$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/e8ae3d5a-d33d-3185-9a83-565b98a2529d.roa File: e8ae3d5a-d33d-3185-9a83-565b98a2529d.roa (raw, json) Hash identifier: 8KS5ONPsdRTvqP6ELGTqOo5IYQk62VBYeYNIfFoBQLo= Subject key identifier: C6:11:67:BA:6A:5F:2B:F6:DA:BC:78:B3:75:8C:44:A1:79:6A:56:D9 Certificate issuer: /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764 Certificate serial: 010D0C9F4328584F498A8431A1D08944AE0D1E00 Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/e8ae3d5a-d33d-3185-9a83-565b98a2529d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53347 IP address blocks: 2607:fe28::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:84:31:a1:d0:89:44:ae:0d:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=de569640-8039-4736-a0ed-65343999ff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:02:1d:00:ec:44:bc:fe:89:4e:b4:44:3c: 5e:3b:e9:a1:13:5a:a3:b9:1a:e4:f8:2f:c0:50:dd: bc:12:0c:9e:85:fa:0e:34:98:82:30:bd:fb:97:d6: 56:1c:21:08:c1:14:80:91:06:0b:f9:c9:fb:8d:bc: 23:8e:d2:71:51:35:97:6d:7f:82:23:47:09:4c:14: c6:a5:1e:5b:cf:f8:e7:cc:48:e7:a5:f6:e8:d2:f0: e2:2b:a3:79:dd:c4:68:97:f3:d7:68:02:d8:3b:87: b6:64:65:bc:9c:73:fc:22:12:f3:3c:90:a5:c6:f5: 7e:1c:11:62:22:88:b0:79:c2:e5:0d:0f:b4:1c:67: e9:7e:80:30:24:6c:b5:19:3a:85:61:69:65:2f:19: c6:ce:f5:7d:9b:76:15:b5:7a:db:20:fe:6f:3b:20: 32:98:c3:06:1e:db:7d:0a:54:1d:be:d5:28:ee:f7: ff:cf:b4:40:26:36:b2:9a:3f:b5:7d:42:65:96:e3: 7e:23:2e:0e:bb:da:dd:27:cc:77:38:ad:70:e4:3d: 28:c8:18:f1:0d:66:31:3b:be:0a:6d:df:b8:aa:1a: 84:02:c7:37:b0:8a:09:25:fc:ff:24:84:5a:25:54: c8:57:e3:ca:7a:b1:13:2a:26:cf:38:8c:24:83:b6: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:67:BA:6A:5F:2B:F6:DA:BC:78:B3:75:8C:44:A1:79:6A:56:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/e8ae3d5a-d33d-3185-9a83-565b98a2529d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl X509v3 Authority Key Identifier: keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe28::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:4a:f1:20:1f:89:9d:e1:64:44:f3:78:d8:ed:9d:ab:d7: 33:a4:40:81:c1:7b:be:24:d9:9f:ad:00:6e:a6:3d:88:ac:92: be:01:ba:2f:5b:dc:d1:68:15:f3:19:de:38:da:e5:9e:da:46: 45:14:d1:ec:d9:28:13:99:dd:4a:44:08:fb:a1:8f:a3:4b:69: 58:af:01:47:93:10:c7:62:8e:4b:e5:41:b7:e2:cd:a0:de:f4: c8:c4:3b:da:b8:c6:86:e6:d3:66:f2:7f:59:65:55:8e:d8:b4: b8:d7:87:bb:4a:71:75:25:bb:97:ab:1a:dc:9d:54:a0:f5:ca: ba:d6:e8:41:ac:c0:d8:df:81:45:e2:78:22:ff:ac:8e:1a:33: b7:05:c6:af:2a:50:68:4c:a6:b4:f7:4d:cd:86:56:0d:55:0c: 99:fa:6d:d8:d1:97:0b:7f:44:a1:c2:a6:fd:2c:43:f7:1b:6b: 2f:b6:1f:da:11:5b:12:8c:e3:6d:2b:cf:5e:f0:2d:fb:09:4b: 6d:3d:c0:ce:9a:da:e5:a6:4d:33:88:79:52:4a:46:4d:47:28: 0c:c2:eb:87:94:ba:d3:bd:a1:da:34:dc:f8:d1:57:40:2c:92: 94:32:6d:52:d2:6d:13:d7:49:bf:4c:ae:7c:f0:7b:9b:a9:3d: ce:3e:72:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JioQxodCJRK4NHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU1NjhjMTItMzRlOC00YWQ1LWI5MzAtMmE4YzU1NzNh NzY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGU1Njk2NDAtODAzOS00NzM2LWEwZWQtNjUzNDM5OTlmZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKsCHQDsRLz+iU60RDxeO+mhE1qjuRrk+C/A UN28EgyehfoONJiCML37l9ZWHCEIwRSAkQYL+cn7jbwjjtJxUTWXbX+CI0cJTBTG pR5bz/jnzEjnpfbo0vDiK6N53cRol/PXaALYO4e2ZGW8nHP8IhLzPJClxvV+HBFi IoiwecLlDQ+0HGfpfoAwJGy1GTqFYWllLxnGzvV9m3YVtXrbIP5vOyAymMMGHtt9 ClQdvtUo7vf/z7RAJjaymj+1fUJlluN+Iy4Ou9rdJ8x3OK1w5D0oyBjxDWYxO74K bd+4qhqEAsc3sIoJJfz/JIRaJVTIV+PKerETKibPOIwkg7akFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMYRZ7pqXyv22rx4s3WMRKF5albZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2 OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThjNTU3M2E3NjQvZThhZTNkNWEtZDMzZC0z MTg1LTlhODMtNTY1Yjk4YTI1MjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGU1NjhjMTItMzRlOC00YWQ1LWI5 MzAtMmE4YzU1NzNhNzY0LzRlNTY4YzEyLTM0ZTgtNGFkNS1iOTMwLTJhOGM1NTcz YTc2NC5jcmwwHwYDVR0jBBgwFoAUEVwZj3kudkLAJfj5APk3Wb05M9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThj NTU3M2E3NjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+KDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApRErxIB+JneFkRPN42O2dq9czpECBwXu+JNmfrQBupj2IrJK+Abov W9zRaBXzGd442uWe2kZFFNHs2SgTmd1KRAj7oY+jS2lYrwFHkxDHYo5L5UG34s2g 3vTIxDvauMaG5tNm8n9ZZVWO2LS414e7SnF1JbuXqxrcnVSg9cq61uhBrMDY34FF 4ngi/6yOGjO3BcavKlBoTKa0903NhlYNVQyZ+m3Y0ZcLf0Shwqb9LEP3G2svth/a EVsSjONtK89e8C37CUttPcDOmtrlpk0ziHlSSkZNRygMwuuHlLrTvaHaNNz40VdA LJKUMm1S0m0T10m/TK588HubqT3OPnIx -----END CERTIFICATE-----Generated at Sat Sep 26 06:38:54 2026 by rpki-client