$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa File: 209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa (raw, json) Hash identifier: Qu1BeQEGdKrhuqhwo3vgCJVIcukAiFBqgVrtX6B+6z8= Subject key identifier: 3F:AC:63:2C:1D:3F:4D:2F:9C:D7:6D:22:D8:9C:A1:31:DB:F7:6E:4A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F82ADC4A0827073D4F363C980 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 62240 IP address blocks: 2604:fc80:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c4:a0:82:70:73:d4:f3:63:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=d71b3da4-e5ae-4685-8d41-ba46ad191ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f6:29:88:7d:4c:da:bc:2f:fa:ff:d2:7f:61: db:43:d7:70:ee:b8:33:e5:53:11:c7:cf:48:33:9e: 5e:73:c2:5c:0f:90:08:e8:cd:84:06:fb:89:23:ef: 6a:41:2b:92:87:60:6b:9a:c1:bc:b2:e5:b9:76:76: fe:34:30:e8:b0:81:01:25:cd:67:26:bd:1d:62:7e: 1f:42:16:13:96:69:6b:76:fb:93:27:a8:17:2a:79: 68:4c:43:fa:02:54:78:07:65:fe:13:22:9e:52:f5: f3:02:ee:73:06:c3:bc:79:e1:3a:fe:0c:d5:22:1a: b0:04:c0:cb:64:a8:af:97:90:f4:aa:8c:19:a6:fc: d0:5f:8c:1c:86:99:16:9a:96:e0:b9:bd:5b:31:68: a7:0c:d4:42:3e:2a:2f:f2:d7:f5:13:2b:ee:a7:37: fa:4d:85:98:e9:dc:7d:4a:74:7e:c9:15:04:47:67: ce:73:06:2a:05:3f:69:64:c5:89:1f:a8:0d:83:c0: fc:64:43:c3:1a:20:b6:5b:e6:0c:6f:1c:00:14:44: 32:08:90:94:9a:19:95:f6:51:9e:57:8d:10:cc:c8: 55:d7:9d:a0:63:d8:95:f7:fc:4a:38:06:e2:89:65: 10:09:67:d8:93:b5:c8:b2:66:29:4c:5a:27:ba:26: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:63:2C:1D:3F:4D:2F:9C:D7:6D:22:D8:9C:A1:31:DB:F7:6E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/209031b8-f18a-343e-ad6b-2d5fbf44fd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:fc80:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3e:bc:33:a0:fe:34:cd:17:ef:ad:5f:d9:aa:ff:53:25:e6: 68:ea:14:24:60:07:ef:4d:be:b0:2e:80:5b:d6:a3:43:9d:82: 1f:5b:69:47:6a:d7:c5:6e:28:f0:0c:11:51:63:1f:7d:57:a1: ee:44:be:6a:f1:a0:23:44:62:66:b8:76:a3:db:00:b4:d7:61: c1:b9:1a:af:08:6e:45:26:5d:76:d6:52:5f:8e:77:63:12:3c: 9c:35:ae:cc:47:e9:88:53:0f:72:1d:8b:3b:63:06:8a:54:fe: e0:12:ef:b2:87:bc:4b:53:84:23:56:a9:93:4e:32:d6:0d:11: 4a:fe:2d:fd:02:80:8e:69:2e:be:5d:3b:db:1d:0c:ff:91:96: dc:17:c8:c8:1a:0d:39:22:56:ca:db:7b:8b:c7:56:8b:a9:6b: fe:bd:d6:70:00:14:b3:b2:3a:96:dc:e9:a4:a4:17:3a:da:d2: 73:a1:39:7f:41:d0:8b:d5:8f:a6:86:da:5b:1d:31:1d:27:4c: 90:a9:75:0d:c0:57:66:30:df:f4:9f:9a:9c:99:44:6a:da:27: ed:55:05:da:ce:e0:cb:fb:a0:b0:64:dd:9e:64:46:d9:a0:96: 9a:c5:88:5d:e0:d5:27:4d:65:27:38:f7:4f:09:2a:0c:e2:8e: 2c:98:3d:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+CrcSggnBz1PNjyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk ZDcxYjNkYTQtZTVhZS00Njg1LThkNDEtYmE0NmFkMTkxYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/YpiH1M2rwv+v/Sf2HbQ9dw7rgz5VMRx89I M55ec8JcD5AI6M2EBvuJI+9qQSuSh2BrmsG8suW5dnb+NDDosIEBJc1nJr0dYn4f QhYTlmlrdvuTJ6gXKnloTEP6AlR4B2X+EyKeUvXzAu5zBsO8eeE6/gzVIhqwBMDL ZKivl5D0qowZpvzQX4wchpkWmpbgub1bMWinDNRCPiov8tf1Eyvupzf6TYWY6dx9 SnR+yRUER2fOcwYqBT9pZMWJH6gNg8D8ZEPDGiC2W+YMbxwAFEQyCJCUmhmV9lGe V40QzMhV152gY9iV9/xKOAbiiWUQCWfYk7XIsmYpTFonuiZeFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD+sYywdP00vnNdtIticoTHb925KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjA5MDMxYjgtZjE4YS0z NDNlLWFkNmItMmQ1ZmJmNDRmZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIz68M6D+NM0X761f2ar/UyXmaOoUJGAH702+sC6AW9ajQ52CH1tp R2rXxW4o8AwRUWMffVeh7kS+avGgI0RiZrh2o9sAtNdhwbkarwhuRSZddtZSX453 YxI8nDWuzEfpiFMPch2LO2MGilT+4BLvsoe8S1OEI1apk04y1g0RSv4t/QKAjmku vl072x0M/5GW3BfIyBoNOSJWytt7i8dWi6lr/r3WcAAUs7I6ltzppKQXOtrSc6E5 f0HQi9WPpobaWx0xHSdMkKl1DcBXZjDf9J+anJlEaton7VUF2s7gy/ugsGTdnmRG 2aCWmsWIXeDVJ01lJzj3TwkqDOKOLJg91Q== -----END CERTIFICATE-----Generated at Wed Oct 28 11:48:13 2026 by rpki-client