$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: wDPcbvzUspWt9ZBiAuvcg4QqruEi8bHDzBWkeQUm3Bs= Subject key identifier: D0:B6:9F:7F:1E:7C:C5:47:3F:6A:C1:CF:E9:E3:18:FF:19:A1:28:14 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F2EED26205E0DB35E306ECE00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:26:20:5e:0d:b3:5e:30:6e:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=e3f0b7cc-d7bf-4226-b0e5-5e0f35e09fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:65:05:27:b1:cc:c3:f6:73:94:33:4c:0c: 31:05:9b:8c:3f:68:75:78:8c:ec:d8:0d:07:c6:08: 65:eb:e1:5b:97:79:0d:68:5e:c3:03:40:09:fd:80: 32:de:66:52:e4:d9:3c:78:f9:89:db:2c:6f:2f:a8: 02:24:5b:79:38:2f:07:55:94:28:1c:0b:8f:40:f8: 90:fb:9f:89:56:e9:1f:b1:84:00:f9:2d:14:73:c2: 93:33:31:ec:bb:69:6f:ff:c2:0e:63:66:f8:c1:03: 19:18:90:55:75:f2:34:46:33:4a:a9:ac:12:fa:85: cd:1a:a8:08:c4:47:96:b2:a6:1f:ec:14:33:ee:86: af:67:38:b6:c6:26:a5:9c:b9:36:d4:fd:a5:43:0d: a3:c7:44:55:5d:b9:91:2b:b1:ee:38:21:ae:c7:99: 20:78:cc:4a:67:7f:63:ae:ba:2d:35:07:2a:40:9d: c5:61:84:40:b5:46:42:81:5e:1f:3a:37:08:65:90: 89:62:03:fe:17:ec:ef:e3:09:f1:11:01:df:91:70: 64:3a:fd:dc:4a:1f:36:f9:b6:c8:e1:86:e2:c6:88: 9e:2f:03:43:bd:cd:92:11:ef:c3:33:bb:31:e2:a4: 36:04:c2:2a:f2:ce:2f:63:8b:93:b2:5f:43:d1:1a: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:9F:7F:1E:7C:C5:47:3F:6A:C1:CF:E9:E3:18:FF:19:A1:28:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a6:0e:4f:08:2b:fa:85:e6:40:a6:d5:58:34:29:a3:07:d3: 59:c6:5a:84:03:0e:9f:6a:e2:af:5a:80:99:13:1b:d8:59:8f: af:ca:d3:71:da:00:f7:8a:00:dc:97:57:65:3a:bb:af:a5:c9: 21:97:1f:7f:b3:0e:72:2d:d3:af:1b:aa:c5:bc:57:2f:17:23: 73:17:82:23:3e:ef:c2:5e:c2:78:9e:ed:e6:da:cf:24:06:c1: 14:c8:be:3c:2a:54:04:17:39:c0:c5:00:20:e6:c1:9e:37:e1: f5:44:75:ae:04:66:fa:1d:d9:21:98:35:35:1a:04:11:01:96: 3e:61:0e:4f:72:39:18:38:37:07:d4:76:e9:21:23:54:fb:1d: 52:93:6c:71:8a:db:8b:c0:2c:cc:c0:8d:9f:99:d6:3c:a4:01: 63:8e:6b:97:bd:f6:a7:61:69:16:66:b7:b7:db:ce:d5:2f:5e: dd:e7:ab:54:20:ce:e7:4c:59:8d:4f:e1:01:a6:a4:8d:a5:73: 24:f4:3f:bb:25:3f:fd:de:c1:5d:e9:4b:89:c2:90:ef:79:7b: 11:67:62:a3:f8:92:40:10:9e:f2:2c:bb:eb:36:61:72:36:17: be:04:27:d2:57:68:90:b2:e8:0b:c3:e2:f6:9e:0e:51:d8:3b: c3:c4:37:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7SYgXg2zXjBuzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTNmMGI3Y2MtZDdiZi00MjI2LWIwZTUtNWUwZjM1ZTA5ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou5lBSexzMP2c5QzTAwxBZuMP2h1eIzs2A0H xghl6+Fbl3kNaF7DA0AJ/YAy3mZS5Nk8ePmJ2yxvL6gCJFt5OC8HVZQoHAuPQPiQ +5+JVukfsYQA+S0Uc8KTMzHsu2lv/8IOY2b4wQMZGJBVdfI0RjNKqawS+oXNGqgI xEeWsqYf7BQz7oavZzi2xialnLk21P2lQw2jx0RVXbmRK7HuOCGux5kgeMxKZ39j rrotNQcqQJ3FYYRAtUZCgV4fOjcIZZCJYgP+F+zv4wnxEQHfkXBkOv3cSh82+bbI 4YbixoieLwNDvc2SEe/DM7sx4qQ2BMIq8s4vY4uTsl9D0RoDSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNC2n38efMVHP2rBz+njGP8ZoSgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEpg5PCCv6heZAptVYNCmjB9NZxlqEAw6fauKvWoCZExvYWY+vytNx 2gD3igDcl1dlOruvpckhlx9/sw5yLdOvG6rFvFcvFyNzF4IjPu/CXsJ4nu3m2s8k BsEUyL48KlQEFznAxQAg5sGeN+H1RHWuBGb6HdkhmDU1GgQRAZY+YQ5PcjkYODcH 1HbpISNU+x1Sk2xxituLwCzMwI2fmdY8pAFjjmuXvfanYWkWZre3287VL17d56tU IM7nTFmNT+EBpqSNpXMk9D+7JT/93sFd6UuJwpDveXsRZ2Kj+JJAEJ7yLLvrNmFy Nhe+BCfSV2iQsugLw+L2ng5R2DvDxDfH -----END CERTIFICATE-----Generated at Tue Sep 22 02:22:52 2026 by rpki-client