$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa File: c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa (raw, json) Hash identifier: zBCVt2a6roI3LCdlwsPWphtoP+jRsg9Jt798L75RNJg= Subject key identifier: 10:F8:31:83:15:BB:65:97:89:1A:CD:55:54:01:79:E1:EB:5C:D8:7C Certificate issuer: /CN=cf6e862f-83c2-4143-b47a-74db6f210162 Certificate serial: 010D0C9F4328584F71ED9C90387EB4C4757BAF80 Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 400034 IP address blocks: 2607:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9c:90:38:7e:b4:c4:75:7b:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=a4aee698-8e2e-430d-a73f-24fbbc0f53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:6a:78:4b:d8:4b:eb:c4:c8:f0:92:90:de: 77:3d:21:af:05:89:cc:bf:59:7d:75:7f:9e:8c:11: b6:52:b1:d6:a6:4e:8e:88:30:05:11:5b:89:4a:52: 4b:25:4e:14:87:c4:20:1d:d2:11:4a:99:39:20:e1: 2e:53:3e:be:79:fc:98:91:09:80:1f:13:58:4f:95: 9c:2f:20:8e:af:78:8a:b9:e6:33:3b:65:cd:45:ea: 71:8b:89:b8:54:fd:19:0e:80:b8:39:0c:ea:0d:bf: cf:ad:d4:d6:aa:8a:6d:b0:5f:7c:48:f2:54:fc:48: 0f:9b:7b:8f:9b:a4:1b:37:1d:cd:54:ca:2f:d6:64: ac:83:b1:2a:98:a7:45:e5:a0:2a:53:48:b7:3d:cb: 45:d2:07:3c:0b:25:72:48:de:92:64:f1:02:7c:3e: b9:ad:76:7b:a6:bb:5a:76:3c:e0:6f:6c:c5:37:b9: d9:21:d8:89:8b:9f:5c:48:26:be:61:2f:d0:0f:80: d6:36:76:e5:6d:45:49:df:2c:f4:dd:e7:55:15:f3: 48:e0:da:4b:1b:06:f2:d6:34:ad:be:e3:9e:33:a1: b6:43:d8:4d:ce:43:78:cc:fe:2c:d8:27:8d:51:08: 2c:00:99:01:31:a4:e3:e2:2b:cc:30:36:a2:f7:3c: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:31:83:15:BB:65:97:89:1A:CD:55:54:01:79:E1:EB:5C:D8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl X509v3 Authority Key Identifier: keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer sbgp-ipAddrBlock: critical IPv6: 2607:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6a:86:10:9f:4c:25:92:62:cb:47:db:34:81:f8:29:6e:7d: f6:45:5f:a5:f8:c0:ea:5e:a3:20:96:35:e5:dd:6b:73:e2:84: b1:5d:ec:b7:09:8e:d2:a6:35:d3:0e:95:d7:44:48:ed:eb:a3: f8:c5:73:fe:d5:66:a5:d9:8d:a4:5c:60:b3:ae:78:45:84:a3: 16:b3:8d:70:23:a5:dc:bd:5a:b6:fd:91:29:88:a7:1b:84:e4: 6e:5c:eb:57:c9:e3:0a:7c:57:6a:a5:cc:9b:69:bb:bc:23:f1: c2:10:f7:15:ce:5f:e7:2a:8d:8a:eb:29:fe:02:01:26:3e:c8: ab:c5:4e:20:75:5b:7c:4b:ad:63:1c:76:b4:d8:13:37:af:27: 95:46:1e:c8:33:3a:17:30:7d:97:1a:6c:a9:16:ae:87:34:ae: f5:a2:e4:f1:9e:c5:7e:26:d7:07:22:5f:3b:cb:d0:d5:99:0f: f8:6d:b6:9b:0a:87:d2:07:d2:c4:0b:be:ea:b3:2a:1d:b7:b5: 59:30:84:02:32:4a:c0:0d:7d:77:5a:b4:3b:5d:5d:bf:9d:4c: 55:70:27:10:4e:7e:99:c9:48:36:7c:c6:b6:8f:c6:67:8c:12: 20:e5:76:32:17:df:22:f2:7f:62:85:24:30:bb:7d:6d:3c:e3: f4:32:d8:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9x7ZyQOH60xHV7r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2ZTg2MmYtODNjMi00MTQzLWI0N2EtNzRkYjZmMjEw MTYyMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YTRhZWU2OTgtOGUyZS00MzBkLWE3M2YtMjRmYmJjMGY1M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY1qeEvYS+vEyPCSkN53PSGvBYnMv1l9dX+e jBG2UrHWpk6OiDAFEVuJSlJLJU4Uh8QgHdIRSpk5IOEuUz6+efyYkQmAHxNYT5Wc LyCOr3iKueYzO2XNRepxi4m4VP0ZDoC4OQzqDb/PrdTWqoptsF98SPJU/EgPm3uP m6QbNx3NVMov1mSsg7EqmKdF5aAqU0i3PctF0gc8CyVySN6SZPECfD65rXZ7prta djzgb2zFN7nZIdiJi59cSCa+YS/QD4DWNnblbUVJ3yz03edVFfNI4NpLGwby1jSt vuOeM6G2Q9hNzkN4zP4s2CeNUQgsAJkBMaTj4ivMMDai9zydGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBD4MYMVu2WXiRrNVVQBeeHrXNh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjZl ODYyZi04M2MyLTQxNDMtYjQ3YS03NGRiNmYyMTAxNjIvYzVlMDkxZDYtOTBjOS0z ZGRlLWI2NjMtZjRkNDQxOWYwZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Y2ZTg2MmYtODNjMi00MTQzLWI0 N2EtNzRkYjZmMjEwMTYyL2NmNmU4NjJmLTgzYzItNDE0My1iNDdhLTc0ZGI2ZjIx MDE2Mi5jcmwwHwYDVR0jBBgwFoAUTqdfJXAcRrA1UEMoWSy9Mk+o0WcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjZlODYyZi04M2MyLTQxNDMtYjQ3YS03NGRi NmYyMTAxNjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6aoYQn0wlkmLLR9s0gfgpbn32RV+l+MDqXqMgljXl3Wtz4oSxXey3 CY7SpjXTDpXXREjt66P4xXP+1Wal2Y2kXGCzrnhFhKMWs41wI6XcvVq2/ZEpiKcb hORuXOtXyeMKfFdqpcybabu8I/HCEPcVzl/nKo2K6yn+AgEmPsirxU4gdVt8S61j HHa02BM3ryeVRh7IMzoXMH2XGmypFq6HNK71ouTxnsV+JtcHIl87y9DVmQ/4bbab CofSB9LEC77qsyodt7VZMIQCMkrADX13WrQ7XV2/nUxVcCcQTn6ZyUg2fMa2j8Zn jBIg5XYyF98i8n9ihSQwu31tPOP0MtjB -----END CERTIFICATE-----Generated at Sun Nov 1 17:40:04 2026 by rpki-client