$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json) Hash identifier: XVIOX7ttAs1nwbCLGahn6BeBJYOjXKT9staTmE3jS8c= Subject key identifier: 57:8B:73:E6:15:2C:6B:E7:A3:59:9A:86:FB:CA:EF:2E:D9:F7:BB:2E Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584F2EED18CF1E60D601ACBACB00 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 19782 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:18:cf:1e:60:d6:01:ac:ba:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=ad2260c9-dea6-4851-a945-fbdbbc2bcb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:e7:7f:f6:ce:04:43:06:56:81:4e:a5:54: c1:d7:41:f1:ad:a2:63:78:91:50:69:d9:e0:dd:c5: 1c:d2:cf:cf:b2:bc:82:8f:ad:e9:d3:95:7e:d4:8e: 0f:7d:91:82:5e:e1:e6:69:08:1a:20:37:0e:8c:2e: ca:c9:15:b7:0c:b3:40:80:bd:40:5a:3b:d3:dd:25: fa:56:aa:20:c1:de:6e:2f:e5:11:f0:92:6b:6d:17: 88:fa:3a:3a:c0:a5:56:db:9a:c2:33:2d:93:e0:ef: a8:44:a5:65:4c:6a:67:be:b2:49:ee:9e:ca:f8:24: cf:f4:9f:8f:d5:63:52:70:03:fe:c1:24:ac:c0:8a: 42:c5:71:4d:9e:60:b8:99:22:e7:00:96:8a:c0:ad: 29:f1:22:f3:87:b7:33:ff:56:5c:22:24:db:3a:fc: 74:1d:1d:7e:90:47:f8:59:4a:89:69:ca:3c:46:dc: 23:69:b4:1a:41:cb:0d:52:c8:92:78:93:f6:19:63: 57:aa:66:bd:8e:02:88:68:a6:67:b5:95:f6:ef:05: 4b:c0:71:b2:d7:58:f6:55:52:59:3b:dc:24:7a:7d: ba:4a:66:92:8a:4e:3c:85:ad:89:3f:05:d4:b9:16: d2:ff:e2:cf:fd:ed:3b:98:a4:d3:b6:70:7a:ce:6c: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8B:73:E6:15:2C:6B:E7:A3:59:9A:86:FB:CA:EF:2E:D9:F7:BB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1b:28:37:44:72:a8:da:56:52:c4:ec:5e:4a:20:4a:7e:ca: 17:a5:28:58:ce:ac:28:80:25:5a:33:4b:cd:bc:ef:d7:34:79: f1:a5:ea:37:fc:0a:54:4d:62:a6:7f:7f:d7:e8:65:9f:bd:e0: a6:ad:8d:04:64:d3:25:5a:d8:6a:28:b4:ee:0b:0f:bb:c6:7d: 3a:bd:f3:a8:bd:39:a4:55:02:33:3a:62:f6:2a:49:1c:5b:c9: 6e:e5:2e:dc:20:0b:a4:0e:d8:20:5c:db:32:a7:7d:cc:1e:36: 62:20:80:2f:be:36:69:52:56:d4:12:af:8b:4f:86:5a:a1:ce: dd:17:c8:6d:f4:7b:64:46:d0:e2:40:0b:4a:b1:7e:82:af:4b: 40:72:7c:85:36:10:f5:28:ff:50:b9:14:10:46:e7:85:0b:ce: d8:58:31:3c:c2:81:0a:cc:c0:6d:de:33:32:75:84:dd:20:97: 6b:79:23:a8:a0:5f:a9:41:b1:33:b3:8b:06:cb:06:1a:41:0a: bc:a4:ba:e9:cc:cd:85:dd:ae:e1:74:9c:15:ec:27:e4:e2:e4: aa:16:d4:4e:55:03:26:60:0d:24:2e:21:02:e7:53:ff:37:66: c1:54:54:56:18:c6:37:00:11:dd:b5:47:59:c5:ba:df:a8:4d: 15:85:b0:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7RjPHmDWAay6ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YWQyMjYwYzktZGVhNi00ODUxLWE5NDUtZmJkYmJjMmJjYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYjnf/bOBEMGVoFOpVTB10HxraJjeJFQadng 3cUc0s/PsryCj63p05V+1I4PfZGCXuHmaQgaIDcOjC7KyRW3DLNAgL1AWjvT3SX6 Vqogwd5uL+UR8JJrbReI+jo6wKVW25rCMy2T4O+oRKVlTGpnvrJJ7p7K+CTP9J+P 1WNScAP+wSSswIpCxXFNnmC4mSLnAJaKwK0p8SLzh7cz/1ZcIiTbOvx0HR1+kEf4 WUqJaco8RtwjabQaQcsNUsiSeJP2GWNXqma9jgKIaKZntZX27wVLwHGy11j2VVJZ O9wken26SmaSik48ha2JPwXUuRbS/+LP/e07mKTTtnB6zmz/VwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFeLc+YVLGvno1mahvvK7y7Z97suMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWGyg3RHKo2lZSxOxeSiBKfsoXpShYzqwogCVaM0vNvO/XNHnxpeo3 /ApUTWKmf3/X6GWfveCmrY0EZNMlWthqKLTuCw+7xn06vfOovTmkVQIzOmL2Kkkc W8lu5S7cIAukDtggXNsyp33MHjZiIIAvvjZpUlbUEq+LT4Zaoc7dF8ht9HtkRtDi QAtKsX6Cr0tAcnyFNhD1KP9QuRQQRueFC87YWDE8woEKzMBt3jMydYTdIJdreSOo oF+pQbEzs4sGywYaQQq8pLrpzM2F3a7hdJwV7Cfk4uSqFtROVQMmYA0kLiEC51P/ N2bBVFRWGMY3ABHdtUdZxbrfqE0VhbAJ -----END CERTIFICATE-----Generated at Thu Sep 24 10:13:45 2026 by rpki-client