$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json) Hash identifier: i2i9VCruelgvlkeAScHifqXozds8tUsoGQ7gSv62sYk= Subject key identifier: E0:BD:DF:88:4D:1E:69:50:85:DC:6E:9D:5C:21:18:06:07:CA:3F:2F Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584F2ABD20DD2DA036A071AEC300 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 394056 IP address blocks: 2607:3640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:20:dd:2d:a0:36:a0:71:ae:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=29eb1e8c-05ab-4936-af52-935e23eb89e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:23:06:f7:34:dc:47:69:0d:20:e1:40:b8: 6a:b5:a8:bb:17:04:33:f2:f0:e6:a0:4c:73:31:18: 1c:7b:b2:56:1a:b0:88:c8:a8:47:71:f8:49:14:8a: 64:5b:4e:79:5d:83:90:07:b0:30:4c:68:1f:47:94: 5f:80:37:f0:7a:72:74:7e:80:bc:e9:c8:7a:8c:b1: 70:af:67:eb:2e:56:36:3b:af:f3:14:9d:2b:0b:12: cc:42:4b:f1:26:94:35:88:59:96:c2:54:28:40:59: c5:2c:0f:c2:bd:f1:af:2a:08:3d:6c:c2:31:14:30: 00:75:6d:79:28:44:9d:a8:d2:bf:fd:77:2f:07:f0: 75:7f:f0:5d:5b:57:e2:56:42:ac:4b:30:4c:4d:52: e3:09:01:88:62:25:80:91:f1:31:d3:55:54:bc:df: f4:9f:b0:62:fe:8c:21:e2:82:be:7f:ee:6e:41:26: a8:c7:18:03:0c:68:3f:dc:52:e6:e2:86:9c:f8:f2: a8:8a:a3:f8:f8:7e:a7:46:65:93:77:9b:ea:37:e7: 47:7e:54:16:aa:b0:0b:ec:fb:1a:f6:15:80:fb:75: 9e:e6:c5:2a:14:e9:ea:92:a2:69:ca:ad:b6:2d:c9: 38:d2:14:5c:84:d1:b4:a1:ab:25:72:bc:5c:d5:86: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:DF:88:4D:1E:69:50:85:DC:6E:9D:5C:21:18:06:07:CA:3F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:23:92:08:44:6e:51:90:af:ad:80:a3:0a:c6:34:fa:d2:4d: 2a:dc:70:97:82:b4:fd:26:d9:62:ba:30:ed:6e:bc:a2:75:76: bf:ff:f6:e1:0a:de:53:6e:e7:27:7f:81:a6:c5:ab:e2:cf:c6: fc:f9:93:57:f2:b8:70:5d:57:84:b3:da:08:b2:76:89:c4:cc: 7b:89:48:5d:b1:09:c9:ae:e4:c3:bd:c8:87:8d:79:79:bc:23: d3:ff:22:0f:b9:5a:c8:a0:77:86:47:c5:85:15:58:f7:75:81: f8:62:d0:9d:b5:8e:7a:2c:67:58:97:b4:75:c9:21:9c:e3:71: b8:0b:65:ee:79:e8:3d:1f:76:d2:7b:ef:06:10:bf:a8:80:a2: 1e:eb:9c:7f:a6:26:7b:cb:9e:34:77:72:13:9b:16:27:6a:62: f9:14:50:21:2e:33:09:8d:92:7a:bf:b9:a2:f6:19:98:c5:b5: f2:4b:63:49:9f:e6:9c:87:f9:ba:c9:16:11:22:48:ee:30:bd: 34:5f:4e:78:68:ee:95:35:aa:cf:a5:55:d6:ed:4d:ef:6f:0d: 8f:6c:fa:2c:66:32:1b:69:b0:24:be:22:ad:7c:d6:e1:d4:7a: aa:d9:4b:c7:e1:69:b5:5d:0b:d3:ea:d4:7a:6e:32:3d:97:cc: 39:0c:9b:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvSDdLaA2oHGuwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MjllYjFlOGMtMDVhYi00OTM2LWFmNTItOTM1ZTIzZWI4OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3AjBvc03EdpDSDhQLhqtai7FwQz8vDmoExz MRgce7JWGrCIyKhHcfhJFIpkW055XYOQB7AwTGgfR5RfgDfwenJ0foC86ch6jLFw r2frLlY2O6/zFJ0rCxLMQkvxJpQ1iFmWwlQoQFnFLA/CvfGvKgg9bMIxFDAAdW15 KESdqNK//XcvB/B1f/BdW1fiVkKsSzBMTVLjCQGIYiWAkfEx01VUvN/0n7Bi/owh 4oK+f+5uQSaoxxgDDGg/3FLm4oac+PKoiqP4+H6nRmWTd5vqN+dHflQWqrAL7Psa 9hWA+3We5sUqFOnqkqJpyq22Lck40hRchNG0oaslcrxc1YZDhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOC934hNHmlQhdxunVwhGAYHyj8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYTQyODhlZWQtNGY0ZS0z MGZkLWIxZDctYTUxNmIwODVmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkI5IIRG5RkK+tgKMKxjT60k0q3HCXgrT9JtliujDtbryidXa///bh Ct5Tbucnf4Gmxaviz8b8+ZNX8rhwXVeEs9oIsnaJxMx7iUhdsQnJruTDvciHjXl5 vCPT/yIPuVrIoHeGR8WFFVj3dYH4YtCdtY56LGdYl7R1ySGc43G4C2Xueeg9H3bS e+8GEL+ogKIe65x/piZ7y540d3ITmxYnamL5FFAhLjMJjZJ6v7mi9hmYxbXyS2NJ n+ach/m6yRYRIkjuML00X054aO6VNarPpVXW7U3vbw2PbPosZjIbabAkviKtfNbh 1Hqq2UvH4Wm1XQvT6tR6bjI9l8w5DJs5 -----END CERTIFICATE-----Generated at Wed Oct 7 05:00:55 2026 by rpki-client