$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa File: 147d4e1d-a096-314d-b104-4b2b7e03db0f.roa (raw, json) Hash identifier: VWF5LBkR6CkqRZO8DuNISdXV2J2dHr+P/GX2etyttPA= Subject key identifier: 90:7C:C3:40:A0:56:A8:1C:71:F3:1E:78:D3:FC:95:2F:08:0F:97:47 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584ECD37203A35C0885C3DB16300 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40948 IP address blocks: 2607:e300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:20:3a:35:c0:88:5c:3d:b1:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=db5f0023-d46a-4971-9172-ffc03d191cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:48:b1:33:93:32:68:26:fe:30:03:d6:d6: d6:a1:f8:16:4f:87:43:d8:38:7f:ed:6d:3d:03:1d: e0:c0:a6:6b:5a:42:68:9b:ac:22:29:2c:f9:52:d8: e5:a7:d9:07:58:c5:55:46:97:a2:d9:2e:3f:b0:66: c9:48:42:ad:37:2f:49:48:02:5c:f5:9d:ca:e9:d1: a3:e8:77:fa:cf:9b:b6:94:b1:99:98:21:42:ba:e1: 67:68:e5:71:75:53:6a:15:19:c6:97:21:c8:9a:82: 2d:53:66:43:91:4c:c9:ae:5c:03:22:fd:5c:55:3a: 31:82:39:d9:f0:0e:a4:06:7b:cd:99:fd:37:ee:51: 85:90:d0:bb:3e:ae:e2:51:d8:2e:74:f2:25:ea:d5: f3:65:7b:9d:07:d0:40:dd:39:4b:44:f7:83:d5:84: a0:e1:16:d8:ef:7a:62:bc:50:d1:e8:51:5d:41:ab: be:a9:cb:c6:b0:f9:d5:4a:b0:07:38:1f:8f:86:1f: 66:4d:5b:ed:5f:ba:6f:62:be:45:f8:c7:48:c0:05: e4:5a:d6:60:65:64:ee:f9:dd:98:75:73:39:7e:be: fc:b8:98:d4:8e:66:4b:ad:fa:d6:ae:b8:43:5c:30: af:d4:ee:74:60:98:dd:47:9a:26:5e:b8:a8:5c:4d: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7C:C3:40:A0:56:A8:1C:71:F3:1E:78:D3:FC:95:2F:08:0F:97:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv6: 2607:e300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c0:25:7c:e6:d6:46:f5:0d:76:70:82:fe:3a:1c:01:1f:96: 4a:f9:b9:c5:02:e7:c1:f3:73:b7:a9:7e:4a:6a:10:3f:9d:57: 13:39:70:a1:ec:c0:ae:30:76:ed:c1:b1:62:4d:d8:42:46:ad: 29:51:06:fc:fe:7a:59:83:dc:83:4f:1c:8b:ba:c7:15:cf:2c: e0:9f:51:41:4e:51:0a:6f:60:03:bb:ab:d5:3d:f8:e7:22:e2: 5f:f8:8a:85:c4:fc:a3:03:ef:73:93:e3:a5:e7:44:c7:c8:6b: d9:e8:15:d1:28:b4:66:57:ab:a7:f3:21:c2:57:a0:56:c1:ae: 3b:9b:03:51:0d:3a:28:2c:96:d8:ef:b4:07:b8:9b:a7:82:3d: de:77:75:d0:0f:62:96:1c:03:54:ad:8a:96:9f:39:e4:54:07: 35:74:a1:cd:f2:f4:0c:72:9b:f4:4b:98:23:15:37:fc:87:38: 7d:17:6c:b8:78:6c:ef:f3:59:96:c9:d3:46:e3:5d:cf:de:fa: fb:70:0d:4b:f8:ee:19:39:47:8d:a2:9d:95:6f:4a:1d:52:84: 38:c5:a2:fd:d2:3b:42:90:1b:01:8f:bd:1e:32:d1:c4:b8:99: 71:3a:b2:1f:77:74:99:61:70:2d:93:00:8d:94:d7:c3:38:7f: 0f:2c:02:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7NNyA6NcCIXD2xYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZGI1ZjAwMjMtZDQ2YS00OTcxLTkxNzItZmZjMDNkMTkxY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VJIsTOTMmgm/jAD1tbWofgWT4dD2Dh/7W09 Ax3gwKZrWkJom6wiKSz5Utjlp9kHWMVVRpei2S4/sGbJSEKtNy9JSAJc9Z3K6dGj 6Hf6z5u2lLGZmCFCuuFnaOVxdVNqFRnGlyHImoItU2ZDkUzJrlwDIv1cVToxgjnZ 8A6kBnvNmf037lGFkNC7Pq7iUdgudPIl6tXzZXudB9BA3TlLRPeD1YSg4RbY73pi vFDR6FFdQau+qcvGsPnVSrAHOB+Phh9mTVvtX7pvYr5F+MdIwAXkWtZgZWTu+d2Y dXM5fr78uJjUjmZLrfrWrrhDXDCv1O50YJjdR5omXrioXE0ObwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJB8w0CgVqgccfMeeNP8lS8ID5dHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMTQ3ZDRlMWQtYTA5Ni0z MTRkLWIxMDQtNGIyYjdlMDNkYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfjADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKwCV85tZG9Q12cIL+OhwBH5ZK+bnFAufB83O3qX5KahA/nVcTOXCh 7MCuMHbtwbFiTdhCRq0pUQb8/npZg9yDTxyLuscVzyzgn1FBTlEKb2ADu6vVPfjn IuJf+IqFxPyjA+9zk+Ol50THyGvZ6BXRKLRmV6un8yHCV6BWwa47mwNRDTooLJbY 77QHuJungj3ed3XQD2KWHANUrYqWnznkVAc1dKHN8vQMcpv0S5gjFTf8hzh9F2y4 eGzv81mWydNG413P3vr7cA1L+O4ZOUeNop2Vb0odUoQ4xaL90jtCkBsBj70eMtHE uJlxOrIfd3SZYXAtkwCNlNfDOH8PLAI7 -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:20 2026 by rpki-client