$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa File: 1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa (raw, json) Hash identifier: atZhY1Fqn1PVCZ+4tTBMauwVm4HogXe/KO83Or8f6OM= Subject key identifier: AB:65:08:DF:F9:97:FA:11:9A:26:1A:8D:71:62:F9:39:A0:D5:C0:C9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F2EED1E779A9B074962FBF700 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54858 IP address blocks: 2607:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1e:77:9a:9b:07:49:62:fb:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=f7ad627c-d7a2-4c5e-9b80-d9d34bba3d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:9d:0b:a9:2d:33:75:08:2e:30:28:e6:8e: 6d:e1:2e:13:87:1d:b2:45:d7:b4:d1:20:45:b8:8d: 3c:65:b6:86:36:bb:0c:37:a4:f7:0b:92:bf:4d:0e: bf:c1:f3:c5:a9:e2:24:fc:6f:d0:30:c5:93:81:50: 1f:35:7c:5e:d8:57:6b:75:05:96:7c:18:ac:21:2b: 60:ab:73:10:60:63:39:be:f6:65:85:1c:0b:53:40: 7a:28:1d:bc:67:ab:5a:bc:6e:9e:c0:9b:b0:6f:70: 1e:77:ec:ef:00:53:45:a0:eb:0c:08:c6:b4:23:6b: 37:ce:59:94:3e:2e:b4:23:28:12:33:7c:63:d2:04: 05:83:ce:6b:c8:01:48:61:f3:3a:d9:b4:b2:a0:cf: 69:9c:7b:d5:b5:53:6c:64:12:b2:e3:ee:47:b4:b9: 57:ce:44:1a:cb:28:4a:bd:09:b5:5c:5d:c2:c9:52: 58:c4:48:3a:ce:93:07:34:6e:ff:cc:0a:c6:78:e0: f4:82:c6:0a:ec:29:41:2c:23:a7:bb:ba:4e:c5:83: d3:47:76:bf:1b:55:3c:4b:91:be:ce:66:ed:a4:8a: 8b:9c:99:d0:e4:68:61:45:43:68:7d:93:4b:0f:72: bc:27:7b:b1:1f:41:46:3a:58:ab:60:10:72:9f:1f: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:65:08:DF:F9:97:FA:11:9A:26:1A:8D:71:62:F9:39:A0:D5:C0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:75:4c:fb:f9:3a:ca:8c:94:df:77:98:1d:f1:87:b3:58:ff: 86:63:e7:a1:5f:b9:ad:f8:a6:92:2d:20:17:87:d1:16:95:ce: e1:cf:a5:09:38:f0:fc:94:66:85:f1:c0:76:62:8e:ae:27:11: e7:5a:43:7c:98:a3:eb:6f:84:ca:e4:25:43:c1:5f:ab:49:97: 31:50:dc:6f:d7:42:a5:92:2f:ba:5c:4c:13:54:b9:ac:73:87: 63:6e:51:4f:52:10:95:b4:6a:08:a1:d2:63:48:76:4f:75:4a: f2:d0:89:6b:dd:4d:d5:fb:1f:4a:c3:62:aa:02:ce:a2:24:a2: f5:43:0d:eb:36:f6:b1:06:62:5c:8b:ed:d2:18:73:9c:c1:e5: 4a:75:c1:1e:72:9f:ce:96:78:93:16:f7:b2:dc:be:fd:bf:20: 17:3c:cc:e1:cd:e1:e6:7a:f7:b7:e4:a2:79:1b:92:cc:57:f3: e6:cb:cc:d7:89:5b:59:74:c4:58:eb:61:ae:51:bd:be:d7:53: 0c:e0:4b:f6:3a:f6:7e:11:d5:5c:65:b6:16:ae:b6:78:f5:f3: e0:a8:94:4e:24:a6:30:6e:08:8b:67:85:8d:35:b0:70:46:76: b6:e6:dd:80:35:6c:6b:9f:59:01:51:93:b3:4e:a6:5f:2e:eb: 20:2d:2d:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7R53mpsHSWL79wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjdhZDYyN2MtZDdhMi00YzVlLTliODAtZDlkMzRiYmEzZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyCdC6ktM3UILjAo5o5t4S4Thx2yRde00SBF uI08ZbaGNrsMN6T3C5K/TQ6/wfPFqeIk/G/QMMWTgVAfNXxe2FdrdQWWfBisIStg q3MQYGM5vvZlhRwLU0B6KB28Z6tavG6ewJuwb3Aed+zvAFNFoOsMCMa0I2s3zlmU Pi60IygSM3xj0gQFg85ryAFIYfM62bSyoM9pnHvVtVNsZBKy4+5HtLlXzkQayyhK vQm1XF3CyVJYxEg6zpMHNG7/zArGeOD0gsYK7ClBLCOnu7pOxYPTR3a/G1U8S5G+ zmbtpIqLnJnQ5GhhRUNofZNLD3K8J3uxH0FGOlirYBBynx9qfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKtlCN/5l/oRmiYajXFi+Tmg1cDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTMwOGIwYWQtYjI1YS0z ZTE5LTlmMjQtMmVhNTY0MzA4NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBdUz7+TrKjJTfd5gd8YezWP+GY+ehX7mt+KaSLSAXh9EWlc7hz6UJ OPD8lGaF8cB2Yo6uJxHnWkN8mKPrb4TK5CVDwV+rSZcxUNxv10Klki+6XEwTVLms c4djblFPUhCVtGoIodJjSHZPdUry0Ilr3U3V+x9Kw2KqAs6iJKL1Qw3rNvaxBmJc i+3SGHOcweVKdcEecp/OlniTFvey3L79vyAXPMzhzeHmeve35KJ5G5LMV/Pmy8zX iVtZdMRY62GuUb2+11MM4Ev2OvZ+EdVcZbYWrrZ49fPgqJROJKYwbgiLZ4WNNbBw Rna25t2ANWxrn1kBUZOzTqZfLusgLS22 -----END CERTIFICATE-----Generated at Tue Sep 22 10:59:56 2026 by rpki-client