$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa File: 790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa (raw, json) Hash identifier: 1z2RS/1Pd28SWHvehGHl4JHIK6HA4SKp90+CV6Ms/zM= Subject key identifier: D1:B3:5C:96:BD:FD:43:61:6F:BD:5F:B0:F5:D9:7F:98:B4:69:5C:6B Certificate issuer: /CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Certificate serial: 010D0C9F4328584F498C1E626ED87E66EE77F600 Authority key identifier: D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63089 IP address blocks: 2604:2de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1e:62:6e:d8:7e:66:ee:77:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd65204e-8365-4836-9f71-e629a8eafb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:40:58:9c:b0:81:85:9b:06:40:10:d4:d5: 30:90:0d:d2:de:8b:c4:0a:e5:b8:85:ae:f3:47:cd: 04:c3:31:16:6c:24:b9:fd:75:35:c1:6e:62:9f:3e: 50:49:a1:b4:be:bb:f6:73:b3:f9:1d:8d:5b:26:a0: 5a:50:f2:45:97:5f:dd:88:4e:13:fb:67:3e:d9:4d: a3:27:89:fe:c4:e9:00:63:ba:fe:a8:63:6a:6b:2b: 15:d3:ee:62:cb:53:ea:ef:7c:8e:3a:c5:89:b9:a7: cf:d1:60:6c:69:84:c6:53:df:a8:ae:11:d2:76:99: 91:22:24:f8:da:ab:d6:96:9f:6a:39:cc:e4:02:fa: b7:e8:ef:86:fa:a7:ad:0b:a6:8b:88:e5:49:f8:4d: 25:3c:5e:08:87:be:e2:3d:92:42:26:21:f1:1e:aa: e0:0c:86:96:45:8b:4c:17:c3:27:de:4c:30:71:53: 0e:01:50:9a:11:2f:a4:16:bf:5d:db:80:57:bb:4a: bf:3a:db:18:a6:25:f4:5b:99:a0:cc:57:fa:f7:ce: 9c:51:c0:bb:54:7c:06:42:64:80:b6:c8:6d:c2:90: 37:65:92:9b:a5:aa:31:27:46:7f:3c:28:69:bf:0e: 85:8f:70:f7:2f:78:75:0e:9b:fb:c1:00:b7:3f:c9: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:5C:96:BD:FD:43:61:6F:BD:5F:B0:F5:D9:7F:98:B4:69:5C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/790f327d-2df8-3dff-97b3-e6ff4b3b3dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl X509v3 Authority Key Identifier: keyid:D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:2de0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:43:26:c3:a2:34:31:6f:47:26:22:5d:b3:cc:6f:05:fe:37: e0:e6:c9:46:e3:07:b9:6e:e5:e5:83:45:0f:45:57:3b:ab:e0: 3e:c3:49:26:74:95:1f:99:e1:4a:48:11:a2:12:34:af:19:fb: b3:75:f8:ed:b3:9e:0c:b0:b8:3a:7f:3a:53:f5:b4:8c:5c:43: 48:34:63:3c:d1:8c:37:83:a6:b9:e8:cb:b0:34:28:70:b5:60: 2a:d1:14:65:d7:b8:6c:91:98:63:9e:84:51:02:d0:fa:35:33: 84:71:01:6e:9d:a1:d3:6a:d4:7f:7b:16:ce:fb:95:f7:86:99: 59:3f:02:90:d4:2d:9d:14:c7:5b:c4:71:9b:6f:a2:05:9d:71: 15:35:6a:b9:bd:03:87:a9:b8:2b:99:87:21:f5:06:98:f0:8f: 66:63:77:9d:66:ce:56:ef:92:43:15:ba:00:0c:d0:6a:94:2a: aa:d3:db:70:a5:8e:13:da:3e:f6:60:fa:3b:74:03:7c:82:bf: 98:b1:85:3e:5a:06:18:09:75:f6:8a:9a:5b:43:4d:17:a4:c2: 16:58:fc:fc:21:f5:f5:c6:78:fb:4d:dc:42:62:30:b1:6a:26: 8f:76:b1:14:bb:39:44:d9:6b:9e:91:80:b7:10:6e:99:3e:c9: 9f:bc:64:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JjB5ibth+Zu539gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDMzZWMtOTRhMi00YzI1LWFkZWEtYzdjYjJiZDJi YjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ2NTIwNGUtODM2NS00ODM2LTlmNzEtZTYyOWE4ZWFmYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyBAWJywgYWbBkAQ1NUwkA3S3ovECuW4ha7z R80EwzEWbCS5/XU1wW5inz5QSaG0vrv2c7P5HY1bJqBaUPJFl1/diE4T+2c+2U2j J4n+xOkAY7r+qGNqaysV0+5iy1Pq73yOOsWJuafP0WBsaYTGU9+orhHSdpmRIiT4 2qvWlp9qOczkAvq36O+G+qetC6aLiOVJ+E0lPF4Ih77iPZJCJiHxHqrgDIaWRYtM F8Mn3kwwcVMOAVCaES+kFr9d24BXu0q/OtsYpiX0W5mgzFf6986cUcC7VHwGQmSA tshtwpA3ZZKbpaoxJ0Z/PChpvw6Fj3D3L3h1Dpv7wQC3P8mynwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNGzXJa9/UNhb71fsPXZf5i0aVxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0 MzNlYy05NGEyLTRjMjUtYWRlYS1jN2NiMmJkMmJiMWIvNzkwZjMyN2QtMmRmOC0z ZGZmLTk3YjMtZTZmZjRiM2IzZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjQwNDMzZWMtOTRhMi00YzI1LWFk ZWEtYzdjYjJiZDJiYjFiL2I0MDQzM2VjLTk0YTItNGMyNS1hZGVhLWM3Y2IyYmQy YmIxYi5jcmwwHwYDVR0jBBgwFoAU0fDkSRg642PMImjN9EbDlQm6dbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0MzNlYy05NGEyLTRjMjUtYWRlYS1jN2Ni MmJkMmJiMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQt4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByQybDojQxb0cmIl2zzG8F/jfg5slG4we5buXlg0UPRVc7q+A+w0km dJUfmeFKSBGiEjSvGfuzdfjts54MsLg6fzpT9bSMXENINGM80Yw3g6a56MuwNChw tWAq0RRl17hskZhjnoRRAtD6NTOEcQFunaHTatR/exbO+5X3hplZPwKQ1C2dFMdb xHGbb6IFnXEVNWq5vQOHqbgrmYch9QaY8I9mY3edZs5W75JDFboADNBqlCqq09tw pY4T2j72YPo7dAN8gr+YsYU+WgYYCXX2ippbQ00XpMIWWPz8IfX1xnj7TdxCYjCx aiaPdrEUuzlE2WuekYC3EG6ZPsmfvGS1 -----END CERTIFICATE-----Generated at Mon Oct 12 02:24:55 2026 by rpki-client