$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa File: d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa (raw, json) Hash identifier: uo65kb0H54rObT7Ys0QANmbXLOSgYaU2s8EQztoX8C0= Subject key identifier: 91:5D:A3:6A:3E:06:2C:47:31:B3:AA:F3:2B:0E:86:82:6F:F0:CE:3B Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584F4972B773BABFC6B041C56740 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2607:3640:ffcc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b7:73:ba:bf:c6:b0:41:c5:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1067e367-8f30-4b6f-a724-3e455b45b5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:b6:ba:47:b9:af:be:4d:ee:46:83:43:df: 46:fb:13:04:33:a0:b4:54:50:64:49:5a:95:bc:15: ec:0d:f8:2b:9f:08:d4:de:39:55:90:b3:59:d4:af: 28:ae:8e:8f:1f:9e:51:f4:b6:18:f5:4d:cd:d5:41: 3b:05:2b:71:87:9c:5a:3a:8b:90:d1:3f:7d:02:14: b5:db:7a:e2:b0:d7:43:00:4f:0c:4d:9c:b7:2f:1e: ef:2b:b4:8e:f3:35:23:31:05:93:ce:e2:ba:2c:f3: a2:5f:2d:00:67:d5:71:51:86:a8:fd:a3:1f:11:8d: b6:e4:17:f1:c5:3e:35:23:ae:4b:af:a1:af:52:4a: 1f:3a:64:cd:6f:f5:68:c5:55:98:94:76:e2:b0:8f: b0:6c:4e:b9:d5:56:78:c6:70:05:15:f4:26:9c:65: 6a:87:94:2c:88:bd:da:05:71:d4:fa:59:67:a6:a1: f3:03:50:0a:25:14:46:dc:11:bf:d0:58:b5:d6:8b: 00:70:c7:1a:e1:d3:43:85:a0:8d:46:2a:e1:6e:c0: 36:38:a1:ce:6c:63:8c:1e:ae:3b:a0:8d:a3:73:45: 4a:4e:17:99:39:74:53:d5:67:20:18:25:4b:a5:41: e6:8b:75:25:b0:a9:c4:8e:a4:b0:df:ff:72:9d:3f: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5D:A3:6A:3E:06:2C:47:31:B3:AA:F3:2B:0E:86:82:6F:F0:CE:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640:ffcc::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:11:fe:bc:31:be:b3:d4:69:09:ac:06:9f:5c:ae:21:ac:8b: 63:25:cb:1f:14:a2:30:dd:29:a1:d8:1e:af:c2:78:c5:a7:83: f9:19:66:ba:4e:e1:c6:88:70:ec:f0:23:fa:ca:4e:fa:ab:4a: 7a:48:62:80:93:c7:29:97:f9:36:55:69:b8:7b:46:e2:ad:1e: d8:77:c3:c2:09:d0:62:24:47:07:ce:fb:44:d5:eb:2e:6d:3f: eb:61:64:d5:a4:bb:c2:fd:fd:87:b9:b9:3f:5b:00:56:c2:df: c2:9d:b6:7d:61:12:29:1a:13:5b:1d:13:af:7e:94:2f:7e:db: 5c:0c:1f:82:f6:bc:b7:7b:6a:c8:b9:3d:54:55:a6:d2:76:45: 2c:1a:c3:4c:4f:92:e5:56:a9:fe:9b:66:b0:f6:ff:44:52:d5: 83:f3:60:4c:c0:d4:3d:0e:02:9b:01:c0:9b:0b:a2:9a:a1:42: ce:db:88:0c:33:76:ac:d0:70:bc:2c:ec:88:95:1f:4a:43:d5: 28:e9:e4:c1:64:25:a6:4c:91:c9:de:40:43:b8:87:5d:e7:71: d4:27:91:e7:9f:a7:36:51:2b:5d:3e:b9:a2:b8:3e:2a:4e:81: 2a:45:ca:8f:d8:f8:5f:b7:46:59:b0:f4:bd:c6:08:d9:bb:bc: 2f:06:d9:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcrdzur/GsEHFZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTA2N2UzNjctOGYzMC00YjZmLWE3MjQtM2U0NTViNDViNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulO2uke5r75N7kaDQ99G+xMEM6C0VFBkSVqV vBXsDfgrnwjU3jlVkLNZ1K8oro6PH55R9LYY9U3N1UE7BStxh5xaOouQ0T99AhS1 23risNdDAE8MTZy3Lx7vK7SO8zUjMQWTzuK6LPOiXy0AZ9VxUYao/aMfEY225Bfx xT41I65Lr6GvUkofOmTNb/VoxVWYlHbisI+wbE651VZ4xnAFFfQmnGVqh5QsiL3a BXHU+llnpqHzA1AKJRRG3BG/0Fi11osAcMca4dNDhaCNRirhbsA2OKHObGOMHq47 oI2jc0VKTheZOXRT1WcgGCVLpUHmi3UlsKnEjqSw3/9ynT9N4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFdo2o+BixHMbOq8ysOhoJv8M47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvZDhlZDhjZWItZTAxMy0z OGNmLTllMTgtNTE0YzNhNjM4OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgc2QP/M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkR/rwxvrPUaQmsBp9criGsi2Mlyx8UojDdKaHYHq/CeMWng/kZ ZrpO4caIcOzwI/rKTvqrSnpIYoCTxymX+TZVabh7RuKtHth3w8IJ0GIkRwfO+0TV 6y5tP+thZNWku8L9/Ye5uT9bAFbC38Kdtn1hEikaE1sdE69+lC9+21wMH4L2vLd7 asi5PVRVptJ2RSwaw0xPkuVWqf6bZrD2/0RS1YPzYEzA1D0OApsBwJsLopqhQs7b iAwzdqzQcLws7IiVH0pD1Sjp5MFkJaZMkcneQEO4h13ncdQnkeefpzZRK10+uaK4 PipOgSpFyo/Y+F+3Rlmw9L3GCNm7vC8G2f8= -----END CERTIFICATE-----Generated at Fri Oct 9 15:17:22 2026 by rpki-client