$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bd3f811e-7665-3be9-951a-f3ead417f86c.roa File: bd3f811e-7665-3be9-951a-f3ead417f86c.roa (raw, json) Hash identifier: NsDDkqL5pBcPnInJ7qiUcFc+q5aRs8qAGNmtvvsPWUs= Subject key identifier: CA:A0:54:1E:BA:AF:E8:66:A3:1B:91:F6:D6:06:BD:9B:AA:22:86:62 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584F6CB531A7700C052B5A8CFB80 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bd3f811e-7665-3be9-951a-f3ead417f86c.roa Signing time: Wed 07 Oct 2026 16:07:50 +0000 ROA not before: Wed 07 Oct 2026 16:07:50 +0000 ROA not after: Tue 05 Jan 2027 17:07:50 +0000 asID: 6327 IP address blocks: 2607:ffb0:601c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:b5:31:a7:70:0c:05:2b:5a:8c:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Oct 7 16:07:50 2026 GMT Not After : Jan 5 17:07:50 2027 GMT Subject: CN=42f7ebc4-cbdb-4cd4-a161-ca34eb08a77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:b2:65:f2:73:3e:d3:4d:ba:66:f2:57:ec: 58:7c:02:05:f8:b5:69:60:ce:64:b2:b8:1c:87:22: 7b:49:b1:ae:04:50:1b:0b:1a:c6:c4:14:46:9d:ac: 54:83:7d:fe:a0:cc:41:8b:73:c7:4d:be:5e:43:94: bf:ea:93:cb:be:cc:f8:39:06:2d:66:8d:f0:24:e5: 05:15:bd:df:f6:fe:18:f6:25:64:8a:95:77:1c:7a: f1:ad:d3:09:d9:46:d4:a5:e9:35:2a:bd:b4:ba:8b: 66:7d:83:b2:2d:e1:a0:d4:2c:97:2d:e8:b3:88:37: ef:45:69:08:08:a7:1b:ae:c2:98:b2:3f:be:93:ed: 7e:50:2c:65:f6:09:42:dd:ea:fe:c6:31:3c:af:fa: d6:db:89:74:1e:db:d9:25:ee:a2:97:0b:56:e8:41: 61:eb:21:12:65:41:ce:88:1f:a5:64:e9:7d:62:c5: 2d:86:43:4b:50:4b:69:2e:ac:08:bc:8a:70:93:d1: 40:0d:78:09:de:30:60:53:91:00:b0:3d:39:ee:7a: 55:0a:4a:14:d9:d4:6e:93:5b:1e:9c:a5:ca:83:a9: db:b8:52:7e:cf:f9:a4:2c:0c:fb:78:73:6f:38:5e: 53:cb:3a:3e:64:6b:fd:c3:1e:25:de:27:6c:88:b5: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A0:54:1E:BA:AF:E8:66:A3:1B:91:F6:D6:06:BD:9B:AA:22:86:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bd3f811e-7665-3be9-951a-f3ead417f86c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv6: 2607:ffb0:601c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b7:f4:f5:4c:68:1b:ab:b8:77:a9:72:e5:b5:4c:7d:98:b2: 64:5b:5e:f5:2e:eb:ff:9c:e8:3a:75:cc:c1:46:e3:fb:31:2e: 2f:e2:af:a1:82:e3:93:d0:9d:76:b1:61:f7:2e:41:f4:e7:04: ad:20:06:f6:c0:e2:88:49:9a:c0:54:c0:bd:d7:93:da:a3:fd: 9a:61:a3:ef:5c:0a:c3:72:4f:52:f6:80:e5:3a:b5:f0:65:4e: 4a:07:22:df:40:05:76:b2:9b:01:2e:db:e7:a2:d1:4e:c9:7b: 45:66:41:f3:11:6f:3d:82:ce:96:98:08:ca:c9:65:8d:9e:00: 60:1d:dc:7d:50:63:1c:a2:37:ce:ba:ae:47:23:b9:a4:4f:dc: 9a:2e:c7:ce:1a:ab:07:ec:8d:9e:2f:4f:52:fc:1b:2a:c5:8a: 73:34:0f:8e:aa:50:1c:38:6f:9e:51:f6:0b:31:70:14:7d:ab: 2d:9a:04:38:65:94:bd:fa:68:e8:ac:b6:19:a1:15:61:de:f0: 24:5e:73:b6:31:92:ab:8e:7d:0f:21:7e:49:77:32:e6:0c:56: 13:41:68:94:56:f4:e8:16:31:47:06:55:01:bd:70:dc:30:c8: ec:f2:c8:c1:26:f4:55:5d:65:e4:de:03:41:0f:28:08:b5:c4: 14:92:46:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9stTGncAwFK1qM+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MTAwNzE2MDc1MFoXDTI3MDEwNTE3MDc1MFowLzEtMCsGA1UEAxMk NDJmN2ViYzQtY2JkYi00Y2Q0LWExNjEtY2EzNGViMDhhNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1uyZfJzPtNNumbyV+xYfAIF+LVpYM5ksrgc hyJ7SbGuBFAbCxrGxBRGnaxUg33+oMxBi3PHTb5eQ5S/6pPLvsz4OQYtZo3wJOUF Fb3f9v4Y9iVkipV3HHrxrdMJ2UbUpek1Kr20uotmfYOyLeGg1CyXLeiziDfvRWkI CKcbrsKYsj++k+1+UCxl9glC3er+xjE8r/rW24l0HtvZJe6ilwtW6EFh6yESZUHO iB+lZOl9YsUthkNLUEtpLqwIvIpwk9FADXgJ3jBgU5EAsD057npVCkoU2dRuk1se nKXKg6nbuFJ+z/mkLAz7eHNvOF5Tyzo+ZGv9wx4l3idsiLVR2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMqgVB66r+hmoxuR9tYGvZuqIoZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYmQzZjgxMWUtNzY2NS0z YmU5LTk1MWEtZjNlYWQ0MTdmODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf/sGAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACa39PVMaBuruHepcuW1TH2YsmRbXvUu6/+c6Dp1zMFG4/sxLi/i r6GC45PQnXaxYfcuQfTnBK0gBvbA4ohJmsBUwL3Xk9qj/Zpho+9cCsNyT1L2gOU6 tfBlTkoHIt9ABXaymwEu2+ei0U7Je0VmQfMRbz2CzpaYCMrJZY2eAGAd3H1QYxyi N866rkcjuaRP3Joux84aqwfsjZ4vT1L8GyrFinM0D46qUBw4b55R9gsxcBR9qy2a BDhllL36aOisthmhFWHe8CRec7YxkquOfQ8hfkl3MuYMVhNBaJRW9OgWMUcGVQG9 cNwwyOzyyMEm9FVdZeTeA0EPKAi1xBSSRso= -----END CERTIFICATE-----Generated at Thu Oct 8 20:06:53 2026 by rpki-client