$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: nvbJzY0llSB30i6hIHkU5qBAirQ89fsBsJ3ElHsg6V4= Subject key identifier: AB:7F:91:3D:5F:D8:DC:2D:35:7E:0A:6D:01:23:66:8F:FA:E0:3B:59 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584F6292CC47BA6BD9F3A4FE2280 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cc:47:ba:6b:d9:f3:a4:fe:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=75b47c5b-cd9a-477c-abe0-5073bee842c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:00:45:53:b1:e3:6f:59:1d:3c:19:93:10: a8:54:d2:c6:0e:86:20:72:af:be:af:cb:c2:3f:c4: db:1c:db:cf:e4:50:64:3a:3a:85:7c:13:4d:0b:74: 8a:47:fe:f0:e9:0a:48:93:ec:4c:ae:9b:9b:31:ec: 13:7e:68:f9:d6:89:20:fa:2f:6a:0f:50:77:56:db: c2:a0:e0:a1:27:d7:4e:dd:46:c8:a9:f4:07:1f:e4: 29:3f:5c:af:28:d5:18:ee:3a:91:5e:ab:71:fc:63: e7:99:36:77:2d:64:24:55:29:b4:14:61:a0:f1:80: be:3b:fb:ce:09:99:11:ba:ae:ac:13:e9:fe:25:98: 1a:b9:3e:ac:8c:86:e4:ed:90:48:0c:28:cf:2b:28: 1a:0a:c3:ae:17:df:d5:7d:19:35:87:5f:e7:36:74: d2:8c:94:1c:3d:76:83:5d:dc:4f:2f:2c:90:fa:a2: 20:12:18:68:ae:e5:a1:e8:c2:02:fa:f8:61:bd:16: c8:ec:53:d1:1c:b8:03:d4:0c:d0:5f:b2:b8:e1:2d: 3c:95:9b:b5:57:8b:92:f2:20:de:24:8f:ec:8e:f3: 36:f0:21:2b:89:6f:f7:88:d7:aa:1c:6f:4b:25:1f: 92:07:a4:92:cd:b9:3b:a5:7f:44:49:c8:d9:71:dd: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:91:3D:5F:D8:DC:2D:35:7E:0A:6D:01:23:66:8F:FA:E0:3B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0a:b8:be:17:e0:f0:df:5a:87:0f:36:7c:12:ec:c7:c4:a3: 1b:4d:13:c0:07:3d:08:c6:1a:9d:05:73:bc:ab:1f:bb:36:0b: af:21:d5:5e:48:6d:e3:05:2d:75:05:f8:aa:5f:03:04:b7:e5: f4:e9:f7:d9:e7:f9:3c:db:07:7b:f0:9b:a4:41:07:2a:0c:09: 5d:a9:17:76:29:42:39:b4:ec:56:3a:08:12:b3:d3:78:0d:0b: c1:db:38:a9:e6:07:20:54:1d:8f:6f:23:ed:fc:c5:05:83:04: 3e:9e:60:9f:a6:43:ab:3f:40:4d:c2:70:0a:b9:3b:ed:66:1e: 0a:21:a2:53:67:9f:aa:26:ef:e0:34:35:7a:47:4a:e8:21:9e: ae:84:e3:a8:a9:c7:0a:6c:77:cc:f0:02:0d:73:61:61:be:83: 87:af:79:4c:2b:34:49:7e:66:24:4a:b0:fd:fa:ec:1b:6f:fb: 78:b0:25:e2:81:ee:69:83:d7:7e:52:87:e1:0f:08:8c:54:83: ef:60:ce:c4:a9:6c:4a:26:58:06:8a:bf:1c:b2:70:5a:bf:48: 9a:d7:2e:a9:18:18:f0:9c:d7:ab:b5:97:d5:f7:a5:5d:bc:5b: 1e:de:8a:89:66:6a:56:6f:f0:62:3e:af:25:a7:87:66:7e:0f: 9d:47:d1:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iksxHumvZ86T+IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NzViNDdjNWItY2Q5YS00NzdjLWFiZTAtNTA3M2JlZTg0MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTwARVOx429ZHTwZkxCoVNLGDoYgcq++r8vC P8TbHNvP5FBkOjqFfBNNC3SKR/7w6QpIk+xMrpubMewTfmj51okg+i9qD1B3VtvC oOChJ9dO3UbIqfQHH+QpP1yvKNUY7jqRXqtx/GPnmTZ3LWQkVSm0FGGg8YC+O/vO CZkRuq6sE+n+JZgauT6sjIbk7ZBIDCjPKygaCsOuF9/VfRk1h1/nNnTSjJQcPXaD XdxPLyyQ+qIgEhhoruWh6MIC+vhhvRbI7FPRHLgD1AzQX7K44S08lZu1V4uS8iDe JI/sjvM28CEriW/3iNeqHG9LJR+SB6SSzbk7pX9EScjZcd2QnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKt/kT1f2NwtNX4KbQEjZo/64DtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWCri+F+Dw31qHDzZ8EuzHxKMbTRPABz0IxhqdBXO8qx+7NguvIdVe SG3jBS11BfiqXwMEt+X06ffZ5/k82wd78JukQQcqDAldqRd2KUI5tOxWOggSs9N4 DQvB2zip5gcgVB2PbyPt/MUFgwQ+nmCfpkOrP0BNwnAKuTvtZh4KIaJTZ5+qJu/g NDV6R0roIZ6uhOOoqccKbHfM8AINc2FhvoOHr3lMKzRJfmYkSrD9+uwbb/t4sCXi ge5pg9d+UofhDwiMVIPvYM7EqWxKJlgGir8csnBav0ia1y6pGBjwnNertZfV96Vd vFse3oqJZmpWb/BiPq8lp4dmfg+dR9Gd -----END CERTIFICATE-----Generated at Tue Oct 13 12:52:20 2026 by rpki-client