$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/68702033-dba7-3aca-9c37-c3f5d60a72af.roa File: 68702033-dba7-3aca-9c37-c3f5d60a72af.roa (raw, json) Hash identifier: 4BbhYaRLh56tsLLIxusGZPH/V5VhIBt7OLIreK+IjTQ= Subject key identifier: 98:AF:D9:9D:E9:0F:4B:36:92:8C:A8:73:16:DF:51:F1:B1:F8:72:72 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F0A0A4B73221C1459DB7207D3 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/68702033-dba7-3aca-9c37-c3f5d60a72af.roa Signing time: Wed 02 Sep 2026 07:54:17 +0000 ROA not before: Wed 02 Sep 2026 07:54:17 +0000 ROA not after: Tue 01 Dec 2026 08:54:17 +0000 asID: 3573 IP address blocks: 2610:b0:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:0a:4b:73:22:1c:14:59:db:72:07:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Sep 2 07:54:17 2026 GMT Not After : Dec 1 08:54:17 2026 GMT Subject: CN=a9cc0a9b-73b4-4356-9b22-0fbd48e29687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:33:3b:69:85:da:29:9d:a9:80:14:61:35: 42:67:f9:7a:e3:20:13:6d:75:51:82:65:5e:c5:89: 5a:66:49:68:43:83:89:43:31:18:dc:df:da:a1:42: cf:21:50:fd:d9:4d:f3:ea:db:15:ba:fd:b7:8d:65: f2:be:4e:5a:fa:b1:2d:80:71:e3:74:b6:14:4b:89: 0a:3c:2e:1a:11:51:9f:41:47:11:93:e1:e8:26:b0: 85:10:8f:e7:59:2a:f8:4e:18:3a:33:24:ef:4a:80: 86:4d:40:59:05:ad:0b:3f:a9:ad:ce:b2:38:dd:5c: aa:6b:90:51:dd:3f:9d:b7:7e:51:12:6d:db:70:03: 79:1b:18:42:00:be:b3:80:18:f3:3d:a0:f5:31:e2: ea:72:7d:5a:d5:b5:e0:a7:8a:94:a8:ce:e0:37:e4: 58:05:a9:da:49:14:2a:7d:16:65:8d:90:04:cc:52: 90:9a:1b:e6:24:47:43:d2:bb:46:66:1b:ac:c0:b1: 94:21:58:de:ca:15:e6:2f:a3:6d:57:39:52:2c:62: a4:87:40:27:08:66:cd:3b:51:ce:31:ca:e5:07:29: 87:74:15:6a:df:8b:0f:63:1a:ed:b4:ea:45:cb:70: 91:d2:4e:6e:7d:39:8f:1f:ab:c1:74:95:96:4e:69: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AF:D9:9D:E9:0F:4B:36:92:8C:A8:73:16:DF:51:F1:B1:F8:72:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/68702033-dba7-3aca-9c37-c3f5d60a72af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:73:12:bd:c0:b3:c8:18:3f:c3:a2:aa:ed:e5:df:e0:b9:6d: 7c:6f:43:18:77:41:47:51:8e:0a:f9:38:1c:db:26:4d:7f:3a: 63:64:ca:58:9a:df:09:5c:44:8f:d4:1e:40:de:85:d6:d9:ea: 17:09:03:db:5d:4b:94:89:aa:e4:1f:4b:39:45:ac:33:3f:24: 7b:4e:bc:28:57:3c:0e:b1:ae:94:7c:75:34:11:51:eb:8f:8b: 14:85:c4:35:60:c9:2f:ab:e9:50:69:85:a2:b9:9a:7e:c4:c8: 9e:5f:6b:bd:d8:bb:de:f2:83:35:ac:03:3d:b2:a0:a9:92:08: 86:b6:0e:1f:62:a3:78:d3:2a:b5:35:17:07:7c:a8:dd:63:41: 0e:b2:15:af:39:7e:b5:4e:d2:4c:4b:77:f4:e4:69:b8:55:fa: cc:65:d1:ce:f9:f9:6d:a4:f2:80:fb:90:6d:c3:f8:ad:59:03: 2d:c9:e1:4b:05:83:de:43:8c:68:03:7b:d2:ff:1a:15:82:7e: e5:40:f0:81:30:08:6a:d8:20:ab:72:80:f0:af:be:c2:4e:11: 24:3b:c1:93:a8:c0:ba:6e:9e:65:7e:75:e9:eb:50:62:2f:db: 30:ff:86:41:86:cf:e1:ee:63:0f:6e:ca:b3:e6:dd:81:34:85: fd:9d:11:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8KCktzIhwUWdtyB9MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MDkwMjA3NTQxN1oXDTI2MTIwMTA4NTQxN1owLzEtMCsGA1UEAxMk YTljYzBhOWItNzNiNC00MzU2LTliMjItMGZiZDQ4ZTI5Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz8zO2mF2imdqYAUYTVCZ/l64yATbXVRgmVe xYlaZkloQ4OJQzEY3N/aoULPIVD92U3z6tsVuv23jWXyvk5a+rEtgHHjdLYUS4kK PC4aEVGfQUcRk+HoJrCFEI/nWSr4Thg6MyTvSoCGTUBZBa0LP6mtzrI43Vyqa5BR 3T+dt35REm3bcAN5GxhCAL6zgBjzPaD1MeLqcn1a1bXgp4qUqM7gN+RYBanaSRQq fRZljZAEzFKQmhvmJEdD0rtGZhuswLGUIVjeyhXmL6NtVzlSLGKkh0AnCGbNO1HO McrlBymHdBVq34sPYxrttOpFy3CR0k5ufTmPH6vBdJWWTmkiMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJiv2Z3pD0s2koyocxbfUfGx+HJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvNjg3MDIwMzMtZGJhNy0z YWNhLTljMzctYzNmNWQ2MGE3MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAsAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALXMSvcCzyBg/w6Kq7eXf4LltfG9DGHdBR1GOCvk4HNsmTX86Y2TK WJrfCVxEj9QeQN6F1tnqFwkD211LlImq5B9LOUWsMz8ke068KFc8DrGulHx1NBFR 64+LFIXENWDJL6vpUGmFormafsTInl9rvdi73vKDNawDPbKgqZIIhrYOH2KjeNMq tTUXB3yo3WNBDrIVrzl+tU7STEt39ORpuFX6zGXRzvn5baTygPuQbcP4rVkDLcnh SwWD3kOMaAN70v8aFYJ+5UDwgTAIatggq3KA8K++wk4RJDvBk6jAum6eZX516etQ Yi/bMP+GQYbP4e5jD27Ks+bdgTSF/Z0RFg== -----END CERTIFICATE-----Generated at Wed Sep 16 18:03:30 2026 by rpki-client