$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa File: 9fd150ce-2142-3c1e-a371-3207dc1e5083.roa (raw, json) Hash identifier: rQ64u8MDtI4vtvEaMUN9cIg8CgXJ7Uh6n8YyJ91xKn8= Subject key identifier: 64:83:DE:D0:28:B5:70:D4:7A:17:3A:FF:63:3C:90:B6:87:0F:C9:83 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584F2957B8B54768293079AC8200 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14270 IP address blocks: 2607:f118::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b8:b5:47:68:29:30:79:ac:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=8e38de29-3b81-48ec-a0bc-de2d3db88034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:12:50:20:bb:96:7e:29:e5:46:99:48:55: c8:8b:3c:7e:38:2f:c4:33:93:dc:ef:c4:0b:9c:d4: 74:25:79:56:a9:84:ba:22:fd:4b:44:59:d2:1c:f2: 76:ff:c4:4e:8c:90:a8:05:95:f4:7d:95:00:36:4f: ce:4f:3c:a4:a5:e0:bb:a1:dc:88:5a:d8:ba:a4:02: bb:aa:cb:4a:5a:59:87:a3:31:28:b7:0a:45:fd:19: 9f:ba:9f:08:aa:5e:31:f6:18:95:5a:49:90:53:8c: d5:8b:69:0b:23:6c:52:b4:62:f3:9b:80:af:8c:ae: fc:f4:b2:89:f9:26:c7:73:74:c2:a1:5e:a5:bd:d3: 10:b0:6d:08:3c:0f:e1:b4:ec:36:54:ae:bc:9f:8e: 51:81:1d:9a:3c:81:9f:e1:de:7d:a4:19:61:0d:c4: b4:ca:65:38:c9:6e:91:9c:86:9f:02:a1:88:54:65: bc:00:99:0c:f7:01:62:e4:1e:13:c2:60:da:1e:6c: c5:9c:cd:ac:e2:a7:2e:75:08:56:e1:f7:33:58:9f: ab:4b:55:58:e1:39:3d:1f:79:95:f9:d8:e6:12:ee: f8:f7:60:b8:88:54:24:26:5f:8c:4a:f7:b1:98:78: cc:d5:5a:23:a7:76:37:fa:55:1b:cb:83:1e:31:27: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:83:DE:D0:28:B5:70:D4:7A:17:3A:FF:63:3C:90:B6:87:0F:C9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv6: 2607:f118::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ac:6a:93:3d:94:20:53:3e:e7:23:27:9d:cd:4b:6e:ed:f1: ab:f2:e3:87:11:30:b7:01:ea:3b:6a:ea:6f:29:c7:56:9a:1c: b3:d1:b4:c8:0b:6d:77:e5:1a:40:4c:6b:a8:b1:91:22:8e:22: 96:ea:29:35:28:76:2e:16:f9:ea:f8:39:79:e6:54:62:10:b5: b3:bb:23:18:f4:a1:5c:9c:1f:73:80:f6:f5:ca:28:15:d4:c7: 4c:fd:5d:c1:35:aa:08:35:a6:18:34:54:27:66:39:7a:30:08: 71:2d:bf:8e:0b:7f:87:fa:94:d3:8e:e7:3e:f2:75:43:ad:2f: 68:a6:bc:1a:1a:59:2c:2e:c9:65:3f:d8:58:03:d6:aa:68:b1: 87:91:bd:23:1a:1b:91:42:64:7f:29:d6:28:e8:58:6e:b1:48: 8a:88:6b:52:1b:fb:d9:c5:ce:e9:56:b7:84:77:ad:09:64:85: 2a:5b:c1:d6:ef:49:de:f5:23:bc:a2:aa:03:d5:96:d5:ff:af: 78:7d:6b:fd:b5:0d:19:c8:05:f3:ed:df:f4:cf:53:2a:49:c5: 5e:eb:2e:49:6d:db:a6:7f:f1:1d:2f:3a:a4:f8:47:41:96:54: c9:bd:84:dd:42:b4:6a:ed:95:9d:a4:65:49:e6:ce:2f:0f:7d: c1:0d:05:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8pV7i1R2gpMHmsggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OGUzOGRlMjktM2I4MS00OGVjLWEwYmMtZGUyZDNkYjg4MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpYSUCC7ln4p5UaZSFXIizx+OC/EM5Pc78QL nNR0JXlWqYS6Iv1LRFnSHPJ2/8ROjJCoBZX0fZUANk/OTzykpeC7odyIWti6pAK7 qstKWlmHozEotwpF/Rmfup8Iql4x9hiVWkmQU4zVi2kLI2xStGLzm4CvjK789LKJ +SbHc3TCoV6lvdMQsG0IPA/htOw2VK68n45RgR2aPIGf4d59pBlhDcS0ymU4yW6R nIafAqGIVGW8AJkM9wFi5B4TwmDaHmzFnM2s4qcudQhW4fczWJ+rS1VY4Tk9H3mV +djmEu7492C4iFQkJl+MSvexmHjM1Vojp3Y3+lUby4MeMSefbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGSD3tAotXDUehc6/2M8kLaHD8mDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOWZkMTUwY2UtMjE0Mi0z YzFlLWEzNzEtMzIwN2RjMWU1MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfxGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmrGqTPZQgUz7nIyedzUtu7fGr8uOHETC3Aeo7aupvKcdWmhyz0bTI C2135RpATGuosZEijiKW6ik1KHYuFvnq+Dl55lRiELWzuyMY9KFcnB9zgPb1yigV 1MdM/V3BNaoINaYYNFQnZjl6MAhxLb+OC3+H+pTTjuc+8nVDrS9oprwaGlksLsll P9hYA9aqaLGHkb0jGhuRQmR/KdYo6FhusUiKiGtSG/vZxc7pVreEd60JZIUqW8HW 70ne9SO8oqoD1ZbV/694fWv9tQ0ZyAXz7d/0z1MqScVe6y5Jbdumf/EdLzqk+EdB llTJvYTdQrRq7ZWdpGVJ5s4vD33BDQVf -----END CERTIFICATE-----Generated at Tue Sep 22 18:24:38 2026 by rpki-client