$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa File: ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa (raw, json) Hash identifier: 5XlZGTIxc1P/ejxkblDxZKsozWZX48s5XMYy2s/gFc0= Subject key identifier: C9:00:53:90:C4:C6:80:77:02:14:E9:52:3C:9D:08:B7:1D:BC:30:DE Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584F698D81DF63295B1AF615C0F0 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 395842 IP address blocks: 2607:8c0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:81:df:63:29:5b:1a:f6:15:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=49f61d66-d75a-4457-a295-5f9182c556e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:9d:1d:eb:e1:76:64:25:b1:bc:5f:fb:fa: 59:2d:44:04:82:2c:fa:b0:b8:fe:90:22:11:27:2b: 59:f8:f7:0f:0e:4f:9e:93:ec:68:7a:e4:e0:2b:e8: 67:50:01:b0:50:9d:69:64:4d:4d:85:b8:5d:b4:01: 67:0a:12:55:08:6f:e1:74:df:2f:d1:e1:83:eb:0c: 4a:e9:7a:52:2b:d9:9b:2b:ee:44:1d:3a:98:0b:a5: 16:8c:69:d1:f8:58:f9:9e:d6:df:ec:59:9b:2a:76: 0a:c4:66:bf:3f:e2:11:4a:c5:0c:ad:4a:79:90:8c: 60:c7:98:6d:26:2a:da:a6:ce:aa:34:65:30:0c:a4: d8:db:ad:3a:47:6f:17:0f:2d:b6:bf:96:91:e3:2f: 53:5a:5a:1f:73:19:40:04:cc:0d:d1:7a:42:b3:1c: eb:0e:a7:7b:e6:15:49:8e:02:d3:20:25:69:d6:a0: 01:57:21:68:dc:4b:28:5f:14:e3:f5:02:7e:fa:34: 6f:45:3c:3b:84:70:ac:7d:72:22:c7:f6:17:a8:f6: ac:3c:3e:d7:c2:35:d9:ee:62:42:45:37:6f:87:91: 6c:68:cc:b6:66:cb:9f:90:fd:d2:5f:94:23:5e:87: 4b:3c:b3:c2:31:9e:16:a6:63:4c:56:ac:0c:56:a8: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:53:90:C4:C6:80:77:02:14:E9:52:3C:9D:08:B7:1D:BC:30:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv6: 2607:8c0::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:22:1f:8f:1a:dd:2b:b9:6e:5c:6c:03:38:ef:72:86:ff:5f: 4b:5e:1d:61:c2:f6:1e:65:20:29:f1:82:bf:d6:9a:0b:f9:14: 0d:84:5c:2a:2f:bb:ac:94:26:a0:c4:07:56:88:7b:63:c9:f2: 47:5b:74:c0:e0:dc:fc:9f:9c:a6:63:c3:37:e1:20:19:3b:80: 19:da:60:be:42:31:80:ba:77:2d:f3:5a:76:52:2c:93:5b:73: 53:19:6c:4d:bf:14:5b:1b:e5:6e:d0:8e:62:28:88:f1:bd:e1: e7:39:a3:af:f2:b3:11:58:38:d3:13:9f:a3:24:6b:09:91:61: ce:84:c7:ab:40:0d:15:78:43:67:e1:dd:95:95:b3:f9:e2:8a: ed:ad:23:24:9f:91:03:71:07:16:db:40:63:e3:a6:52:7d:80: d2:c4:29:a3:69:4b:e3:dc:91:44:98:bf:25:bc:7b:e6:cb:b2: f1:ac:59:88:a1:f9:33:31:11:d4:8e:c9:5e:e5:aa:36:98:d0: 87:1c:94:b8:61:aa:a9:04:01:98:68:ac:c4:44:cb:10:98:d2: dc:4d:6e:ce:17:12:69:8f:13:29:2d:ec:f7:03:42:9a:9f:da: 88:bf:98:f9:18:8f:32:be:0f:c2:9d:51:70:1d:b3:03:3c:e8: 64:c1:68:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9pjYHfYylbGvYVwPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NDlmNjFkNjYtZDc1YS00NDU3LWEyOTUtNWY5MTgyYzU1NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdidHevhdmQlsbxf+/pZLUQEgiz6sLj+kCIR JytZ+PcPDk+ek+xoeuTgK+hnUAGwUJ1pZE1NhbhdtAFnChJVCG/hdN8v0eGD6wxK 6XpSK9mbK+5EHTqYC6UWjGnR+Fj5ntbf7FmbKnYKxGa/P+IRSsUMrUp5kIxgx5ht Jiraps6qNGUwDKTY2606R28XDy22v5aR4y9TWlofcxlABMwN0XpCsxzrDqd75hVJ jgLTICVp1qABVyFo3EsoXxTj9QJ++jRvRTw7hHCsfXIix/YXqPasPD7XwjXZ7mJC RTdvh5FsaMy2ZsufkP3SX5QjXodLPLPCMZ4WpmNMVqwMVqjjmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMkAU5DExoB3AhTpUjydCLcdvDDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvZmY2YjBhNDMtMWQ0OS0z MzJiLTlhMmUtNGQyNWU5ZWVhNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAIh+PGt0ruW5cbAM473KG/19LXh1hwvYeZSAp8YK/1poL+RQNhFwq L7uslCagxAdWiHtjyfJHW3TA4Nz8n5ymY8M34SAZO4AZ2mC+QjGAunct81p2UiyT W3NTGWxNvxRbG+Vu0I5iKIjxveHnOaOv8rMRWDjTE5+jJGsJkWHOhMerQA0VeENn 4d2VlbP54ortrSMkn5EDcQcW20Bj46ZSfYDSxCmjaUvj3JFEmL8lvHvmy7LxrFmI ofkzMRHUjsle5ao2mNCHHJS4YaqpBAGYaKzERMsQmNLcTW7OFxJpjxMpLez3A0Ka n9qIv5j5GI8yvg/CnVFwHbMDPOhkwWhK -----END CERTIFICATE-----Generated at Sun Oct 11 19:41:21 2026 by rpki-client