$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json) Hash identifier: JBED9HIyxCbe+YSBY1Xn8GEYswGmluUKcZctiLxnJ3E= Subject key identifier: D2:79:68:20:E8:9B:FD:62:DC:62:F0:24:A2:E5:3F:2D:0C:05:B7:90 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584F1467A64E067E838F703EB0E0 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 4226 IP address blocks: 2604:f586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a6:4e:06:7e:83:8f:70:3e:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=3decc39e-a2ea-422f-860f-4e5a1a566958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:88:78:97:4f:ab:d9:92:1b:1e:b6:bb:53: b2:fc:44:4d:e7:0c:0d:6f:07:fa:15:53:83:e3:8f: 82:93:0d:e8:70:d1:dc:f8:b8:7a:43:4e:bc:92:57: 12:22:48:be:db:ce:93:bd:fe:9b:af:cc:e3:04:b0: 74:c4:e6:7f:2e:eb:86:24:4a:a8:41:b2:7e:10:0b: a0:37:59:ea:2c:3f:33:44:dd:9c:4e:84:05:a6:46: 37:39:e4:0a:e0:a4:b4:e4:98:1a:7d:dc:7e:d3:d1: a3:73:49:c0:66:91:41:5c:de:0f:b4:00:4c:ea:58: 6e:41:77:5e:b9:2d:97:10:d4:7e:9e:be:78:cd:8e: 7b:94:53:70:96:82:28:c3:21:af:80:00:9a:26:41: 3f:86:6c:cb:1d:05:71:a4:c1:a0:ee:20:7c:61:67: 2b:9b:91:77:fe:13:49:87:dd:78:8a:54:f0:73:a4: 0a:1d:34:c7:15:5a:47:ce:ff:6b:e2:e3:c7:0e:59: 71:29:d1:22:1f:00:a8:f0:ec:ce:ee:ce:1e:e4:87: 57:79:3f:ff:d5:3d:72:27:15:69:76:b4:c0:5f:34: e7:cc:df:6f:17:a6:a4:84:c4:32:8e:14:e7:34:c9: 2b:9f:f5:28:d3:f4:aa:6d:1a:fe:56:09:be:02:d6: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:68:20:E8:9B:FD:62:DC:62:F0:24:A2:E5:3F:2D:0C:05:B7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f586::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fa:d3:79:f8:88:4b:a5:1e:f3:4e:73:c3:98:92:f8:57:d9: 82:c9:bc:0d:18:10:80:b5:20:8b:e8:a4:2c:af:d9:e8:c0:68: 2b:bf:68:75:70:59:b6:df:13:63:81:31:6f:00:85:b0:26:14: a2:fb:29:27:89:8a:65:75:36:c4:f5:f0:c1:56:ab:18:24:d3: eb:7c:2c:46:a6:9f:dd:5b:e0:d3:d5:a7:78:e1:57:1a:66:18: ea:9d:c3:cf:24:55:dd:82:f6:73:c3:66:10:95:ea:9a:d0:82: 7f:03:b5:4c:7a:80:b6:96:7a:af:46:9c:0b:7c:ce:7f:83:a0: ac:e9:81:1f:11:88:ab:98:93:31:e0:c8:5c:5e:aa:3b:be:97: fb:82:87:37:a2:15:1e:34:78:36:ae:19:f5:a6:07:bd:4f:16: 3d:c5:2b:fa:95:83:0a:90:97:40:9f:06:18:56:6a:e2:58:fb: 83:87:34:c4:5b:e3:e0:29:20:0d:93:59:e2:43:20:75:ff:c6: 4d:fa:5d:ba:69:3e:db:69:d9:9a:f9:e8:e2:34:51:3e:79:5c: dc:27:90:c6:d6:22:7f:cb:4d:e7:3a:fa:16:34:c5:c3:54:d9: ec:0d:24:84:66:68:63:bb:30:f5:80:c8:36:86:7c:75:4d:22: 9b:15:74:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ6ZOBn6Dj3A+sOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk M2RlY2MzOWUtYTJlYS00MjJmLTg2MGYtNGU1YTFhNTY2OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhOIeJdPq9mSGx62u1Oy/ERN5wwNbwf6FVOD 44+Ckw3ocNHc+Lh6Q068klcSIki+286Tvf6br8zjBLB0xOZ/LuuGJEqoQbJ+EAug N1nqLD8zRN2cToQFpkY3OeQK4KS05Jgafdx+09Gjc0nAZpFBXN4PtABM6lhuQXde uS2XENR+nr54zY57lFNwloIowyGvgACaJkE/hmzLHQVxpMGg7iB8YWcrm5F3/hNJ h914ilTwc6QKHTTHFVpHzv9r4uPHDllxKdEiHwCo8OzO7s4e5IdXeT//1T1yJxVp drTAXzTnzN9vF6akhMQyjhTnNMkrn/Uo0/SqbRr+Vgm+AtaBTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJ5aCDom/1i3GLwJKLlPy0MBbeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODkwZjljMmUtNDI0Ni0z MTJiLWE4NjktZWJiMmNmYmRkN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1hjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC+tN5+IhLpR7zTnPDmJL4V9mCybwNGBCAtSCL6KQsr9nowGgrv2h1 cFm23xNjgTFvAIWwJhSi+ykniYpldTbE9fDBVqsYJNPrfCxGpp/dW+DT1ad44Vca ZhjqncPPJFXdgvZzw2YQleqa0IJ/A7VMeoC2lnqvRpwLfM5/g6Cs6YEfEYirmJMx 4MhcXqo7vpf7goc3ohUeNHg2rhn1pge9TxY9xSv6lYMKkJdAnwYYVmriWPuDhzTE W+PgKSANk1niQyB1/8ZN+l26aT7badma+ejiNFE+eVzcJ5DG1iJ/y03nOvoWNMXD VNnsDSSEZmhjuzD1gMg2hnx1TSKbFXRp -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:56 2026 by rpki-client