFB1867880 Authority key identifier: 81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2607:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:13:5c:5c:f9:fa:ef:b1:86:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f253af-de59-456e-9354-4078d22e8677 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=24fe0c00-c4bc-4b94-966b-ee8c6ac9f21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:63:bc:51:ba:23:ef:c5:f4:05:33:ac:4d: 7c:c6:fb:59:fb:86:b7:15:ae:2c:02:71:e7:e3:39: fd:46:68:39:31:ec:24:0a:68:a7:9e:bc:8d:c7:9e: 45:2d:db:b3:8f:c1:c7:30:be:1a:2a:fa:da:a9:12: 5e:de:6e:a9:f7:75:ea:19:25:73:40:c6:9d:15:f7: 3f:1d:5f:6d:87:f0:79:e6:7d:3a:8b:36:1e:18:db: db:c4:fd:6a:f0:b0:5e:cc:01:cb:34:61:93:21:31: a0:f2:7d:6d:4a:69:7b:ea:9e:ee:99:fb:3f:cb:65: 82:ff:5d:7f:cc:27:46:87:9a:05:9f:78:18:25:4d: 09:78:2e:dc:00:8a:03:41:c1:d9:b3:df:8c:8b:5b: 1d:d4:46:5e:ac:de:19:54:a3:de:40:3b:92:b2:e7: 8e:35:41:81:2d:c4:32:a9:f8:64:ed:7a:86:43:64: 17:d2:f3:9f:a1:2b:1d:de:d7:b0:c3:de:af:db:a4: 5f:c3:cc:9e:40:e1:2c:a7:2e:94:36:24:5b:9b:0c: 59:19:7f:0e:d6:15:b5:80:43:69:fe:c0:a1:df:c8: 52:dc:84:d0:42:72:55:10:9f:24:30:56:34:29:4f: 04:76:27:b1:29:5a:4e:19:ca:9b:5d:ca:51:f7:3b: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2B:C5:E6:42:5E:BC:BD:1C:1F:D5:C2:E3:5D:00:CB:D9:97:4C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a2328d6d-dc98-3180-b744-6ba5123d887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl X509v3 Authority Key Identifier: keyid:81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer sbgp-ipAddrBlock: critical IPv6: 2607:4240::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4f:4b:44:eb:01:77:8b:98:c2:b5:34:ae:ff:80:36:b2:60: 96:68:6e:11:f8:38:dc:f2:6d:cf:10:e2:e9:f9:17:3b:64:ca: 71:e7:91:1d:b3:c7:83:88:a9:13:b8:04:d1:c3:cb:d8:20:9d: 64:0b:53:cb:47:2d:a9:02:90:da:b7:b5:8f:f6:e1:2f:d2:21: 7f:26:b5:fd:7a:fe:b7:ab:5c:f9:2e:cc:bf:df:bc:06:91:59: 7b:d7:37:38:5b:6b:fb:11:2e:00:32:5f:cb:1e:ab:cc:98:cb: 7b:92:56:25:f0:72:cf:7a:f7:3b:08:cd:b0:39:49:fc:40:82: c1:31:da:29:ad:1e:7c:27:a1:58:51:48:00:5b:26:92:1b:cf: e8:02:16:d4:04:97:be:9c:71:0c:2b:f5:22:5f:01:04:1e:ad: 1e:57:5c:1f:d6:52:59:27:75:0b:49:96:d6:bd:d5:c8:50:7f: 08:6e:32:3c:b1:4c:e8:3c:49:cf:af:82:90:6b:8b:c5:57:31: b5:ed:3a:69:52:d1:1d:8d:73:f6:09:9e:56:e6:bc:85:1b:58: d6:fb:d6:52:e0:a0:4d:c4:d4:21:8d:5a:20:94:91:05:ae:9d: bf:df:df:0e:32:ed:75:ea:6a:23:34:51:54:b9:fc:82:b9:7e: fb:25:21:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBNcXPn677GGeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMjUzYWYtZGU1OS00NTZlLTkzNTQtNDA3OGQyMmU4 Njc3MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MjRmZTBjMDAtYzRiYy00Yjk0LTk2NmItZWU4YzZhYzlmMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFpjvFG6I+/F9AUzrE18xvtZ+4a3Fa4sAnHn 4zn9Rmg5MewkCminnryNx55FLduzj8HHML4aKvraqRJe3m6p93XqGSVzQMadFfc/ HV9th/B55n06izYeGNvbxP1q8LBezAHLNGGTITGg8n1tSml76p7umfs/y2WC/11/ zCdGh5oFn3gYJU0JeC7cAIoDQcHZs9+Mi1sd1EZerN4ZVKPeQDuSsueONUGBLcQy qfhk7XqGQ2QX0vOfoSsd3teww96v26Rfw8yeQOEspy6UNiRbmwxZGX8O1hW1gENp /sCh38hS3ITQQnJVEJ8kMFY0KU8EdiexKVpOGcqbXcpR9zv7/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkrxeZCXry9HB/VwuNdAMvZl0xtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNGYy NTNhZi1kZTU5LTQ1NmUtOTM1NC00MDc4ZDIyZTg2NzcvYTIzMjhkNmQtZGM5OC0z MTgwLWI3NDQtNmJhNTEyM2Q4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTRmMjUzYWYtZGU1OS00NTZlLTkz NTQtNDA3OGQyMmU4Njc3L2E0ZjI1M2FmLWRlNTktNDU2ZS05MzU0LTQwNzhkMjJl ODY3Ny5jcmwwHwYDVR0jBBgwFoAUgSfb8IGI5Dkq3zWn02hHH4nsmsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNGYyNTNhZi1kZTU5LTQ1NmUtOTM1NC00MDc4 ZDIyZTg2NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdCQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZPS0TrAXeLmMK1NK7/gDayYJZobhH4ONzybc8Q4un5FztkynHn kR2zx4OIqRO4BNHDy9ggnWQLU8tHLakCkNq3tY/24S/SIX8mtf16/rerXPkuzL/f vAaRWXvXNzhba/sRLgAyX8seq8yYy3uSViXwcs969zsIzbA5SfxAgsEx2imtHnwn oVhRSABbJpIbz+gCFtQEl76ccQwr9SJfAQQerR5XXB/WUlkndQtJlta91chQfwhu MjyxTOg8Sc+vgpBri8VXMbXtOmlS0R2Nc/YJnlbmvIUbWNb71lLgoE3E1CGNWiCU kQWunb/f3w4y7XXqaiM0UVS5/IK5fvslIeI= -----END CERTIFICATE-----Generated at Sat Oct 10 18:00:30 2026 by rpki-client