$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa File: 57fa0ca6-1715-3f75-9307-19d735520956.roa (raw, json) Hash identifier: Qtfov4nPy7aVGp8sV+h/uCs7HO5JTIHrfTeYltaQwuQ= Subject key identifier: D0:28:76:97:61:6D:0E:BD:84:31:C4:9B:87:DC:F4:6D:A5:52:42:98 Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584EF87CB6B777EA182B1167BD80 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 401333 IP address blocks: 2607:d4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b6:b7:77:ea:18:2b:11:67:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=77ab35a7-6efd-4c11-a612-1eb35eb04477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:2e:16:fc:66:5c:85:7c:27:c6:85:e1:ec: de:7d:95:eb:ff:f1:7b:69:bc:cd:7f:49:34:22:64: 5d:bf:12:52:62:29:08:c2:b9:76:24:64:e7:be:b5: 63:52:1d:b8:a8:61:34:ce:2e:3a:fd:10:1c:45:d4: 8e:85:85:f2:64:cc:82:7e:eb:0f:68:bf:55:b6:6b: a7:41:50:db:7d:03:c0:f6:83:cd:eb:5f:eb:6b:59: 1a:48:a3:d7:14:b4:82:e5:86:db:e5:00:d9:5a:0f: 11:ea:f8:05:63:14:7d:ad:cb:3d:23:32:52:99:f9: c8:bb:54:94:78:03:23:e9:7a:41:0e:ac:91:54:37: 59:fc:91:2c:18:e8:a3:5f:af:e1:20:16:ec:aa:be: da:20:96:30:0b:12:d8:c4:f0:5f:75:c2:55:96:cf: 65:c8:29:a5:10:b9:28:b7:a9:6a:39:81:7b:f7:9e: 64:b9:a5:a2:21:e5:92:a8:60:00:55:7b:db:ac:9a: c6:cb:52:ac:6d:26:c0:1b:9e:f6:07:3b:70:fc:c4: fa:e9:4b:41:df:8e:b2:98:1c:68:8a:bc:d9:74:a2: e0:5f:52:e3:58:fa:99:90:31:e5:d1:4e:55:92:41: df:45:f1:97:7a:05:ff:a0:60:90:d3:b7:67:28:31: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:28:76:97:61:6D:0E:BD:84:31:C4:9B:87:DC:F4:6D:A5:52:42:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv6: 2607:d4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:32:5b:2a:2b:4a:70:90:43:43:19:0a:03:5c:a5:0f:19:1d: d9:7f:48:ce:08:91:1f:9f:f3:4b:94:32:30:8e:bc:23:52:f4: 89:df:99:91:03:28:1b:11:57:6f:b2:bf:6b:14:f7:1d:b8:ec: fa:2e:35:46:f0:cc:76:e6:6f:90:96:4b:64:db:44:a8:7c:c6: 5a:e3:07:96:7c:84:f3:85:be:84:5a:ac:e0:1c:55:a0:fc:51: 9d:69:44:6e:46:2d:5d:a8:6f:24:68:0d:e2:b0:6d:dc:62:fb: f9:c0:ea:c4:94:c8:36:ec:42:bf:63:1d:ea:9a:31:16:2a:49: a9:e6:e2:32:cd:be:19:05:26:c1:7b:ba:cc:b7:51:d2:9e:be: 78:8e:43:77:ca:2c:c0:a3:da:2e:b1:fa:3c:ab:1a:a0:8c:7e: 3a:b5:1f:71:a9:5c:41:05:f7:da:fa:b1:c0:95:a8:4f:15:c5: 66:a1:a7:dd:4c:64:0a:50:61:e1:6c:71:20:a3:ed:dc:9e:79: 46:90:ab:aa:c1:aa:b3:04:47:27:d2:77:30:7a:84:d4:56:3a: 00:d8:3b:e8:c7:78:2f:bd:fd:22:4c:dc:dc:43:3f:b3:56:5c: ca:65:d3:6f:2b:22:99:1a:34:75:32:97:e5:ed:fe:ca:97:d1: c9:d5:5e:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE74fLa3d+oYKxFnvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NzdhYjM1YTctNmVmZC00YzExLWE2MTItMWViMzVlYjA0NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr8uFvxmXIV8J8aF4ezefZXr//F7abzNf0k0 ImRdvxJSYikIwrl2JGTnvrVjUh24qGE0zi46/RAcRdSOhYXyZMyCfusPaL9Vtmun QVDbfQPA9oPN61/ra1kaSKPXFLSC5Ybb5QDZWg8R6vgFYxR9rcs9IzJSmfnIu1SU eAMj6XpBDqyRVDdZ/JEsGOijX6/hIBbsqr7aIJYwCxLYxPBfdcJVls9lyCmlELko t6lqOYF7955kuaWiIeWSqGAAVXvbrJrGy1KsbSbAG572Bztw/MT66UtB346ymBxo irzZdKLgX1LjWPqZkDHl0U5VkkHfRfGXegX/oGCQ07dnKDEieQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNAodpdhbQ69hDHEm4fc9G2lUkKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvNTdmYTBjYTYtMTcxNS0z Zjc1LTkzMDctMTlkNzM1NTIwOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXMlsqK0pwkENDGQoDXKUPGR3Zf0jOCJEfn/NLlDIwjrwjUvSJ35mR AygbEVdvsr9rFPcduOz6LjVG8Mx25m+Qlktk20SofMZa4weWfITzhb6EWqzgHFWg /FGdaURuRi1dqG8kaA3isG3cYvv5wOrElMg27EK/Yx3qmjEWKkmp5uIyzb4ZBSbB e7rMt1HSnr54jkN3yizAo9ousfo8qxqgjH46tR9xqVxBBffa+rHAlahPFcVmoafd TGQKUGHhbHEgo+3cnnlGkKuqwaqzBEcn0ncweoTUVjoA2Dvox3gvvf0iTNzcQz+z VlzKZdNvKyKZGjR1Mpfl7f7Kl9HJ1V7E -----END CERTIFICATE-----Generated at Wed Sep 23 07:43:52 2026 by rpki-client