$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: YsZglykVTLupNw2FqYsd5Q9s+mP7yu3zFq0OkUCceJI= Subject key identifier: 4C:10:43:E5:A3:68:25:21:8D:77:AF:74:8D:FE:B2:F2:4B:18:B4:63 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584F2EED18B5A30898A44D6E9180 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:18:b5:a3:08:98:a4:4d:6e:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=bd31649c-b601-462f-9c10-b2f782979c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:89:32:19:b3:18:63:7c:99:21:ef:bc:f7: 07:a5:45:7b:0c:05:58:28:7e:df:de:3a:e1:de:03: 4b:1b:e0:2c:92:54:c3:03:c4:6e:5e:de:67:35:54: c8:10:8c:97:72:d7:91:49:d9:e6:fc:0c:f9:85:9d: 71:37:cb:5f:b7:7e:e8:76:dd:dd:55:8a:ca:c6:ed: f6:e7:b9:25:c0:5f:fc:8e:29:6e:e1:f6:ec:7f:6f: eb:3f:98:53:41:09:3b:0a:43:e8:ee:74:b4:f2:17: 14:f3:d1:dd:aa:5d:89:da:29:1b:c9:a5:34:3b:3b: be:84:f0:99:ea:59:4d:77:72:f4:24:58:88:30:9a: 7b:8e:aa:53:fa:15:d8:11:e6:e6:37:0d:06:e7:28: c6:14:d3:ee:b9:4b:cd:49:90:60:03:6a:95:44:c9: 0f:9a:c3:73:ad:24:76:4a:04:f6:aa:97:b9:f7:20: ea:b2:64:88:14:7c:b0:7d:3d:c4:c4:8d:4d:8a:b8: 14:80:13:ed:23:a4:c0:8d:22:a6:36:f4:0f:89:5d: 1a:a2:b5:f4:95:ac:38:65:eb:ae:11:79:15:21:8a: 12:7b:de:20:3d:11:e8:80:6a:33:cc:63:8a:0d:fa: 11:b8:4a:de:27:f7:18:f3:7f:fa:a3:ec:4c:3b:b8: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:43:E5:A3:68:25:21:8D:77:AF:74:8D:FE:B2:F2:4B:18:B4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a5:78:3b:15:ce:2a:85:ba:cd:4e:3f:5f:f9:5d:31:71:b0: 0d:35:d2:0d:f4:32:41:4d:0a:16:50:d8:18:b6:74:a7:27:ec: 7d:6a:61:3b:75:f7:97:8d:3b:0e:d2:a0:39:10:b1:5a:28:31: 97:9b:8f:d6:d4:24:c6:c2:a0:56:cb:00:57:24:58:57:ee:5f: 28:75:4b:b1:f2:d7:91:5f:dd:bf:dc:fd:f0:ca:f4:26:5f:5d: 62:4b:a4:d3:a0:be:08:c4:24:d6:10:a6:e0:c2:8b:d5:82:21: 48:e4:49:70:34:7a:0f:5d:2f:53:ab:cd:ec:06:d0:1d:2f:1d: 13:cc:4c:e0:8e:7b:32:35:a1:fb:33:54:71:61:76:cb:69:57: 1d:43:09:c3:6c:cb:17:9d:5e:cb:11:f0:36:93:78:87:c5:91: bb:f2:b7:55:2f:44:45:74:37:e9:47:ad:d3:0e:81:89:0f:ae: 61:c0:1c:76:54:82:b1:79:fe:7f:cd:20:b3:b4:49:58:ce:95: d7:1f:28:d4:91:6a:7f:74:df:87:a0:f6:7c:72:4e:4b:26:6b: f1:50:9a:7b:34:db:df:a4:cd:92:73:7b:5c:3c:f0:bd:07:dd: 58:b6:bf:3c:6c:c1:8b:a5:64:ae:7b:8e:26:9a:18:37:bb:09: 0a:63:ae:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7Ri1owiYpE1ukYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YmQzMTY0OWMtYjYwMS00NjJmLTljMTAtYjJmNzgyOTc5YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3iJMhmzGGN8mSHvvPcHpUV7DAVYKH7f3jrh 3gNLG+AsklTDA8RuXt5nNVTIEIyXcteRSdnm/Az5hZ1xN8tft37odt3dVYrKxu32 57klwF/8jilu4fbsf2/rP5hTQQk7CkPo7nS08hcU89Hdql2J2ikbyaU0Ozu+hPCZ 6llNd3L0JFiIMJp7jqpT+hXYEebmNw0G5yjGFNPuuUvNSZBgA2qVRMkPmsNzrSR2 SgT2qpe59yDqsmSIFHywfT3ExI1NirgUgBPtI6TAjSKmNvQPiV0aorX0law4Zeuu EXkVIYoSe94gPRHogGozzGOKDfoRuEreJ/cY83/6o+xMO7i/WwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEwQQ+WjaCUhjXevdI3+svJLGLRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIpXg7Fc4qhbrNTj9f+V0xcbANNdIN9DJBTQoWUNgYtnSnJ+x9amE7 dfeXjTsO0qA5ELFaKDGXm4/W1CTGwqBWywBXJFhX7l8odUux8teRX92/3P3wyvQm X11iS6TToL4IxCTWEKbgwovVgiFI5ElwNHoPXS9Tq83sBtAdLx0TzEzgjnsyNaH7 M1RxYXbLaVcdQwnDbMsXnV7LEfA2k3iHxZG78rdVL0RFdDfpR63TDoGJD65hwBx2 VIKxef5/zSCztElYzpXXHyjUkWp/dN+HoPZ8ck5LJmvxUJp7NNvfpM2Sc3tcPPC9 B91Ytr88bMGLpWSue44mmhg3uwkKY66K -----END CERTIFICATE-----Generated at Thu Sep 24 17:56:20 2026 by rpki-client