$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa File: 887ed675-9c65-3d98-9efe-a8220e32f001.roa (raw, json) Hash identifier: mAKywzGKn8aUIaOqc0Du3ZMlR6rIXOulErRK6MLPhkY= Subject key identifier: EE:60:06:31:EE:20:B5:9B:EA:63:41:F9:0F:77:43:9D:B6:25:23:FC Certificate issuer: /CN=d1cc8500-bae2-45fc-bc07-4020eda9134a Certificate serial: 010D0C9F4328584EF2E7533F20E552049BC8EF48 Authority key identifier: 53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 19058 IP address blocks: 2605:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:53:3f:20:e5:52:04:9b:c8:ef:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1cc8500-bae2-45fc-bc07-4020eda9134a Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=947fcc4f-83e8-4d91-95d8-19d44d3705da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:1f:2c:23:aa:87:b7:60:07:5e:26:8f:c5: 91:a2:f4:ee:3c:ad:db:ba:2b:89:d5:bc:ef:ff:30: a5:6d:0b:a3:fa:05:2a:f1:d1:46:2c:64:78:9d:f8: 5f:3d:7a:77:20:ec:e4:89:64:32:00:33:12:4e:28: 0a:f5:48:07:6a:40:60:b4:ab:91:fc:2a:32:e8:4c: 2a:67:c5:dc:a8:52:8a:db:d4:b7:5b:1a:e3:3b:83: 66:e6:68:55:34:65:00:9e:bf:c2:14:e7:94:32:ff: 37:a5:1e:f7:59:57:d9:6b:66:7a:06:e8:c3:4a:aa: 5d:0c:42:33:8c:43:08:67:23:da:56:03:d8:c6:e0: b7:99:74:6b:a1:2a:e5:7a:69:1c:6e:2b:da:65:3f: 08:5b:14:c4:3a:5d:61:53:68:cd:87:da:a2:9c:a1: 5e:5e:86:ee:13:14:0d:5d:b6:9d:5c:aa:a8:d7:db: d5:44:53:cc:90:20:6a:43:c0:de:05:02:d0:13:55: 42:d3:35:6b:6f:0a:1d:bb:8c:13:3a:ca:69:ee:5d: f2:cd:cc:cf:2a:b2:e4:e5:95:aa:8f:d5:ea:73:24: 27:6c:ca:78:bf:4d:2e:e2:21:0b:92:c6:63:90:d7: bf:0b:b8:10:2c:19:c3:46:f0:d6:f1:a6:a8:23:d9: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:06:31:EE:20:B5:9B:EA:63:41:F9:0F:77:43:9D:B6:25:23:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/887ed675-9c65-3d98-9efe-a8220e32f001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a/d1cc8500-bae2-45fc-bc07-4020eda9134a.crl X509v3 Authority Key Identifier: keyid:53:07:AF:B1:C1:33:61:14:2C:DB:99:A0:A1:01:38:C1:6A:5D:C9:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1cc8500-bae2-45fc-bc07-4020eda9134a.cer sbgp-ipAddrBlock: critical IPv6: 2605:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:75:3a:77:f3:ba:2b:b7:00:b7:1e:df:2f:19:cf:83:b4:97: e7:00:81:a8:1d:1c:af:fd:fe:07:bf:5e:49:a2:6c:4b:00:78: b5:5b:55:c3:74:f8:7f:98:a5:53:df:74:4e:75:78:b6:7c:1f: 32:92:0e:46:1a:a9:09:38:b1:8e:18:6f:42:24:b8:9d:29:fb: f8:22:33:d4:73:25:23:98:3b:a4:d9:6f:b9:7f:7d:ba:9e:b2: 1d:e3:c5:fe:50:66:e3:58:31:6f:4b:a2:e5:51:b6:c8:f1:2e: b3:4d:c9:ad:51:6c:2e:66:8b:76:0b:7c:31:70:21:0b:6c:30: 83:06:10:fb:73:06:9e:30:36:ba:1c:5a:d7:85:bb:41:de:fd: 8f:0c:28:f9:19:71:76:8c:80:8d:c6:6e:9e:ab:f5:6e:43:d2: 60:08:8a:26:e3:6d:27:59:7e:2c:3e:57:7a:19:56:33:f1:da: 07:ea:d8:9b:1a:f7:05:65:32:3f:c6:06:a7:cd:3a:83:a6:be: 2d:ba:f0:b9:a9:8b:a0:99:2d:40:85:64:86:7a:20:28:ee:af: a3:9c:1e:0b:ec:12:0a:12:f0:e8:92:0c:7b:20:26:35:84:3d: ee:04:2e:41:f4:1a:be:7f:56:36:2b:69:c1:d6:79:9b:29:f5: a2:94:4d:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7y51M/IOVSBJvI70gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFjYzg1MDAtYmFlMi00NWZjLWJjMDctNDAyMGVkYTkx MzRhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTQ3ZmNjNGYtODNlOC00ZDkxLTk1ZDgtMTlkNDRkMzcwNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRkfLCOqh7dgB14mj8WRovTuPK3buiuJ1bzv /zClbQuj+gUq8dFGLGR4nfhfPXp3IOzkiWQyADMSTigK9UgHakBgtKuR/Coy6Ewq Z8XcqFKK29S3WxrjO4Nm5mhVNGUAnr/CFOeUMv83pR73WVfZa2Z6BujDSqpdDEIz jEMIZyPaVgPYxuC3mXRroSrlemkcbivaZT8IWxTEOl1hU2jNh9qinKFeXobuExQN XbadXKqo19vVRFPMkCBqQ8DeBQLQE1VC0zVrbwodu4wTOspp7l3yzczPKrLk5ZWq j9XqcyQnbMp4v00u4iELksZjkNe/C7gQLBnDRvDW8aaoI9lRxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO5gBjHuILWb6mNB+Q93Q522JSP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMWNj ODUwMC1iYWUyLTQ1ZmMtYmMwNy00MDIwZWRhOTEzNGEvODg3ZWQ2NzUtOWM2NS0z ZDk4LTllZmUtYTgyMjBlMzJmMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDFjYzg1MDAtYmFlMi00NWZjLWJj MDctNDAyMGVkYTkxMzRhL2QxY2M4NTAwLWJhZTItNDVmYy1iYzA3LTQwMjBlZGE5 MTM0YS5jcmwwHwYDVR0jBBgwFoAUUwevscEzYRQs25mgoQE4wWpdyVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMWNjODUwMC1iYWUyLTQ1ZmMtYmMwNy00MDIw ZWRhOTEzNGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+dTp387ortwC3Ht8vGc+DtJfnAIGoHRyv/f4Hv15JomxLAHi1W1XD dPh/mKVT33ROdXi2fB8ykg5GGqkJOLGOGG9CJLidKfv4IjPUcyUjmDuk2W+5f326 nrId48X+UGbjWDFvS6LlUbbI8S6zTcmtUWwuZot2C3wxcCELbDCDBhD7cwaeMDa6 HFrXhbtB3v2PDCj5GXF2jICNxm6eq/VuQ9JgCIom420nWX4sPld6GVYz8doH6tib GvcFZTI/xganzTqDpr4tuvC5qYugmS1AhWSGeiAo7q+jnB4L7BIKEvDokgx7ICY1 hD3uBC5B9Bq+f1Y2K2nB1nmbKfWilE38 -----END CERTIFICATE-----Generated at Mon Sep 21 20:10:19 2026 by rpki-client