$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: WJJek9MeUgezZJU+6MYl8YoLzp74aaWeuIW4rEWiHs8= Subject key identifier: EF:05:D7:EC:7E:C3:40:68:FA:4A:99:A7:D9:11:CF:A0:63:28:60:BB Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584F4C3D51E61C37AEBACD072A80 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:51:e6:1c:37:ae:ba:cd:07:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dbdb8f19-5b21-4e39-ba8f-eb2728046127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:71:45:f8:25:7b:2e:6b:35:ba:b8:57:35: ce:0c:7c:18:ca:a3:60:82:22:f8:6d:1b:78:ee:62: 23:f1:77:5c:7a:a3:99:fd:82:71:a5:f0:0a:2a:87: ec:12:78:8d:72:75:2e:1f:59:de:20:19:40:03:37: 4f:0a:06:c0:da:17:f6:cf:6d:7d:00:e9:2a:ad:57: 97:62:c3:db:00:ba:83:c3:06:09:a1:f4:e1:3a:54: c8:00:33:61:df:7d:7b:39:a0:2e:b2:93:b7:59:cc: 57:76:26:ab:7c:02:45:3a:de:1f:a4:33:c4:30:92: 89:a4:eb:53:38:14:2c:30:fd:ba:33:b0:d7:c8:0d: 83:ed:65:3d:1e:c7:4c:e5:a5:7b:4e:30:0e:f8:d3: 47:66:04:96:e3:84:3c:b7:85:80:42:02:c9:db:0b: 34:37:5f:b2:80:53:86:ae:cc:57:ad:b2:6f:eb:ce: cf:f2:bc:ef:26:b0:56:e1:e5:85:bc:cb:e4:f7:5f: a0:8e:a0:8e:5e:01:44:08:cb:b5:45:51:de:d8:4e: c4:93:36:21:72:47:4e:ef:12:89:33:b0:b8:10:d6: b2:0d:aa:04:59:48:b5:5b:28:b0:f7:b2:ee:bb:a0: 33:18:9e:8a:c4:28:c5:5b:64:e6:c4:64:e4:a3:dc: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:05:D7:EC:7E:C3:40:68:FA:4A:99:A7:D9:11:CF:A0:63:28:60:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:4c:78:7c:0e:88:c9:18:df:74:1a:57:ad:38:f3:c7:17:8f: 87:2b:a4:c5:9d:3b:7c:6d:37:ce:e2:6f:d5:a1:68:79:15:6a: 51:5e:09:69:07:3d:90:35:d6:86:25:c0:09:a9:92:b8:28:4b: 75:0b:e4:0f:17:a3:f1:50:d1:4a:c7:98:67:94:7a:04:56:75: 13:54:d9:6c:97:d5:28:7b:c5:1b:5d:a5:1f:4c:0b:86:ff:16: fc:b6:3e:3b:76:61:db:b6:5a:ae:83:f4:8a:f9:b4:cf:7e:dc: 71:7d:20:8b:32:e2:af:6b:be:63:fe:6b:82:46:d2:19:d8:a3: 72:e0:24:5b:22:34:aa:fb:57:30:94:e1:97:58:d3:7f:ef:48: dc:8f:13:23:9a:dd:7d:67:fa:3a:a6:93:11:fa:82:d3:b4:8f: 79:f6:df:91:da:68:d6:86:6c:94:9d:46:48:44:60:ae:bb:34: ce:1c:b1:0e:8a:d9:e8:a9:b1:67:e1:d0:93:b4:c9:eb:ff:79: 80:bb:69:5e:67:62:7a:29:0a:13:aa:b9:d9:94:8b:07:8c:71: 43:27:9d:ca:9f:d3:46:ef:ef:21:7a:0f:1f:28:02:37:04:43: 24:00:66:48:81:22:95:a0:06:68:1f:a9:29:76:65:54:bc:d5: dc:40:55:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVHmHDeuus0HKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGJkYjhmMTktNWIyMS00ZTM5LWJhOGYtZWIyNzI4MDQ2MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFtxRfgley5rNbq4VzXODHwYyqNggiL4bRt4 7mIj8XdceqOZ/YJxpfAKKofsEniNcnUuH1neIBlAAzdPCgbA2hf2z219AOkqrVeX YsPbALqDwwYJofThOlTIADNh3317OaAuspO3WcxXdiarfAJFOt4fpDPEMJKJpOtT OBQsMP26M7DXyA2D7WU9HsdM5aV7TjAO+NNHZgSW44Q8t4WAQgLJ2ws0N1+ygFOG rsxXrbJv687P8rzvJrBW4eWFvMvk91+gjqCOXgFECMu1RVHe2E7EkzYhckdO7xKJ M7C4ENayDaoEWUi1Wyiw97Luu6AzGJ6KxCjFW2TmxGTko9wTLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO8F1+x+w0Bo+kqZp9kRz6BjKGC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL9MeHwOiMkY33QaV60488cXj4crpMWdO3xtN87ib9WhaHkValFe CWkHPZA11oYlwAmpkrgoS3UL5A8Xo/FQ0UrHmGeUegRWdRNU2WyX1Sh7xRtdpR9M C4b/Fvy2Pjt2Ydu2Wq6D9Ir5tM9+3HF9IIsy4q9rvmP+a4JG0hnYo3LgJFsiNKr7 VzCU4ZdY03/vSNyPEyOa3X1n+jqmkxH6gtO0j3n235HaaNaGbJSdRkhEYK67NM4c sQ6K2eipsWfh0JO0yev/eYC7aV5nYnopChOqudmUiweMcUMnncqf00bv7yF6Dx8o AjcEQyQAZkiBIpWgBmgfqSl2ZVS81dxAVQE= -----END CERTIFICATE-----Generated at Tue Oct 6 08:37:41 2026 by rpki-client