$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa File: 5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa (raw, json) Hash identifier: niREhWV0VG7RVtAxXew4rmWjYnO3f+xrA2T+4H2CRxI= Subject key identifier: 93:60:42:B1:A4:E4:01:55:86:94:54:62:96:B1:43:50:82:C7:E7:50 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584F31B7CDB820A47B7B9D0324A0 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 22223 IP address blocks: 2606:f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cd:b8:20:a4:7b:7b:9d:03:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=e07b4519-ca57-48f0-b421-548732da5da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:b3:3c:e2:e8:02:f1:32:e9:8d:25:01:15: 8c:d2:43:98:a1:29:d2:06:2a:96:16:39:e6:64:35: a8:46:36:aa:1b:4d:9b:bc:19:fc:52:57:86:9e:2a: 3d:d3:c5:0a:61:ad:95:c6:c2:1b:df:24:c9:f8:cd: 00:44:c1:e6:73:f5:8c:28:51:30:79:ed:e8:e1:14: a4:38:dc:e1:e3:9d:b7:96:f1:38:7a:58:82:b2:84: aa:87:66:f7:ed:46:6b:e0:ac:05:fc:36:79:4b:8e: 4b:d0:44:27:7b:de:76:b3:a9:f7:0d:50:7e:25:7e: 3d:32:bc:38:0b:0a:40:19:ef:1f:d0:78:3c:55:11: b8:9f:ad:b7:61:75:d9:4f:a9:88:25:ca:52:6b:6f: fe:9a:ac:79:6c:36:ec:9f:3d:e8:f9:1e:2d:27:13: 95:10:7c:ec:df:e4:4a:fa:5a:b4:9b:8a:4d:ca:a9: 9f:1c:60:18:83:37:43:b9:6c:c2:68:7c:17:b4:f8: b6:e3:3d:ab:43:15:c3:2e:5f:07:0b:7b:06:f9:71: f7:b3:c3:a6:c4:9b:69:86:20:76:ef:e2:40:81:b8: 26:f4:e2:08:93:e2:32:fa:90:08:6c:d0:f3:39:4c: 59:08:21:e8:73:35:59:8a:76:a0:97:b2:88:ae:30: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:42:B1:A4:E4:01:55:86:94:54:62:96:B1:43:50:82:C7:E7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv6: 2606:f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:09:08:7f:1c:24:26:de:0b:f1:0f:cd:a2:48:79:09:1c:38: ef:fe:4a:db:00:e1:84:76:2f:92:83:9c:bb:d5:af:73:70:45: bb:e2:20:4a:6f:2d:85:e7:8d:1d:f2:4c:6c:8b:4b:8c:17:d2: 0c:ff:d2:f8:86:c6:bd:6a:36:61:e8:45:4c:4c:63:74:ee:99: c0:0c:f4:27:c3:83:21:e1:62:6a:19:9b:1f:bd:d0:16:9d:a0: 16:fe:80:50:ab:d3:03:2e:86:ff:0f:37:52:2d:5d:1c:cf:75: ba:e5:aa:5c:a7:6c:01:51:70:77:3d:25:c6:ae:4b:f8:7a:26: 73:d7:bc:d9:48:0d:8b:7d:a0:30:03:9b:b1:6e:bf:49:3e:ad: 50:66:73:b0:1e:72:6e:5e:73:17:62:4d:59:74:8c:20:e0:36: a9:b3:c5:1e:dd:0d:43:97:0a:6e:30:ee:e2:4b:99:cf:80:cc: 0c:d3:cd:ab:17:79:0d:dd:82:dd:56:17:cf:66:c7:34:d9:78: 57:52:3e:cf:dd:2d:db:ab:d5:55:8f:cd:02:27:c7:a7:a2:f1: c7:4e:f1:85:53:9a:23:ef:0c:df:9a:a0:05:41:e9:ca:36:a7: 7e:a3:50:e5:f7:b8:71:12:bb:76:70:69:00:c9:bf:d1:b2:c0: 52:c0:a7:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8xt824IKR7e50DJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTA3YjQ1MTktY2E1Ny00OGYwLWI0MjEtNTQ4NzMyZGE1ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGezPOLoAvEy6Y0lARWM0kOYoSnSBiqWFjnm ZDWoRjaqG02bvBn8UleGnio908UKYa2VxsIb3yTJ+M0ARMHmc/WMKFEwee3o4RSk ONzh4523lvE4eliCsoSqh2b37UZr4KwF/DZ5S45L0EQne952s6n3DVB+JX49Mrw4 CwpAGe8f0Hg8VRG4n623YXXZT6mIJcpSa2/+mqx5bDbsnz3o+R4tJxOVEHzs3+RK +lq0m4pNyqmfHGAYgzdDuWzCaHwXtPi24z2rQxXDLl8HC3sG+XH3s8OmxJtphiB2 7+JAgbgm9OIIk+Iy+pAIbNDzOUxZCCHoczVZinagl7KIrjCUZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJNgQrGk5AFVhpRUYpaxQ1CCx+dQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvNWEwYWQ3NjQtYzViNy0z M2ZmLTllODktZDgzMzc4YWVmZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnCQh/HCQm3gvxD82iSHkJHDjv/krbAOGEdi+Sg5y71a9zcEW74iBK by2F540d8kxsi0uMF9IM/9L4hsa9ajZh6EVMTGN07pnADPQnw4Mh4WJqGZsfvdAW naAW/oBQq9MDLob/DzdSLV0cz3W65apcp2wBUXB3PSXGrkv4eiZz17zZSA2LfaAw A5uxbr9JPq1QZnOwHnJuXnMXYk1ZdIwg4Daps8Ue3Q1DlwpuMO7iS5nPgMwM082r F3kN3YLdVhfPZsc02XhXUj7P3S3bq9VVj80CJ8enovHHTvGFU5oj7wzfmqAFQenK Nqd+o1Dl97hxErt2cGkAyb/RssBSwKdC -----END CERTIFICATE-----Generated at Wed Sep 23 11:36:22 2026 by rpki-client