$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa File: fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa (raw, json) Hash identifier: ltvodyPcSrBc9YA2vv5youU1rHoXToszxXa2vi+d9xo= Subject key identifier: 4F:7B:12:E4:12:6B:F2:BC:BF:A2:4C:5C:7C:95:BC:E9:8D:B1:47:72 Certificate issuer: /CN=d499a688-e2cb-43b1-9984-b7b259cd7381 Certificate serial: 010D0C9F4328584F14678FC3EFF37CB4661A1D80 Authority key identifier: D8:1E:E1:7B:9F:D5:51:90:BE:91:72:87:95:81:CE:6C:53:5B:E7:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 394227 IP address blocks: 2607:e8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8f:c3:ef:f3:7c:b4:66:1a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d499a688-e2cb-43b1-9984-b7b259cd7381 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=6973ef4d-3ed0-4073-b2c3-fb6fa0c1c353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:98:54:8a:63:c2:cf:d0:fd:a3:3d:f6:dd: fa:57:3d:9e:94:dd:d8:b6:65:cb:a3:eb:43:8b:28: 9d:db:80:08:fb:46:45:05:ab:84:da:ff:81:a1:18: 76:04:c1:77:42:d1:42:d9:51:05:69:3e:de:84:2f: 25:ef:7d:e8:5a:57:d6:13:ba:e7:09:85:9f:ee:1c: e2:52:8f:05:45:2d:84:81:54:ce:8e:b4:38:56:14: a2:e1:95:7f:e2:5f:04:73:1e:cb:00:47:d0:a2:3d: b4:4f:8b:0e:08:74:29:f1:44:ab:24:a5:00:1a:9c: 67:cf:02:2c:5d:b5:1b:3f:6e:13:9a:bc:84:d8:c1: db:51:ac:05:5b:28:ad:34:48:7b:34:14:6b:3e:96: fd:47:61:3e:ac:e8:b1:ad:85:25:68:43:59:5e:70: 15:bd:6d:c8:af:39:cc:81:eb:58:34:e4:cd:50:fc: 6e:5a:83:1a:42:94:8a:8e:c6:e9:4c:6b:5f:61:83: 7f:d5:c7:c2:25:f0:62:25:d2:60:1a:94:35:87:45: 28:72:c8:b3:9d:56:1d:66:75:17:e5:c2:28:d4:66: 27:30:4e:a5:86:3b:67:cf:dd:46:36:fe:ab:d8:95: 71:ec:fa:36:07:3f:2b:4c:63:5b:c6:f0:47:d0:0c: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:12:E4:12:6B:F2:BC:BF:A2:4C:5C:7C:95:BC:E9:8D:B1:47:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/fff2c1ac-357b-340d-84b5-3e5ff9e533e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381/d499a688-e2cb-43b1-9984-b7b259cd7381.crl X509v3 Authority Key Identifier: keyid:D8:1E:E1:7B:9F:D5:51:90:BE:91:72:87:95:81:CE:6C:53:5B:E7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d499a688-e2cb-43b1-9984-b7b259cd7381.cer sbgp-ipAddrBlock: critical IPv6: 2607:e8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d8:72:2c:23:36:95:af:ba:6f:39:7e:e6:83:a5:ef:dc:22: 63:93:52:f6:7f:1a:44:3d:7c:09:63:52:e9:65:43:29:e5:e6: b5:bc:b2:72:35:60:2a:a7:ea:4d:17:97:52:fd:a2:89:5e:a0: 00:3b:b1:a1:68:52:88:51:bd:8b:95:58:60:67:f9:07:92:85: 19:64:cf:3d:c4:1c:3c:45:b8:02:d6:5b:23:94:a0:d4:68:15: 56:3e:6e:05:08:e2:0e:8e:d1:94:a1:3f:de:11:2d:5b:d1:11: ff:f5:8f:a5:8b:c0:15:51:a3:9d:50:62:9f:4a:2b:4c:37:a8: 86:e6:7f:dc:82:8b:f3:a3:c9:72:ca:10:48:60:50:59:74:23: b8:5a:67:bc:d8:47:ba:84:10:dc:97:91:4d:e8:ab:c4:70:a0: d0:63:e0:e1:c3:f4:31:35:3b:83:0e:a5:cf:30:dd:0a:4a:0d: 39:03:d7:d3:a2:09:e4:9d:41:00:63:67:33:36:81:f8:f0:3a: 75:37:0b:15:30:d5:2e:a2:5d:50:05:86:e2:fd:73:8e:ac:93: 00:56:1e:d9:a8:7a:eb:b3:60:ed:03:e3:8a:20:9d:b1:ec:1d: 2e:e1:29:7d:80:a4:dd:85:3b:30:8b:38:df:70:4d:ff:b9:9d: 59:9e:8b:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ4/D7/N8tGYaHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5OWE2ODgtZTJjYi00M2IxLTk5ODQtYjdiMjU5Y2Q3 MzgxMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Njk3M2VmNGQtM2VkMC00MDczLWIyYzMtZmI2ZmEwYzFjMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMuYVIpjws/Q/aM99t36Vz2elN3YtmXLo+tD iyid24AI+0ZFBauE2v+BoRh2BMF3QtFC2VEFaT7ehC8l733oWlfWE7rnCYWf7hzi Uo8FRS2EgVTOjrQ4VhSi4ZV/4l8Ecx7LAEfQoj20T4sOCHQp8USrJKUAGpxnzwIs XbUbP24TmryE2MHbUawFWyitNEh7NBRrPpb9R2E+rOixrYUlaENZXnAVvW3IrznM getYNOTNUPxuWoMaQpSKjsbpTGtfYYN/1cfCJfBiJdJgGpQ1h0UocsiznVYdZnUX 5cIo1GYnME6lhjtnz91GNv6r2JVx7Po2Bz8rTGNbxvBH0AxiTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE97EuQSa/K8v6JMXHyVvOmNsUdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDk5 YTY4OC1lMmNiLTQzYjEtOTk4NC1iN2IyNTljZDczODEvZmZmMmMxYWMtMzU3Yi0z NDBkLTg0YjUtM2U1ZmY5ZTUzM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQ5OWE2ODgtZTJjYi00M2IxLTk5 ODQtYjdiMjU5Y2Q3MzgxL2Q0OTlhNjg4LWUyY2ItNDNiMS05OTg0LWI3YjI1OWNk NzM4MS5jcmwwHwYDVR0jBBgwFoAU2B7he5/VUZC+kXKHlYHObFNb51YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNDk5YTY4OC1lMmNiLTQzYjEtOTk4NC1iN2Iy NTljZDczODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBN2HIsIzaVr7pvOX7mg6Xv3CJjk1L2fxpEPXwJY1LpZUMp5ea1vLJy NWAqp+pNF5dS/aKJXqAAO7GhaFKIUb2LlVhgZ/kHkoUZZM89xBw8RbgC1lsjlKDU aBVWPm4FCOIOjtGUoT/eES1b0RH/9Y+li8AVUaOdUGKfSitMN6iG5n/cgovzo8ly yhBIYFBZdCO4Wme82Ee6hBDcl5FN6KvEcKDQY+Dhw/QxNTuDDqXPMN0KSg05A9fT ognknUEAY2czNoH48Dp1NwsVMNUuol1QBYbi/XOOrJMAVh7ZqHrrs2DtA+OKIJ2x 7B0u4Sl9gKTdhTswizjfcE3/uZ1ZnovF -----END CERTIFICATE-----Generated at Tue Sep 22 12:29:30 2026 by rpki-client