$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa File: a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json) Hash identifier: wrMzFf+nYqcbF89hPP+J0zxaKkVr12B8MRhX5qDkgzA= Subject key identifier: 8B:C1:B1:73:87:21:32:8E:1B:E8:14:F1:48:0B:D0:DE:99:1B:C1:BA Certificate issuer: /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1 Certificate serial: 010D0C9F4328584F42781C3B628CFE19DB10F500 Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 32554 IP address blocks: 2607:6b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1c:3b:62:8c:fe:19:db:10:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=29947653-15f8-48bf-8700-ea04e90d9365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:1b:3c:cb:aa:4c:e8:4a:3b:84:ec:16:9c: 99:e3:85:0e:8f:04:da:e7:30:67:63:a1:32:2b:3a: f0:c3:94:f8:db:f8:ab:2b:7d:08:ab:e1:e1:06:6d: 08:32:3c:62:8c:69:42:0f:3c:cc:cd:b3:9c:f1:fe: 24:3c:1d:b4:97:9e:29:a9:90:a2:96:1f:29:59:76: 21:90:a4:1d:20:65:0e:62:89:73:44:90:8a:73:56: 29:27:27:2a:56:8b:b5:45:b4:63:f5:53:1d:20:e5: 39:6a:c7:54:62:fd:df:46:da:05:26:cd:cd:0c:de: 04:7d:a9:6c:51:58:b7:b4:76:4c:f4:4d:f9:07:58: b2:b7:57:04:22:73:8a:a3:4b:8b:c0:e7:77:ca:c1: 23:37:ff:5e:7f:43:01:38:e2:45:5c:00:f9:2c:98: 19:0f:fe:1b:16:f9:61:c1:34:c6:c0:e8:d9:2d:a3: 12:38:de:b9:f7:fc:ca:a5:d6:20:7e:c8:be:ea:65: a9:f9:35:1c:b4:61:ab:f4:31:a7:ea:b3:e8:27:33: e4:78:ab:5e:37:ae:33:af:66:4c:7d:33:61:45:08: 81:e9:a5:e7:11:89:6f:4c:51:ef:dd:10:d9:e4:e9: de:bd:12:41:3f:a2:3d:4c:fe:7f:8f:43:91:ac:27: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:B1:73:87:21:32:8E:1B:E8:14:F1:48:0B:D0:DE:99:1B:C1:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl X509v3 Authority Key Identifier: keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:a1:d9:1f:5b:e8:48:aa:9a:7d:35:bc:6e:41:1a:0f:f1:68: eb:13:45:83:41:22:73:4d:01:37:25:78:b2:d7:4d:9b:15:5e: 03:78:7f:90:3f:a8:22:f4:ec:fe:e2:ab:11:49:5b:71:90:4d: 84:66:b0:f1:78:00:c0:61:40:74:a4:3f:01:86:43:7b:2d:5a: 51:1d:0a:f6:87:80:95:b0:3d:e9:b5:64:f3:70:60:1c:ff:3d: e0:06:ad:c9:a1:68:05:37:a9:fa:39:83:d6:73:b1:db:6d:19: b1:f6:44:23:bc:09:0b:65:75:f4:0e:a5:ec:ba:c4:da:12:b9: ad:11:59:70:fd:ea:11:88:03:30:c7:65:9e:4b:c0:84:ac:3e: ca:cc:16:40:60:c6:56:44:fc:8a:ba:85:75:ee:09:d2:dd:a6: 56:e5:34:ff:ba:33:6f:fa:ab:c3:6e:8c:37:b3:f2:82:17:7c: 5b:99:27:17:07:63:40:0a:d6:63:29:f3:80:0e:c5:89:dd:ad: 4a:ab:fb:f7:06:e6:3b:58:e8:32:21:a8:6e:67:eb:75:a1:19: f5:d5:04:b8:c3:51:2e:ab:52:17:4f:ce:c8:36:d6:c2:23:0d: 21:c5:9b:04:bb:86:82:e4:9a:1d:8f:89:62:57:ad:5b:a0:4b: 70:67:1e:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9CeBw7Yoz+GdsQ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0 N2MxMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Mjk5NDc2NTMtMTVmOC00OGJmLTg3MDAtZWEwNGU5MGQ5MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA8bPMuqTOhKO4TsFpyZ44UOjwTa5zBnY6Ey Kzrww5T42/irK30Iq+HhBm0IMjxijGlCDzzMzbOc8f4kPB20l54pqZCilh8pWXYh kKQdIGUOYolzRJCKc1YpJycqVou1RbRj9VMdIOU5asdUYv3fRtoFJs3NDN4Efals UVi3tHZM9E35B1iyt1cEInOKo0uLwOd3ysEjN/9ef0MBOOJFXAD5LJgZD/4bFvlh wTTGwOjZLaMSON659/zKpdYgfsi+6mWp+TUctGGr9DGn6rPoJzPkeKteN64zr2ZM fTNhRQiB6aXnEYlvTFHv3RDZ5OnevRJBP6I9TP5/j0ORrCdwywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIvBsXOHITKOG+gU8UgL0N6ZG8G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRm OWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvYThlZjhlYmUtOTJhNy0z NjY3LWIyNzUtYTBmZWQzNDI3ODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg0ZjljMmMtMjM4Yi00ZDIzLThl OGItYWIyZjVhMDE0N2MxLzQ4NGY5YzJjLTIzOGItNGQyMy04ZThiLWFiMmY1YTAx NDdjMS5jcmwwHwYDVR0jBBgwFoAUJvYUx7M4uObYmWgDAdqyOnczs9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJm NWEwMTQ3YzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDModkfW+hIqpp9NbxuQRoP8WjrE0WDQSJzTQE3JXiy102bFV4DeH+Q P6gi9Oz+4qsRSVtxkE2EZrDxeADAYUB0pD8BhkN7LVpRHQr2h4CVsD3ptWTzcGAc /z3gBq3JoWgFN6n6OYPWc7HbbRmx9kQjvAkLZXX0DqXsusTaErmtEVlw/eoRiAMw x2WeS8CErD7KzBZAYMZWRPyKuoV17gnS3aZW5TT/ujNv+qvDbow3s/KCF3xbmScX B2NACtZjKfOADsWJ3a1Kq/v3BuY7WOgyIahuZ+t1oRn11QS4w1Euq1IXT87INtbC Iw0hxZsEu4aC5Jodj4liV61boEtwZx5L -----END CERTIFICATE-----Generated at Mon Sep 28 23:06:28 2026 by rpki-client