$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa File: d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa (raw, json) Hash identifier: BDJoFCasS2tlQPSejMuE+r91sD0xVjHBLbLAsKAcSJ0= Subject key identifier: 56:F8:DE:6A:0E:D6:B4:F3:C3:F9:E1:B9:C1:59:6D:71:36:E3:82:95 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584EA787656427841BABCEBF7200 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 2607:3640:ffcc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:65:64:27:84:1b:ab:ce:bf:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=026d71c0-44c6-437d-b361-70410c4bac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:35:e6:a4:de:1f:13:3c:72:15:41:05:bd: bb:b5:fb:d1:62:12:1b:85:22:43:e1:ae:7a:4c:3a: 7a:83:17:9b:f4:eb:aa:10:13:17:de:20:7e:f4:2d: d8:ee:27:8a:6b:ef:63:29:45:e6:97:60:e3:09:c7: ba:01:81:34:f7:d6:30:1d:f9:59:2b:fc:53:4b:cf: 9a:c8:66:c5:b8:3f:53:5d:0d:de:c5:2d:00:e9:02: 29:d1:fc:e5:9c:89:34:8c:a4:af:6a:ba:18:19:a1: 63:f5:cf:17:9f:4c:4f:34:39:ae:cd:08:ce:04:fa: 44:c3:7d:09:a7:9e:b6:c5:a8:de:83:a6:01:1c:94: 73:fd:6e:c5:6d:c1:34:06:39:4a:4c:bc:0b:75:4e: 78:26:4d:11:e6:b1:f0:54:12:78:cd:0a:54:68:de: 95:47:a1:0a:22:e6:65:b6:6b:b0:2a:44:e0:13:bb: 97:ec:62:02:b6:4d:9a:4e:45:10:0d:5d:60:07:67: e9:cb:07:82:8a:ab:e3:3d:e6:4a:ff:92:0a:4b:c8: c0:52:fa:f0:22:32:99:6c:24:cb:0d:ca:fc:45:33: 55:13:a6:1a:2c:5d:f4:65:b3:e4:f6:d4:c7:ef:a7: cd:c6:c0:66:98:69:e9:b5:eb:e2:d1:2e:72:b6:70: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:DE:6A:0E:D6:B4:F3:C3:F9:E1:B9:C1:59:6D:71:36:E3:82:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640:ffcc::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2c:04:77:67:c0:42:5a:5f:21:bb:13:31:c9:f0:74:c2:38: 9f:32:d4:7b:23:7d:b3:b7:ee:df:4b:ea:23:80:05:f1:b1:8d: a2:96:d7:0a:f6:47:fc:aa:71:88:28:6d:1f:64:72:3e:79:f7: 7a:ee:9b:21:61:27:b2:63:54:53:3e:62:77:c7:a1:3f:d4:ea: e9:27:c6:86:04:91:35:fe:6c:6e:22:86:d4:d2:ab:3d:2a:26: c8:9b:be:de:eb:5e:63:6a:79:60:30:48:cf:d4:b2:5a:ee:b0: 6d:1a:bd:ab:9e:5d:3c:5c:70:2d:2c:0d:7f:20:5a:b1:0e:5b: 81:fb:db:2b:ee:3a:bd:2a:bf:9e:eb:d2:9a:d8:74:74:ec:b1: 66:66:4b:88:b8:5d:7e:2e:d7:cd:d0:6d:e5:4d:0b:50:86:56: 33:03:81:10:0b:28:79:7a:ae:09:79:8b:4d:06:44:fa:ef:fb: e1:22:7a:61:64:f2:8c:5f:20:10:93:6e:c3:17:12:5d:b0:77: b6:d5:ad:31:67:b7:c6:85:4a:35:2f:36:6d:e1:15:d1:c1:f0: 32:b4:c2:96:97:a5:74:13:26:d0:4b:b0:8c:20:4d:1d:7a:cf: b0:8c:79:b9:7b:cc:13:80:2f:82:d9:f0:83:da:d1:c8:59:cd: 8c:22:51:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nh2VkJ4Qbq86/cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDI2ZDcxYzAtNDRjNi00MzdkLWIzNjEtNzA0MTBjNGJhYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhA15qTeHxM8chVBBb27tfvRYhIbhSJD4a56 TDp6gxeb9OuqEBMX3iB+9C3Y7ieKa+9jKUXml2DjCce6AYE099YwHflZK/xTS8+a yGbFuD9TXQ3exS0A6QIp0fzlnIk0jKSvaroYGaFj9c8Xn0xPNDmuzQjOBPpEw30J p562xajeg6YBHJRz/W7FbcE0BjlKTLwLdU54Jk0R5rHwVBJ4zQpUaN6VR6EKIuZl tmuwKkTgE7uX7GICtk2aTkUQDV1gB2fpyweCiqvjPeZK/5IKS8jAUvrwIjKZbCTL Dcr8RTNVE6YaLF30ZbPk9tTH76fNxsBmmGnptevi0S5ytnBGAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFb43moO1rTzw/nhucFZbXE244KVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvZDhlZDhjZWItZTAxMy0z OGNmLTllMTgtNTE0YzNhNjM4OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgc2QP/M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEksBHdnwEJaXyG7EzHJ8HTCOJ8y1HsjfbO37t9L6iOABfGxjaKW 1wr2R/yqcYgobR9kcj5593rumyFhJ7JjVFM+YnfHoT/U6uknxoYEkTX+bG4ihtTS qz0qJsibvt7rXmNqeWAwSM/UslrusG0avaueXTxccC0sDX8gWrEOW4H72yvuOr0q v57r0prYdHTssWZmS4i4XX4u183QbeVNC1CGVjMDgRALKHl6rgl5i00GRPrv++Ei emFk8oxfIBCTbsMXEl2wd7bVrTFnt8aFSjUvNm3hFdHB8DK0wpaXpXQTJtBLsIwg TR16z7CMebl7zBOAL4LZ8IPa0chZzYwiUbg= -----END CERTIFICATE-----Generated at Thu Aug 20 23:39:06 2026 by rpki-client