$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3a8f9b60-95b7-3b6a-b8a3-b79d00c8d784.roa File: 3a8f9b60-95b7-3b6a-b8a3-b79d00c8d784.roa (raw, json) Hash identifier: skvNQQziWmiZvXvxGORHAZ8RmMPnRypNgJ4lFG/2umw= Subject key identifier: 28:0F:49:57:39:CE:C4:56:D2:A7:6C:2E:A5:75:D7:4F:34:C2:AD:A7 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584F06723A23287586F6CB3C0640 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3a8f9b60-95b7-3b6a-b8a3-b79d00c8d784.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2607:6bc0:8007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:3a:23:28:75:86:f6:cb:3c:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=7c142fa0-c7e2-4468-99f3-989b4170ea81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:81:c8:b8:d4:67:91:56:b0:05:04:a3:8c:96: 30:05:4f:ed:11:68:2b:c4:d5:bf:40:30:30:58:3c: ce:b1:9e:cc:a5:f1:9b:08:73:66:98:5b:0a:f0:86: 5a:74:a8:9c:ae:e3:9c:89:04:90:61:f3:77:c5:9d: 13:df:83:1e:8f:7a:50:47:3b:d5:bf:cf:60:0a:e6: fb:cb:cb:25:ce:43:ac:6f:c2:9c:38:a1:b8:c4:6c: 65:b6:33:59:2d:b3:2b:5e:2f:f4:5c:6c:e1:87:3f: 50:3e:39:07:d9:65:03:a1:28:f9:7a:5a:8d:f9:1b: d0:11:02:fa:e5:a6:92:56:ce:72:c7:4c:e0:a9:3d: e3:d6:5f:b2:d2:65:95:e8:be:30:37:cc:ff:ac:8d: 6a:aa:d4:cb:83:2c:31:8f:1b:8d:27:10:ce:b7:7b: 4f:cc:dd:37:0e:ae:df:8b:dd:45:79:aa:d2:ae:80: 5d:45:d6:c8:c8:b6:95:38:6c:dc:16:f8:a0:59:f4: db:7d:41:13:37:17:d0:01:78:9e:c8:38:19:12:ea: 03:6d:14:c6:f5:59:77:2d:f5:f1:50:1e:88:33:01: 13:74:6a:bc:66:9d:17:60:ea:14:04:a2:ea:c7:4f: 7a:3c:12:27:81:13:89:df:b5:38:28:e2:4c:27:ac: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0F:49:57:39:CE:C4:56:D2:A7:6C:2E:A5:75:D7:4F:34:C2:AD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3a8f9b60-95b7-3b6a-b8a3-b79d00c8d784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0:8007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:36:0c:d3:0c:fb:51:9c:95:25:d3:93:01:3e:2a:e7:4a:23: 29:30:c5:21:db:ab:2f:1e:a4:b5:ea:20:0b:e1:3b:5d:5e:fd: da:c7:1a:fd:ae:ae:8c:25:d7:b3:2d:ff:9d:f7:84:f3:a4:b1: a5:dd:c6:ad:ac:30:b3:9f:6e:fc:7a:cd:f7:7f:79:71:4c:80: 87:8f:c7:9c:c0:4e:a5:44:f4:fe:8d:dc:1f:a3:aa:0f:8e:0a: ad:5d:82:e2:3f:7c:86:02:18:dc:2c:8d:05:0b:58:29:f7:50: 32:fb:c3:aa:80:95:b1:f5:10:fd:40:ff:24:e7:f0:43:5c:0b: e2:1f:de:99:19:27:dc:d7:a4:4a:f4:2b:29:68:14:f1:7e:50: 16:f0:d6:98:35:fe:bf:3c:35:d7:67:4e:d1:26:9e:7e:18:6c: 80:f5:97:d4:22:a3:f7:b6:04:11:dc:19:6f:0f:0b:d1:93:00: dd:4c:26:e5:d4:8e:c3:73:1f:78:41:c8:d0:e6:57:37:f2:67: a8:ea:03:be:86:69:72:cd:fe:f4:98:84:a5:d9:0f:0c:10:28: ae:c5:c7:03:2d:5a:88:7b:e2:e2:50:e8:42:7c:0b:66:68:0d: 75:09:63:9c:d3:3b:1c:55:ec:12:57:10:6c:ce:6b:94:6e:11: 2c:da:49:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GcjojKHWG9ss8BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2MxNDJmYTAtYzdlMi00NDY4LTk5ZjMtOTg5YjQxNzBlYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYHIuNRnkVawBQSjjJYwBU/tEWgrxNW/QDAw WDzOsZ7MpfGbCHNmmFsK8IZadKicruOciQSQYfN3xZ0T34Mej3pQRzvVv89gCub7 y8slzkOsb8KcOKG4xGxltjNZLbMrXi/0XGzhhz9QPjkH2WUDoSj5elqN+RvQEQL6 5aaSVs5yx0zgqT3j1l+y0mWV6L4wN8z/rI1qqtTLgywxjxuNJxDOt3tPzN03Dq7f i91FearSroBdRdbIyLaVOGzcFvigWfTbfUETNxfQAXieyDgZEuoDbRTG9Vl3LfXx UB6IMwETdGq8Zp0XYOoUBKLqx096PBIngROJ37U4KOJMJ6xUtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgPSVc5zsRW0qdsLqV11080wq2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvM2E4ZjliNjAtOTViNy0z YjZhLWI4YTMtYjc5ZDAwYzhkNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrwIAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAs2DNMM+1GclSXTkwE+KudKIykwxSHbqy8epLXqIAvhO11e/drH Gv2urowl17Mt/533hPOksaXdxq2sMLOfbvx6zfd/eXFMgIePx5zATqVE9P6N3B+j qg+OCq1dguI/fIYCGNwsjQULWCn3UDL7w6qAlbH1EP1A/yTn8ENcC+If3pkZJ9zX pEr0KyloFPF+UBbw1pg1/r88NddnTtEmnn4YbID1l9Qio/e2BBHcGW8PC9GTAN1M JuXUjsNzH3hByNDmVzfyZ6jqA76GaXLN/vSYhKXZDwwQKK7FxwMtWoh74uJQ6EJ8 C2ZoDXUJY5zTOxxV7BJXEGzOa5RuESzaSWM= -----END CERTIFICATE-----Generated at Wed Sep 23 01:40:29 2026 by rpki-client