$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa File: 20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa (raw, json) Hash identifier: y015A/WSmIi4lcSbn/qJUfpbahnpsHlG1sOOf4lsfVw= Subject key identifier: 3A:12:C2:C4:45:D5:FE:82:BF:1E:AF:4F:70:AB:7B:50:D9:68:49:95 Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584F0AA226F117EF6A29331DDC80 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 46265 IP address blocks: 2607:8240:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:26:f1:17:ef:6a:29:33:1d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=3a063dc3-c1bf-4d93-809b-de78d8d6e90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:ed:c3:f2:66:49:8e:89:61:05:59:c5:2a: b8:bc:6a:77:2a:a1:96:83:36:3e:65:e3:7d:87:c4: 24:98:78:be:6c:23:37:02:fc:fe:10:ee:22:22:4f: df:f7:0d:45:c6:bb:3d:35:b8:40:ad:17:5e:19:0f: 65:12:e5:71:cb:14:b5:a1:17:42:c8:6c:c7:8a:d5: e0:14:25:78:16:9f:29:47:ce:32:92:42:6d:53:b9: 4d:8c:38:87:2e:9d:3f:a8:2d:fe:f9:76:48:d4:5a: ef:6a:10:72:18:f0:6a:6d:47:26:2b:7f:bb:68:b9: de:cb:70:86:02:c6:a5:d9:4c:0e:3f:f0:e0:87:1f: cf:09:6e:e4:d6:9d:f1:43:55:1c:96:8d:7d:0a:88: fc:93:dc:49:89:0a:fc:85:b0:fd:b8:b8:23:74:32: ec:26:8c:cd:52:24:53:e7:b0:a9:a1:6f:22:5c:62: a4:33:06:82:4b:9b:38:f2:af:50:c0:da:1f:64:3b: 8d:3c:01:68:ed:8a:ec:ea:27:17:01:4c:89:97:d0: 23:75:6a:00:05:b5:b5:07:85:39:99:f6:a5:da:65: 6c:33:56:96:4e:46:cf:d1:76:a4:66:ac:d8:32:ed: bf:da:a7:ec:24:73:6f:a2:17:18:a3:dd:3f:35:0d: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:C2:C4:45:D5:FE:82:BF:1E:AF:4F:70:AB:7B:50:D9:68:49:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv6: 2607:8240:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ea:d8:1e:b0:52:dc:bc:ae:39:b5:03:cd:5f:ac:4d:24:25: b8:64:df:99:ec:0b:e4:e1:ea:69:0f:be:a8:53:40:61:75:63: af:a1:8a:10:fc:23:32:90:06:b1:42:f2:26:6c:ba:15:7d:7b: d0:f2:d9:f5:bc:fd:99:96:27:5f:5b:96:3c:2a:22:18:e3:3e: e8:14:a7:35:e2:70:33:64:c2:25:89:f9:ca:4e:56:0e:3a:c7: e1:5b:68:f2:a4:5d:f6:f4:77:e2:94:35:7b:2e:ef:8a:f5:c6: e2:0a:ed:c8:f6:2d:2c:2e:0a:1c:f5:d7:8e:97:31:17:67:c3: be:ce:a6:64:af:ab:71:fb:9f:45:b2:68:8a:53:85:41:a4:44: 89:28:a8:b7:df:32:9e:2f:29:ab:34:d4:cd:dd:14:6b:b0:31: bb:70:f7:6d:0f:fe:7d:3c:b7:70:31:dd:12:b9:78:40:e6:d7: 7e:e2:fb:ef:0a:6c:9f:b1:75:98:e7:95:ae:da:2c:9d:bd:6d: b8:2d:f2:d3:b5:c7:48:59:82:20:bb:4c:a2:a2:b7:a7:31:3b: b0:14:17:6f:f8:4f:fd:f5:50:72:9e:1e:e9:8e:65:9e:c6:0c: 23:69:cf:30:05:c9:58:e5:3a:bf:98:5d:a9:0d:63:f7:95:17: 22:ea:99:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8KoibxF+9qKTMd3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk M2EwNjNkYzMtYzFiZi00ZDkzLTgwOWItZGU3OGQ4ZDZlOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyztw/JmSY6JYQVZxSq4vGp3KqGWgzY+ZeN9 h8QkmHi+bCM3Avz+EO4iIk/f9w1Fxrs9NbhArRdeGQ9lEuVxyxS1oRdCyGzHitXg FCV4Fp8pR84ykkJtU7lNjDiHLp0/qC3++XZI1FrvahByGPBqbUcmK3+7aLney3CG Asal2UwOP/Dghx/PCW7k1p3xQ1Uclo19Coj8k9xJiQr8hbD9uLgjdDLsJozNUiRT 57CpoW8iXGKkMwaCS5s48q9QwNofZDuNPAFo7Yrs6icXAUyJl9AjdWoABbW1B4U5 mfal2mVsM1aWTkbP0XakZqzYMu2/2qfsJHNvohcYo90/NQ07XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDoSwsRF1f6Cvx6vT3Cre1DZaEmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvMjBmZDc2ZWMtZmY2NC0z YmRhLTgwMGEtYzQ0YzhkYmZjYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbq2B6wUty8rjm1A81frE0kJbhk35nsC+Th6mkPvqhTQGF1Y6+h ihD8IzKQBrFC8iZsuhV9e9Dy2fW8/ZmWJ19bljwqIhjjPugUpzXicDNkwiWJ+cpO Vg46x+FbaPKkXfb0d+KUNXsu74r1xuIK7cj2LSwuChz1146XMRdnw77OpmSvq3H7 n0WyaIpThUGkRIkoqLffMp4vKas01M3dFGuwMbtw920P/n08t3Ax3RK5eEDm137i ++8KbJ+xdZjnla7aLJ29bbgt8tO1x0hZgiC7TKKit6cxO7AUF2/4T/31UHKeHumO ZZ7GDCNpzzAFyVjlOr+YXakNY/eVFyLqmV0= -----END CERTIFICATE-----Generated at Tue Sep 22 21:59:52 2026 by rpki-client