$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa File: 1ddffba0-3e53-333f-853a-e50b07b5c118.roa (raw, json) Hash identifier: mKf1hnFfIsMq0khkUMz0NdOYLsEck29gQV48LCpAQtI= Subject key identifier: 01:75:AF:D4:5C:A7:49:AC:CD:D2:81:E3:DF:89:B8:39:C2:8D:BA:17 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F093D0AF372ECAB9C98698E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 399157 IP address blocks: 2610:a1:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:0a:f3:72:ec:ab:9c:98:69:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1f0703d8-c14f-4a74-841b-c64393655ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:d1:f1:0a:a8:73:8e:0d:6b:a1:a5:54:df: cb:c6:72:39:bb:84:d9:db:b2:7a:55:61:63:35:3d: 01:51:e0:c4:cf:5c:9b:fd:31:fe:fb:dc:51:35:9e: 6e:06:59:36:97:1e:1f:b3:1c:89:2c:df:ea:2e:d8: 27:69:10:a9:1e:2e:0a:c0:65:e6:96:df:fa:06:70: f3:1d:c1:60:cb:2a:ef:d7:c2:57:c9:1b:3d:5f:06: 92:a3:f2:06:fa:70:2f:58:fe:93:7c:db:c3:97:6e: 50:5c:6a:27:c4:43:04:00:4c:58:dd:10:b3:bb:a0: 16:36:b5:9e:90:2f:0e:fb:bd:11:34:cb:3f:46:86: 9a:1a:04:30:90:db:7a:a7:e8:e2:6b:b0:00:74:bc: ae:93:e6:7a:0e:e9:e6:eb:32:a6:6e:1c:ee:14:44: 55:db:9f:26:54:33:f7:42:ac:f3:42:46:e0:b3:74: 11:6d:14:a6:45:e8:32:87:5f:fb:54:c1:da:d5:bc: 99:66:f3:20:8e:4a:5a:86:67:b5:39:11:81:4c:0d: 4b:e3:01:fd:da:a6:f9:12:d6:34:24:68:f6:16:f5: 77:0e:0a:0f:2d:0b:33:37:43:9b:ee:69:8c:ad:c6: 62:58:c3:20:e2:35:8e:e6:79:90:7d:89:c8:1e:9b: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:AF:D4:5C:A7:49:AC:CD:D2:81:E3:DF:89:B8:39:C2:8D:BA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:3300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8f:3b:84:88:ce:1c:72:3d:15:a6:f0:95:4f:37:3d:ad:7c: dc:e7:2a:f4:7d:09:75:b8:43:c4:f9:f9:c5:51:d4:c7:09:1e: 35:82:09:c9:f1:d0:45:89:d1:c6:a2:86:d3:ba:e1:fe:68:01: 38:cc:b3:81:1c:7b:b4:15:c5:85:3c:93:b1:50:f7:02:08:59: d6:ed:b8:3e:54:c6:cc:1a:63:c2:ec:e5:84:ed:f5:68:2a:81: 2c:f0:f5:f5:c2:37:3e:47:b3:e8:a2:d9:26:3a:d3:b9:6b:4f: 8b:d7:0c:c5:04:6f:3b:22:ce:e4:a1:84:1f:0f:e1:e0:e3:14: 72:62:82:e1:7a:48:4e:7d:25:e8:7d:6e:8d:d9:fa:44:64:37: 49:96:dc:fd:f0:56:bc:6a:c8:bc:5e:b7:9b:66:8f:65:0d:66: bc:3b:b6:56:66:e2:f4:7b:13:be:44:df:89:f0:7e:de:1b:5a: 81:ef:b5:a2:8b:f6:3d:fc:99:fa:ef:ff:8b:65:ca:2e:ee:9a: c4:27:ce:cc:20:98:cc:d0:f4:af:7f:36:d8:5a:2a:c2:a5:e1: bf:2d:4a:4b:04:b9:e2:72:de:5d:c0:d4:d1:9c:25:20:7d:11: db:57:09:f4:57:06:60:b7:b9:2f:94:84:94:19:da:39:b4:86: b8:25:7b:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPQrzcuyrnJhpjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWYwNzAzZDgtYzE0Zi00YTc0LTg0MWItYzY0MzkzNjU1ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9TR8Qqoc44Na6GlVN/LxnI5u4TZ27J6VWFj NT0BUeDEz1yb/TH++9xRNZ5uBlk2lx4fsxyJLN/qLtgnaRCpHi4KwGXmlt/6BnDz HcFgyyrv18JXyRs9XwaSo/IG+nAvWP6TfNvDl25QXGonxEMEAExY3RCzu6AWNrWe kC8O+70RNMs/RoaaGgQwkNt6p+jia7AAdLyuk+Z6Dunm6zKmbhzuFERV258mVDP3 QqzzQkbgs3QRbRSmRegyh1/7VMHa1byZZvMgjkpahme1ORGBTA1L4wH92qb5EtY0 JGj2FvV3DgoPLQszN0Ob7mmMrcZiWMMg4jWO5nmQfYnIHpt4uQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAF1r9Rcp0mszdKB49+JuDnCjboXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWRkZmZiYTAtM2U1My0z MzNmLTg1M2EtZTUwYjA3YjVjMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWY87hIjOHHI9FabwlU83Pa183Ocq9H0JdbhDxPn5xVHUxwkeNYIJ yfHQRYnRxqKG07rh/mgBOMyzgRx7tBXFhTyTsVD3AghZ1u24PlTGzBpjwuzlhO31 aCqBLPD19cI3Pkez6KLZJjrTuWtPi9cMxQRvOyLO5KGEHw/h4OMUcmKC4XpITn0l 6H1ujdn6RGQ3SZbc/fBWvGrIvF63m2aPZQ1mvDu2Vmbi9HsTvkTfifB+3htage+1 oov2PfyZ+u//i2XKLu6axCfOzCCYzND0r3822FoqwqXhvy1KSwS54nLeXcDU0Zwl IH0R21cJ9FcGYLe5L5SElBnaObSGuCV7DQ== -----END CERTIFICATE-----Generated at Mon Sep 21 18:13:34 2026 by rpki-client