$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa File: ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa (raw, json) Hash identifier: xfwlDWsfqxSKboMIzAXEncuAhd0Z5kfHZu/v662eyfI= Subject key identifier: D1:73:C1:C1:4E:6D:DB:32:EF:42:03:5F:0B:49:08:B2:6D:BE:AC:09 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F2EED1E47E972C31C6EDF6500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 11404 IP address blocks: 2607:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1e:47:e9:72:c3:1c:6e:df:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=24ea10a8-2f7a-43c0-a273-1983938eb9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:a1:1a:99:fe:21:c9:14:8f:b2:25:73:4b: a5:35:c2:27:a7:c9:c8:78:58:f8:ff:0a:08:09:8c: 7e:08:f3:c3:07:1a:23:91:96:5f:d5:61:9c:6d:18: 53:d6:fb:5d:e8:6c:b5:5b:b4:a3:2f:fd:ab:e1:e5: 9a:55:75:8e:45:f7:d5:ac:1f:b2:a6:82:eb:95:eb: 7b:e0:3a:83:dc:b2:62:be:cd:86:49:26:d0:6d:79: c1:d7:cd:9b:53:b3:31:6f:c7:8e:91:62:43:38:5b: 2b:a2:35:3d:51:a5:31:33:ba:a0:0c:ef:f6:bc:ec: 16:5c:2e:71:43:e4:5e:49:ae:dd:d9:0b:4e:7a:2e: ce:ce:68:e1:6a:62:1b:02:fc:9c:e8:9e:d4:91:5e: 98:e3:12:96:05:cc:f0:5c:ca:41:c8:6e:bf:1e:00: 56:b2:3d:2e:35:60:58:bc:0a:8a:d3:b5:42:be:8b: d7:dc:5b:55:f6:9d:ae:22:84:0c:ef:1a:01:a2:0c: 98:4f:a6:b4:cf:ab:88:0f:25:b5:0d:d6:10:4a:b6: 8c:4a:00:19:20:30:bd:2a:41:d3:1d:98:8e:51:0f: ac:1a:77:ef:4d:5b:31:a1:87:68:65:7e:08:7a:7a: 8e:65:9b:29:18:af:4b:55:b3:8d:de:de:61:bf:55: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:C1:C1:4E:6D:DB:32:EF:42:03:5F:0B:49:08:B2:6D:BE:AC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a0:06:31:cf:a5:1f:7f:69:68:5d:bd:4f:c0:6b:c6:b5:bd: 99:ff:5a:e5:b6:2e:76:7d:46:6b:ab:5a:45:e0:d3:ea:4d:f1: 00:d6:06:38:04:78:65:8c:c5:a0:3d:df:55:cb:d8:49:ef:eb: 67:3c:de:1c:38:79:d5:b5:0a:57:e2:68:cb:74:a9:73:3e:ad: c1:b1:16:f8:71:0a:c1:4a:3c:eb:a6:36:56:3b:6d:53:4d:d3: 72:24:47:68:09:15:38:b4:d8:44:a2:54:c2:72:79:6c:3b:6b: 24:20:ba:26:51:32:0b:95:ea:f6:81:c1:c2:22:53:86:87:da: 4a:78:df:d5:4d:9a:86:e8:9d:b7:66:ab:aa:56:73:d1:3d:0f: d8:46:1b:f3:b4:97:c9:f4:22:d9:50:60:81:d2:54:bb:4d:26: d8:ef:cc:88:32:7d:9f:47:75:a0:3a:b7:02:8a:a9:39:e6:e1: 70:58:8e:10:b7:43:54:d9:96:dd:ab:b6:12:9e:9e:c6:35:e1: e0:4d:31:f0:41:0d:f2:8e:e6:64:7c:8e:84:9b:82:2d:3d:1e: 20:26:02:a3:ca:be:83:8c:7c:c3:05:5e:26:71:88:27:1c:e5: 29:1e:b9:6e:37:82:d5:04:62:2d:91:5d:2e:67:2e:6f:c7:77: b2:60:63:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7R5H6XLDHG7fZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MjRlYTEwYTgtMmY3YS00M2MwLWEyNzMtMTk4MzkzOGViOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg+hGpn+IckUj7Ilc0ulNcInp8nIeFj4/woI CYx+CPPDBxojkZZf1WGcbRhT1vtd6Gy1W7SjL/2r4eWaVXWORffVrB+ypoLrlet7 4DqD3LJivs2GSSbQbXnB182bU7Mxb8eOkWJDOFsrojU9UaUxM7qgDO/2vOwWXC5x Q+ReSa7d2QtOei7OzmjhamIbAvyc6J7UkV6Y4xKWBczwXMpByG6/HgBWsj0uNWBY vAqK07VCvovX3FtV9p2uIoQM7xoBogyYT6a0z6uIDyW1DdYQSraMSgAZIDC9KkHT HZiOUQ+sGnfvTVsxoYdoZX4IenqOZZspGK9LVbON3t5hv1UrwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNFzwcFObdsy70IDXwtJCLJtvqwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWY0ZDlkNzYtY2MxNS0z NDBmLWEwZDQtYmE2MDZkYzdlZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAloAYxz6Uff2loXb1PwGvGtb2Z/1rlti52fUZrq1pF4NPqTfEA1gY4 BHhljMWgPd9Vy9hJ7+tnPN4cOHnVtQpX4mjLdKlzPq3BsRb4cQrBSjzrpjZWO21T TdNyJEdoCRU4tNhEolTCcnlsO2skILomUTILler2gcHCIlOGh9pKeN/VTZqG6J23 ZquqVnPRPQ/YRhvztJfJ9CLZUGCB0lS7TSbY78yIMn2fR3WgOrcCiqk55uFwWI4Q t0NU2Zbdq7YSnp7GNeHgTTHwQQ3yjuZkfI6Em4ItPR4gJgKjyr6DjHzDBV4mcYgn HOUpHrluN4LVBGItkV0uZy5vx3eyYGPq -----END CERTIFICATE-----Generated at Tue Sep 22 16:03:55 2026 by rpki-client