$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa File: d8a173ca-02fa-389c-b171-dda8cd84ea02.roa (raw, json) Hash identifier: INdukODxrj0lxALfVnXcSDwDdo+MTb1FQ9HEtVV9Zo8= Subject key identifier: EA:5B:17:C3:2D:45:3B:D1:6F:8A:21:9F:49:EE:A2:CE:FB:21:96:76 Certificate issuer: /CN=28a07a92-b34f-4d9e-95fa-aa1053700a79 Certificate serial: 010D0C9F4328584F498A70ED0E2B03E217F899A0 Authority key identifier: 1E:77:68:D4:07:7F:0F:FF:7D:3D:7F:E3:C4:46:95:12:0D:F6:9B:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400535 IP address blocks: 2606:5880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:70:ed:0e:2b:03:e2:17:f8:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a07a92-b34f-4d9e-95fa-aa1053700a79 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4afccd09-11bf-4589-b491-5a22187c9075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:99:85:29:2a:0d:d9:f3:45:27:f4:27:26:3b: 4d:67:6b:6a:25:39:be:14:3f:4f:f0:6d:63:73:27: d7:b1:c2:f2:1a:f7:be:74:3d:bf:d2:67:67:cf:90: 79:c1:9d:af:72:d1:56:3c:90:03:79:a2:2c:86:27: ce:79:09:98:de:21:17:2e:f6:ab:10:06:64:19:fc: 53:3a:f9:dd:39:37:6c:e8:70:76:4e:b6:39:a3:d3: 64:0f:3c:94:56:0e:d9:44:b4:c4:6a:f3:d4:29:07: 31:26:95:c0:4f:ac:33:ab:e7:ef:4e:c2:04:b8:74: 98:ea:7d:3c:37:7e:97:5d:52:13:af:52:42:e2:7b: ef:7b:d4:4d:1f:67:cf:06:3b:aa:be:d7:e5:89:6a: e3:30:35:f2:3b:45:4d:70:c5:91:c4:1a:12:57:73: 6c:4c:77:cc:dc:5f:a0:bc:f2:df:8a:3a:d6:58:7a: 54:af:2a:f0:29:95:30:50:65:e1:fe:e9:f1:e3:2f: 4e:cf:15:b9:2e:19:0a:34:00:ae:f9:69:38:cb:23: 63:6d:14:51:48:d1:49:2e:08:96:a0:d2:7a:0b:0f: 94:cf:1e:38:91:a0:ae:69:76:be:d6:6b:6f:26:f6: ad:97:ab:dd:15:49:11:ef:49:c5:a1:1b:f6:8a:3c: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5B:17:C3:2D:45:3B:D1:6F:8A:21:9F:49:EE:A2:CE:FB:21:96:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/d8a173ca-02fa-389c-b171-dda8cd84ea02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79/28a07a92-b34f-4d9e-95fa-aa1053700a79.crl X509v3 Authority Key Identifier: keyid:1E:77:68:D4:07:7F:0F:FF:7D:3D:7F:E3:C4:46:95:12:0D:F6:9B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/28a07a92-b34f-4d9e-95fa-aa1053700a79.cer sbgp-ipAddrBlock: critical IPv6: 2606:5880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e4:7a:53:6f:90:4f:1f:c1:b8:90:a9:3b:84:8f:3c:c3:11: 5a:e2:ee:c8:02:0e:42:7e:90:78:16:df:e3:ff:dd:c2:f9:da: 20:9e:30:4d:b7:2f:5f:d6:5a:f0:9c:a5:0f:28:57:ab:4f:46: bd:9a:c3:47:0a:19:7d:c0:90:81:77:55:df:e8:17:7e:44:07: f0:03:70:e1:b5:e9:1b:01:7a:e2:cf:92:36:0e:d9:59:41:b4: f2:7f:ca:c4:2e:1d:02:c1:6a:e6:75:fe:e2:0f:0f:6f:f0:98: 98:c2:78:22:41:23:6b:09:3c:c8:b1:2f:57:f0:ad:2d:25:ad: 93:88:d8:46:64:27:6d:b2:a3:8e:d6:41:62:b5:ae:1d:00:a0: 86:22:5f:64:eb:27:af:b9:91:5a:8b:23:a4:9c:66:14:b9:f9: 10:4e:46:3a:c8:a4:48:a4:57:53:86:20:b3:fa:e4:66:fc:05: f5:b5:58:4e:70:81:d1:b6:f8:39:46:bb:b0:22:d7:e9:34:14: 82:63:58:f6:56:3e:83:1d:63:2d:93:13:d4:b0:b9:d8:89:a8: a0:9a:77:df:53:31:7e:74:dc:04:d8:e7:9d:45:42:49:1b:71: 66:c2:6c:3b:32:ff:35:48:bf:04:b1:d2:cf:f1:37:9e:78:19: c1:33:7e:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JinDtDisD4hf4maAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMDdhOTItYjM0Zi00ZDllLTk1ZmEtYWExMDUzNzAw YTc5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFmY2NkMDktMTFiZi00NTg5LWI0OTEtNWEyMjE4N2M5MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZmFKSoN2fNFJ/QnJjtNZ2tqJTm+FD9P8G1j cyfXscLyGve+dD2/0mdnz5B5wZ2vctFWPJADeaIshifOeQmY3iEXLvarEAZkGfxT OvndOTds6HB2TrY5o9NkDzyUVg7ZRLTEavPUKQcxJpXAT6wzq+fvTsIEuHSY6n08 N36XXVITr1JC4nvve9RNH2fPBjuqvtfliWrjMDXyO0VNcMWRxBoSV3NsTHfM3F+g vPLfijrWWHpUryrwKZUwUGXh/unx4y9OzxW5LhkKNACu+Wk4yyNjbRRRSNFJLgiW oNJ6Cw+Uzx44kaCuaXa+1mtvJvatl6vdFUkR70nFoRv2ijzUzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOpbF8MtRTvRb4ohn0nuos77IZZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yOGEw N2E5Mi1iMzRmLTRkOWUtOTVmYS1hYTEwNTM3MDBhNzkvZDhhMTczY2EtMDJmYS0z ODljLWIxNzEtZGRhOGNkODRlYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjhhMDdhOTItYjM0Zi00ZDllLTk1 ZmEtYWExMDUzNzAwYTc5LzI4YTA3YTkyLWIzNGYtNGQ5ZS05NWZhLWFhMTA1Mzcw MGE3OS5jcmwwHwYDVR0jBBgwFoAUHndo1Ad/D/99PX/jxEaVEg32mxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yOGEwN2E5Mi1iMzRmLTRkOWUtOTVmYS1hYTEw NTM3MDBhNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZYgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBD5HpTb5BPH8G4kKk7hI88wxFa4u7IAg5CfpB4Ft/j/93C+dognjBN ty9f1lrwnKUPKFerT0a9msNHChl9wJCBd1Xf6Bd+RAfwA3DhtekbAXriz5I2DtlZ QbTyf8rELh0CwWrmdf7iDw9v8JiYwngiQSNrCTzIsS9X8K0tJa2TiNhGZCdtsqOO 1kFita4dAKCGIl9k6yevuZFaiyOknGYUufkQTkY6yKRIpFdThiCz+uRm/AX1tVhO cIHRtvg5RruwItfpNBSCY1j2Vj6DHWMtkxPUsLnYiaigmnffUzF+dNwE2OedRUJJ G3Fmwmw7Mv81SL8EsdLP8TeeeBnBM34E -----END CERTIFICATE-----Generated at Wed Oct 21 10:32:59 2026 by rpki-client