$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa File: 66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa (raw, json) Hash identifier: qevGaxRmekKMrfTVlxI+2hyoLblOeK/yyTcUJMxE8uI= Subject key identifier: 97:12:6C:E4:F2:4A:9E:2F:04:C3:3A:58:62:61:F0:ED:06:78:61:43 Certificate issuer: /CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428 Certificate serial: 010D0C9F4328584EFCACC46C06C27961E22BC580 Authority key identifier: F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 399914 IP address blocks: 2606:7240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c4:6c:06:c2:79:61:e2:2b:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=5862d22f-a819-4604-9bf6-38236c87d533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:30:c4:80:bd:af:36:85:38:84:5f:92:dd: 81:3f:18:82:cd:64:14:80:99:6d:b5:cb:b8:4e:7d: 81:6d:83:b0:13:1c:16:76:d5:39:37:ef:37:41:b3: 7d:89:e5:c4:27:90:01:09:07:0e:d7:6f:6a:78:9c: 19:55:e9:26:82:9d:c9:2f:35:45:e8:9e:43:8d:88: 3a:46:c9:28:2c:c2:53:03:7f:77:89:80:e9:e3:81: e5:70:74:5c:51:23:87:2c:01:16:0d:7d:bf:fc:93: f3:00:7f:6a:f6:c6:98:e0:ee:b2:ac:76:e5:1b:68: 0a:59:9b:7a:d5:e0:9d:7d:ac:56:75:39:85:88:d9: a9:13:47:5b:ea:46:3e:72:c6:c2:5d:23:3b:6e:ad: 9e:c8:72:c5:4e:1f:ae:f2:59:13:41:62:99:af:9e: 0f:07:bb:d6:0b:15:14:e5:6e:89:50:8c:eb:79:a1: c3:50:bd:9d:08:0c:76:64:5c:18:6a:0c:1a:13:fa: 1b:69:61:f5:f5:f0:d4:3e:ec:44:53:d5:3f:d3:f0: 34:de:22:9d:23:41:27:70:10:61:72:b8:62:a1:d6: a7:5d:21:0e:fc:5e:a5:d2:88:42:5f:5c:6d:66:72: c6:3a:23:24:36:0b:83:b8:fd:09:a8:f3:a4:34:fb: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:12:6C:E4:F2:4A:9E:2F:04:C3:3A:58:62:61:F0:ED:06:78:61:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl X509v3 Authority Key Identifier: keyid:F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer sbgp-ipAddrBlock: critical IPv6: 2606:7240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c0:52:83:aa:88:d1:c4:93:35:30:fd:9e:08:bf:08:b8:59: 46:32:7c:99:0d:11:1a:02:25:1e:0b:77:66:3b:86:82:9b:83: 34:82:2d:20:2a:e2:cc:75:6c:e4:4d:5e:0e:26:0b:c6:35:0d: f6:0a:fe:27:b3:7d:eb:ab:02:f3:f8:b1:ee:9b:f2:80:0e:74: 6c:e9:21:dd:14:ae:87:54:22:6c:35:a4:6d:b1:f4:f5:59:b1: 36:e0:50:5c:67:0f:06:7f:5a:f4:5e:de:40:ca:70:d5:a0:28: a6:86:a1:3d:83:d6:d1:67:83:3a:6c:6a:88:16:41:61:6d:0d: 4c:b1:de:9e:d8:81:0f:4e:0b:91:31:58:e2:f9:12:9e:74:15: 92:ad:98:3d:5c:76:2e:c5:d0:ca:66:30:fd:c2:f0:f3:07:f3: bc:cf:01:55:04:d6:2c:b1:fb:59:fb:66:26:36:7d:04:35:b9: 66:ca:03:60:ad:14:a9:e5:1f:e0:22:95:c7:8c:a0:45:ba:9c: 10:da:85:4d:fb:e8:c8:b0:79:eb:60:3c:26:21:bc:e0:bc:58: 49:56:76:2f:ec:6b:cf:37:ca:42:4b:ee:3f:0c:24:52:c0:05: 43:ce:3c:c2:b0:c3:e3:80:9e:ee:8c:1c:76:ab:8c:e4:86:53: 13:83:dd:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMRsBsJ5YeIrxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZmNjgzZWUtNzViOS00ZWQ5LTllNDgtZTc0YThlODEw NDI4MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTg2MmQyMmYtYTgxOS00NjA0LTliZjYtMzgyMzZjODdkNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4MwxIC9rzaFOIRfkt2BPxiCzWQUgJlttcu4 Tn2BbYOwExwWdtU5N+83QbN9ieXEJ5ABCQcO129qeJwZVekmgp3JLzVF6J5DjYg6 RskoLMJTA393iYDp44HlcHRcUSOHLAEWDX2//JPzAH9q9saY4O6yrHblG2gKWZt6 1eCdfaxWdTmFiNmpE0db6kY+csbCXSM7bq2eyHLFTh+u8lkTQWKZr54PB7vWCxUU 5W6JUIzreaHDUL2dCAx2ZFwYagwaE/obaWH19fDUPuxEU9U/0/A03iKdI0EncBBh crhiodanXSEO/F6l0ohCX1xtZnLGOiMkNguDuP0JqPOkNPsLGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJcSbOTySp4vBMM6WGJh8O0GeGFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmY2 ODNlZS03NWI5LTRlZDktOWU0OC1lNzRhOGU4MTA0MjgvNjZjODFhMDAtOThhNS0z MWQwLTljNzMtN2UyY2JkNGFhNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZmNjgzZWUtNzViOS00ZWQ5LTll NDgtZTc0YThlODEwNDI4LzBmZjY4M2VlLTc1YjktNGVkOS05ZTQ4LWU3NGE4ZTgx MDQyOC5jcmwwHwYDVR0jBBgwFoAU9LUciF63Qhi2cIhLpjJ2EhRdm3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmY2ODNlZS03NWI5LTRlZDktOWU0OC1lNzRh OGU4MTA0MjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdwFKDqojRxJM1MP2eCL8IuFlGMnyZDREaAiUeC3dmO4aCm4M0gi0g KuLMdWzkTV4OJgvGNQ32Cv4ns33rqwLz+LHum/KADnRs6SHdFK6HVCJsNaRtsfT1 WbE24FBcZw8Gf1r0Xt5AynDVoCimhqE9g9bRZ4M6bGqIFkFhbQ1Msd6e2IEPTguR MVji+RKedBWSrZg9XHYuxdDKZjD9wvDzB/O8zwFVBNYssftZ+2YmNn0ENblmygNg rRSp5R/gIpXHjKBFupwQ2oVN++jIsHnrYDwmIbzgvFhJVnYv7GvPN8pCS+4/DCRS wAVDzjzCsMPjgJ7ujBx2q4zkhlMTg93j -----END CERTIFICATE-----Generated at Mon Sep 21 23:00:09 2026 by rpki-client