$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa File: 985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa (raw, json) Hash identifier: K+o89K1aj8QOPlHSVVPky5x1brhEMIU/ODpNJYDYF8g= Subject key identifier: 5D:7B:5A:0A:72:B6:6A:D4:3A:9C:94:3B:25:CF:58:83:CA:D4:89:FE Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584F46A7DA9907692928D45CA440 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2607:db00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:da:99:07:69:29:28:d4:5c:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=02e43ce2-7931-45c3-b818-02e64af5adf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bd:ac:22:ff:36:12:20:18:bb:ba:d8:7c:98: 25:56:28:34:89:30:eb:b7:8c:cc:33:6e:68:73:3d: 86:b0:06:8a:93:67:ca:92:0b:ee:38:fd:f6:d8:83: a7:43:9c:8e:b6:15:09:d3:d9:b8:35:65:46:de:75: c5:c3:28:e1:e2:40:e5:b4:55:26:b6:92:0a:86:a9: 74:2a:3b:7b:da:51:2c:c2:b5:ad:60:6b:96:bc:57: 54:35:4a:0a:75:f9:dc:6c:7d:bb:8b:18:8c:0c:1b: 08:b8:2d:f5:79:b7:81:e5:36:02:ef:bf:d9:ef:5c: 81:5d:74:b2:30:94:3a:ec:9d:48:cc:79:6b:e3:f8: 26:c6:dc:cd:c7:ba:56:22:be:55:28:c9:82:7a:8d: 24:71:cb:3e:68:d1:c8:b2:67:9c:3c:a6:2e:6d:da: c0:19:0d:ab:e9:eb:4f:b2:99:50:9c:53:0a:b0:14: 8b:e9:4e:68:d0:16:6d:42:1f:e1:ac:f4:b1:f8:68: 2b:45:c8:37:4f:40:ac:34:e9:6a:da:18:16:a2:f1: 5b:73:5e:93:86:f5:5c:58:0f:51:e1:be:ea:7e:6b: 9d:a5:c8:70:ac:da:a0:67:55:b1:4c:53:0e:6a:ff: fe:a6:8f:d7:df:8a:00:f6:8c:ca:8e:f2:b2:44:91: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7B:5A:0A:72:B6:6A:D4:3A:9C:94:3B:25:CF:58:83:CA:D4:89:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/985ccc54-1a40-3e66-b10a-d6f03a917eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv6: 2607:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2a:5b:b3:76:19:94:18:fa:7a:d9:7f:c2:a1:35:a0:50:5c: de:f7:35:b9:35:24:5b:f3:4c:e3:17:73:ab:6b:53:d1:fe:2f: ff:ca:02:83:4d:b0:4f:86:b0:07:c7:a1:42:e1:00:8c:a9:a6: a6:65:96:d5:9f:85:8c:01:12:fe:13:d0:1d:42:66:2c:37:ba: df:22:e6:b1:e8:df:33:da:ab:f4:94:e5:e0:30:07:d6:26:82: e3:dc:eb:2c:d1:b9:6e:2f:6a:76:ad:42:41:fc:4b:e7:7f:67: 9f:03:af:b3:3c:5c:6c:5a:97:76:2c:ea:81:b0:b5:11:6c:73: ce:ea:f2:2f:c3:ea:1b:8a:c4:4c:d7:48:29:88:e9:54:94:32: d7:b2:5b:78:c8:95:ff:cd:5b:9b:97:f3:44:d8:8f:82:45:2b: 8e:f5:fe:a5:d7:f7:38:f5:89:1e:e5:b3:54:16:18:c8:db:d8: 41:c5:29:b9:4f:1e:99:a8:6e:1c:8d:b2:6f:90:85:d4:b2:59: 12:93:e9:68:88:c7:fb:5c:de:87:de:b8:b4:45:fa:ff:7a:af: 42:e5:f3:1c:8a:c9:8b:51:c6:61:f2:16:aa:4d:af:98:70:09: 8a:50:06:d6:cc:52:23:fe:03:03:5c:5e:b4:02:33:b4:76:f9: 0e:91:df:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Gp9qZB2kpKNRcpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MDJlNDNjZTItNzkzMS00NWMzLWI4MTgtMDJlNjRhZjVhZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r2sIv82EiAYu7rYfJglVig0iTDrt4zMM25o cz2GsAaKk2fKkgvuOP322IOnQ5yOthUJ09m4NWVG3nXFwyjh4kDltFUmtpIKhql0 Kjt72lEswrWtYGuWvFdUNUoKdfncbH27ixiMDBsIuC31ebeB5TYC77/Z71yBXXSy MJQ67J1IzHlr4/gmxtzNx7pWIr5VKMmCeo0kccs+aNHIsmecPKYubdrAGQ2r6etP splQnFMKsBSL6U5o0BZtQh/hrPSx+GgrRcg3T0CsNOlq2hgWovFbc16ThvVcWA9R 4b7qfmudpchwrNqgZ1WxTFMOav/+po/X34oA9ozKjvKyRJHiswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF17WgpytmrUOpyUOyXPWIPK1In+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOTg1Y2NjNTQtMWE0MC0z ZTY2LWIxMGEtZDZmMDNhOTE3ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTKluzdhmUGPp62X/CoTWgUFze9zW5NSRb80zjF3Ora1PR/i//ygKD TbBPhrAHx6FC4QCMqaamZZbVn4WMARL+E9AdQmYsN7rfIuax6N8z2qv0lOXgMAfW JoLj3Oss0bluL2p2rUJB/Evnf2efA6+zPFxsWpd2LOqBsLURbHPO6vIvw+obisRM 10gpiOlUlDLXslt4yJX/zVubl/NE2I+CRSuO9f6l1/c49Yke5bNUFhjI29hBxSm5 Tx6ZqG4cjbJvkIXUslkSk+loiMf7XN6H3ri0Rfr/eq9C5fMcismLUcZh8haqTa+Y cAmKUAbWzFIj/gMDXF60AjO0dvkOkd+i -----END CERTIFICATE-----Generated at Sat Sep 26 16:11:13 2026 by rpki-client