$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa File: 2e4c998e-b89e-3db0-aa05-063991b17be7.roa (raw, json) Hash identifier: HaNU6GA8SccGl3H4ojZD2aaOJ1IygWOOgQPXkdedXkk= Subject key identifier: 08:31:FB:0A:62:B1:A3:32:25:7E:CA:87:B7:A0:03:0F:FC:91:47:D1 Certificate issuer: /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a Certificate serial: 010D0C9F4328584F3CE27D043D22EF0572104880 Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3599 IP address blocks: 2607:fee0:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7d:04:3d:22:ef:05:72:10:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=98a2f3bb-d206-408a-a73f-2596b4e45c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e6:fc:08:bc:fd:db:86:54:4e:5d:c3:df:cf: a9:44:86:a8:9f:d7:18:17:e0:e7:b2:b5:e7:50:09: 5c:97:5c:28:1c:a7:bd:c5:07:ac:34:62:a7:4b:86: 32:ae:6e:2b:6f:c5:c0:52:bd:81:08:c0:90:eb:cb: 15:cc:41:1d:1f:bc:38:fd:f0:e8:b4:a5:ca:70:be: 84:7a:85:53:5c:eb:8c:9e:d8:5b:7b:ef:67:90:cb: 0d:89:c9:1f:3a:bb:b0:5f:35:6e:8a:cf:ac:8c:cc: ef:7f:c4:99:c1:1c:99:74:6f:4b:ac:f8:33:92:91: 0c:21:ee:ae:af:dc:31:cd:9c:52:77:27:0e:20:37: 23:a7:7a:f7:c4:33:e8:60:1e:ca:8e:cf:b1:d3:23: 8c:c9:d7:34:c2:0b:4c:ed:e0:ee:a6:37:55:d7:12: 72:31:95:c3:96:6e:f0:4e:39:0c:96:0f:0b:dd:dd: 45:31:2b:ac:74:21:04:5d:06:6f:1d:5f:49:e1:49: 82:ce:28:bf:94:45:d6:49:89:6b:65:a2:aa:11:66: 1b:cc:fe:7d:09:da:d8:10:3e:8c:2a:90:22:35:81: c3:c3:06:3d:41:e8:c2:36:21:4f:47:af:a7:b3:dd: 56:a1:6d:25:17:63:22:ee:50:79:7d:21:3b:19:94: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:31:FB:0A:62:B1:A3:32:25:7E:CA:87:B7:A0:03:0F:FC:91:47:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2e4c998e-b89e-3db0-aa05-063991b17be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl X509v3 Authority Key Identifier: keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer sbgp-ipAddrBlock: critical IPv6: 2607:fee0:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f0:14:4c:c2:e7:12:3e:7f:dc:46:59:e2:8e:ca:00:4e:e1: 2b:8c:0d:0e:e3:d4:bf:ff:95:bc:d8:83:c0:6c:de:80:26:b9: 9a:73:37:6c:e0:38:4d:ae:dd:81:84:e9:99:f2:05:25:c6:2c: b5:a3:3f:92:d1:18:d9:d3:70:45:e0:e4:67:3b:c9:07:c9:a9: 8a:05:e5:b4:75:87:7c:ea:b6:ac:d3:53:02:fe:61:9d:c1:4b: 80:33:79:f5:fc:64:05:80:3d:61:3c:8f:c7:af:b1:bd:fd:9e: ec:60:6e:5f:b3:75:93:cf:aa:bb:5b:69:30:2f:c2:2d:5f:08: c7:3e:b4:14:b3:6b:39:df:43:64:85:b4:a6:6e:1f:e9:ae:08: 94:61:40:b7:6a:e7:34:6c:4e:7b:91:68:e8:e4:81:cf:55:6f: 61:62:dd:a7:e7:d2:ee:51:f1:4b:e9:f0:74:d4:e8:5f:5a:ac: 0e:2b:d5:e2:21:33:9e:b4:b3:bf:07:26:c4:94:ed:05:a9:23: 39:6b:1c:2a:3e:3a:e0:cd:74:e7:2e:29:cb:da:47:49:b9:95: 39:35:d9:c3:98:47:32:9d:45:a1:f6:21:40:03:6b:b9:c2:33: 08:26:06:b4:37:0a:75:cf:76:b4:c4:7b:c6:d0:78:41:02:6d: 92:96:e2:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE884n0EPSLvBXIQSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm YjdhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OThhMmYzYmItZDIwNi00MDhhLWE3M2YtMjU5NmI0ZTQ1YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ub8CLz924ZUTl3D38+pRIaon9cYF+DnsrXn UAlcl1woHKe9xQesNGKnS4Yyrm4rb8XAUr2BCMCQ68sVzEEdH7w4/fDotKXKcL6E eoVTXOuMnthbe+9nkMsNickfOruwXzVuis+sjMzvf8SZwRyZdG9LrPgzkpEMIe6u r9wxzZxSdycOIDcjp3r3xDPoYB7Kjs+x0yOMydc0wgtM7eDupjdV1xJyMZXDlm7w TjkMlg8L3d1FMSusdCEEXQZvHV9J4UmCzii/lEXWSYlrZaKqEWYbzP59CdrYED6M KpAiNYHDwwY9QejCNiFPR6+ns91WoW0lF2Mi7lB5fSE7GZSaIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAgx+wpisaMyJX7Kh7egAw/8kUfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvMmU0Yzk5OGUtYjg5ZS0z ZGIwLWFhMDUtMDYzOTkxYjE3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1 ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0 YmMxNWZiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf+4EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmvAUTMLnEj5/3EZZ4o7KAE7hK4wNDuPUv/+VvNiDwGzegCa5mnM3 bOA4Ta7dgYTpmfIFJcYstaM/ktEY2dNwReDkZzvJB8mpigXltHWHfOq2rNNTAv5h ncFLgDN59fxkBYA9YTyPx6+xvf2e7GBuX7N1k8+qu1tpMC/CLV8Ixz60FLNrOd9D ZIW0pm4f6a4IlGFAt2rnNGxOe5Fo6OSBz1VvYWLdp+fS7lHxS+nwdNToX1qsDivV 4iEznrSzvwcmxJTtBakjOWscKj464M105y4py9pHSbmVOTXZw5hHMp1FofYhQANr ucIzCCYGtDcKdc92tMR7xtB4QQJtkpbi1A== -----END CERTIFICATE-----Generated at Tue Sep 22 13:00:20 2026 by rpki-client