$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa File: 40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa (raw, json) Hash identifier: szfN88by23GbUxYY9B/rd4PsxviYIn36oztGVyXs3Gc= Subject key identifier: EE:96:12:C3:E0:8A:63:F1:F4:F8:44:FD:C5:F6:A4:07:28:61:A3:81 Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584F38B275FE01B3EDDE14892C00 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2604:e700::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:75:fe:01:b3:ed:de:14:89:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=e28f4804-a408-42a0-9967-ec4efbcb232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:5b:ae:7b:72:8b:81:a3:19:a5:5c:f5:27: 74:ed:12:4b:72:99:0d:f2:97:50:da:f7:90:9b:ee: 30:ca:4b:e8:2d:a8:f5:db:75:a0:5f:ab:eb:38:df: ba:aa:db:3b:e7:91:d8:86:db:80:95:c9:32:e0:72: 1a:aa:19:f6:b6:7d:ef:12:5d:6d:10:27:62:39:c6: e5:d1:df:9e:f1:8c:be:e6:50:d1:58:9b:83:96:9f: 5d:8f:e9:cb:22:fd:ae:4a:f7:1c:9c:8a:d1:42:78: a1:3b:49:4c:9b:a5:5e:9d:ae:72:a2:2c:2c:35:be: 8d:a1:d4:c2:72:f5:5d:22:79:ac:c1:d8:ee:bc:a5: 68:49:05:ec:22:d1:ca:29:d6:42:55:ce:1d:95:a8: ab:36:de:6d:c7:b0:0a:c3:e5:d5:9e:5c:c0:f7:46: 59:18:d3:e4:42:19:b0:f6:6a:8e:c9:60:d8:5c:a4: a3:4c:b0:52:4e:aa:d6:f1:41:b8:c2:4a:1d:bc:9a: 45:d6:2c:0e:d5:d5:3d:a9:c5:9c:7b:e8:30:e0:f8: 07:96:a8:60:d5:aa:27:3b:54:ef:a3:78:55:29:3a: 51:fd:e2:06:d2:34:42:9e:24:49:59:7b:41:d9:3f: 8f:cb:5a:72:cb:57:d3:00:29:a1:9e:67:ca:89:6f: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:96:12:C3:E0:8A:63:F1:F4:F8:44:FD:C5:F6:A4:07:28:61:A3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv6: 2604:e700::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c5:29:7f:b7:13:6d:23:5c:7c:ba:15:a2:0b:c8:a1:2e:7f: dd:9c:e3:a9:d2:0d:d9:2c:80:eb:05:19:1c:dd:6d:17:94:d4: a0:6b:23:86:1e:d3:8f:4b:a6:8c:d5:c1:3d:49:64:10:9f:52: 3d:01:b1:e6:be:d4:38:19:ab:58:bb:8d:b8:6c:47:a3:ad:64: 9a:5c:c8:85:7a:95:9b:41:f3:51:20:3a:07:6d:55:e9:5f:be: 40:ce:20:74:44:c6:bb:c6:e5:2f:a5:73:c7:93:b0:50:16:13: 15:a1:5c:69:95:f1:46:bc:0f:e5:90:c5:89:92:81:db:7d:8b: 65:6e:5c:d9:1b:f3:c0:ef:18:bf:28:d0:84:90:53:91:31:3c: 55:da:14:ba:54:e4:3c:d8:53:0d:b6:aa:50:ba:b2:c8:c0:4f: aa:32:f9:5f:16:e8:a0:3c:5e:61:c1:19:ac:f4:41:a4:71:c9: 27:67:48:a2:fc:2c:15:48:eb:67:e0:d9:39:69:1a:a0:c6:33: a7:b1:18:e8:93:c6:be:0a:a6:d0:fd:df:df:06:c5:12:51:12: 14:61:97:f1:33:94:79:64:50:87:bf:9e:4d:b4:5e:f5:d2:2b: 58:a0:37:73:6c:ad:0d:ad:e7:9b:4c:83:e6:20:6b:e0:f8:09: 93:6d:ea:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE84snX+AbPt3hSJLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk ZTI4ZjQ4MDQtYTQwOC00MmEwLTk5NjctZWM0ZWZiY2IyMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Bbrntyi4GjGaVc9Sd07RJLcpkN8pdQ2veQ m+4wykvoLaj123WgX6vrON+6qts755HYhtuAlcky4HIaqhn2tn3vEl1tECdiOcbl 0d+e8Yy+5lDRWJuDlp9dj+nLIv2uSvccnIrRQnihO0lMm6Vena5yoiwsNb6NodTC cvVdInmswdjuvKVoSQXsItHKKdZCVc4dlairNt5tx7AKw+XVnlzA90ZZGNPkQhmw 9mqOyWDYXKSjTLBSTqrW8UG4wkodvJpF1iwO1dU9qcWce+gw4PgHlqhg1aonO1Tv o3hVKTpR/eIG0jRCniRJWXtB2T+Py1pyy1fTACmhnmfKiW8uKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6WEsPgimPx9PhE/cX2pAcoYaOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvNDBlNjExZjItMjljMy0z MzUzLWJkNzUtZmRjNDEzN2Q0ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgTnAAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDFKX+3E20jXHy6FaILyKEuf92c46nSDdksgOsFGRzdbReU1KBr I4Ye049LpozVwT1JZBCfUj0Bsea+1DgZq1i7jbhsR6OtZJpcyIV6lZtB81EgOgdt VelfvkDOIHRExrvG5S+lc8eTsFAWExWhXGmV8Ua8D+WQxYmSgdt9i2VuXNkb88Dv GL8o0ISQU5ExPFXaFLpU5DzYUw22qlC6ssjAT6oy+V8W6KA8XmHBGaz0QaRxySdn SKL8LBVI62fg2TlpGqDGM6exGOiTxr4KptD9398GxRJREhRhl/EzlHlkUIe/nk20 XvXSK1igN3NsrQ2t55tMg+Yga+D4CZNt6h4= -----END CERTIFICATE-----Generated at Tue Sep 22 02:44:30 2026 by rpki-client