$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa File: e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa (raw, json) Hash identifier: pdgThSCct1pWN8eqe7scWYQLs8F1BoQCv17/P7tz/Nk= Subject key identifier: 64:5C:50:20:6B:CA:A0:7A:FC:AD:0C:D8:2C:75:FE:50:4C:DC:2B:EE Certificate issuer: /CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896 Certificate serial: 010D0C9F4328584F49752F3ED6FE6684484E7600 Authority key identifier: 0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5786 IP address blocks: 2607:2000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:2f:3e:d6:fe:66:84:48:4e:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db422334-b773-4892-acfb-85c95746b836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:0b:b3:29:0c:2e:33:bf:9d:7a:37:da:5a: 9a:d0:f6:32:e2:f7:05:c8:e0:c9:6e:da:79:cb:82: e5:99:69:fc:9d:79:dc:9c:dd:6d:33:32:d8:4f:4e: f9:65:cf:86:27:58:16:51:f9:40:68:c3:e3:26:5a: 61:f7:4e:bf:3c:09:eb:78:0d:79:fa:bc:da:58:46: a5:4e:b7:62:1c:3a:4c:1e:ba:bc:ec:b4:05:d0:a4: 66:7d:84:90:49:a5:7e:b5:73:22:d3:43:68:05:fe: 74:33:6e:c8:b7:9a:02:c1:7f:48:70:fe:c5:f5:64: de:56:00:cd:af:bc:3d:5c:88:25:ed:e1:1e:ff:0e: b3:4f:3c:f0:f0:7b:a0:8a:f2:d8:b5:94:1e:8e:92: cb:56:07:3d:dc:69:67:d6:a1:eb:84:57:61:8f:56: c5:28:22:e9:06:29:b0:0c:dd:6d:19:30:82:87:b5: b3:25:b8:a7:c5:3d:aa:98:70:ac:50:35:f5:91:a7: 76:93:c7:dc:87:2e:51:ec:2f:be:ce:87:b7:9f:6e: bb:f7:84:27:5b:1d:10:3e:9d:02:55:b9:28:a8:84: 01:33:8b:29:35:a6:8f:0b:dd:4f:5e:1a:6e:9f:4e: 93:a8:8d:ce:fa:b5:6b:60:0c:d1:fd:5b:f1:d9:ea: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:50:20:6B:CA:A0:7A:FC:AD:0C:D8:2C:75:FE:50:4C:DC:2B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl X509v3 Authority Key Identifier: keyid:0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer sbgp-ipAddrBlock: critical IPv6: 2607:2000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:73:ca:6c:d7:ff:e8:11:fb:29:9d:07:14:66:93:17:b6:9f: f2:9c:96:eb:1f:8e:00:0b:03:26:53:8f:a5:13:64:23:6d:de: 84:1f:e1:76:ee:26:af:11:e2:cb:9d:73:e5:0f:cf:e8:00:86: 1f:66:7d:ab:cb:e0:93:cd:cc:71:8a:76:01:7a:0f:36:68:c0: 72:ba:77:ea:45:7a:87:72:fb:28:05:95:b3:22:e7:a9:62:0e: 0e:ec:21:f0:3b:0e:30:08:ed:c6:ce:18:66:f5:17:7d:e8:8d: b7:2e:36:3d:b2:5e:c4:db:68:16:69:62:0e:1b:66:aa:89:cd: 66:60:e5:94:14:d6:0b:df:32:55:05:0f:2b:f2:13:47:ce:d2: 42:5a:4a:77:b2:fc:e1:75:57:4d:9e:a1:35:bd:17:84:e1:0b: 41:b8:82:25:96:c2:39:54:36:36:8c:44:ed:25:3c:27:8c:7d: e7:79:c0:21:61:90:1c:ba:92:df:68:af:c1:16:e4:b6:7c:e2: e6:c5:ef:75:f7:02:c4:2b:df:48:d2:d0:60:79:67:3c:55:e0: 5f:22:86:ae:cd:86:85:46:92:9f:f8:ee:9a:58:03:68:18:76: 99:69:16:a9:cb:99:62:04:a3:23:c0:e4:77:d3:38:fe:d4:e1: fe:cb:d2:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdS8+1v5mhEhOdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY0YTA4M2YtMjgxMC00ZDZlLWE3YzMtODFjOGIxZDYx ODk2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI0MjIzMzQtYjc3My00ODkyLWFjZmItODVjOTU3NDZiODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmkLsykMLjO/nXo32lqa0PYy4vcFyODJbtp5 y4LlmWn8nXncnN1tMzLYT075Zc+GJ1gWUflAaMPjJlph906/PAnreA15+rzaWEal TrdiHDpMHrq87LQF0KRmfYSQSaV+tXMi00NoBf50M27It5oCwX9IcP7F9WTeVgDN r7w9XIgl7eEe/w6zTzzw8HugivLYtZQejpLLVgc93Gln1qHrhFdhj1bFKCLpBimw DN1tGTCCh7WzJbinxT2qmHCsUDX1kad2k8fchy5R7C++zoe3n26794QnWx0QPp0C VbkoqIQBM4spNaaPC91PXhpun06TqI3O+rVrYAzR/Vvx2eo3qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGRcUCBryqB6/K0M2Cx1/lBM3CvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjRh MDgzZi0yODEwLTRkNmUtYTdjMy04MWM4YjFkNjE4OTYvZTExYzA5NTAtMzI3ZS0z YmRjLWI4MGMtZGI0YWFjZmI0OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY0YTA4M2YtMjgxMC00ZDZlLWE3 YzMtODFjOGIxZDYxODk2LzhmNGEwODNmLTI4MTAtNGQ2ZS1hN2MzLTgxYzhiMWQ2 MTg5Ni5jcmwwHwYDVR0jBBgwFoAUCjDmW7aiB8ghajQ5YQCs05+CDT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjRhMDgzZi0yODEwLTRkNmUtYTdjMy04MWM4 YjFkNjE4OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsc8ps1//oEfspnQcUZpMXtp/ynJbrH44ACwMmU4+lE2Qjbd6EH+F2 7iavEeLLnXPlD8/oAIYfZn2ry+CTzcxxinYBeg82aMByunfqRXqHcvsoBZWzIuep Yg4O7CHwOw4wCO3Gzhhm9Rd96I23LjY9sl7E22gWaWIOG2aqic1mYOWUFNYL3zJV BQ8r8hNHztJCWkp3svzhdVdNnqE1vReE4QtBuIIllsI5VDY2jETtJTwnjH3necAh YZAcupLfaK/BFuS2fOLmxe919wLEK99I0tBgeWc8VeBfIoauzYaFRpKf+O6aWANo GHaZaRapy5liBKMjwOR30zj+1OH+y9J7 -----END CERTIFICATE-----Generated at Tue Sep 29 15:00:28 2026 by rpki-client