$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa File: 7c1ba9ff-755e-3117-9120-25b143c0f470.roa (raw, json) Hash identifier: euqpc167hmOo+VNYMJoEqplnahuIvQMnTl8P4fChGGY= Subject key identifier: 57:0B:E0:0C:0D:3D:C1:88:15:D5:CE:E8:6D:E5:A9:BB:F5:13:2E:F3 Certificate issuer: /CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Certificate serial: 010D0C9F4328584F49764F6C447830FAB25E68D0 Authority key identifier: 9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12145 IP address blocks: 2604:dec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:4f:6c:44:78:30:fa:b2:5e:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb6c6308-f86a-4af7-b09e-2c69f8007908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:13:ac:11:94:22:08:2a:5f:90:f3:e5:c4: f0:cd:0a:ed:c8:0e:44:55:95:3b:7b:09:9d:32:0a: 46:f0:d4:a7:81:cf:e3:8a:23:4e:0e:b3:17:10:47: a8:70:51:93:68:7d:7d:e4:9b:b3:04:22:61:33:8a: b3:cf:f2:22:3d:ba:a4:5d:3c:87:80:09:02:9d:a1: a7:49:a0:f5:77:41:99:7e:62:e9:76:04:c8:13:5f: 3e:b6:d2:60:bc:2f:b2:c7:19:4e:99:8d:5a:53:94: b8:35:83:01:fb:e0:73:a0:ec:ff:33:9a:8d:e0:2a: f4:a3:d0:0a:13:25:08:cb:22:5a:27:9d:83:9a:cb: 6f:05:2b:c8:9a:f8:f4:83:cc:4b:39:4c:95:ea:3a: 0a:35:5a:1e:fa:21:0f:c4:d8:09:08:7f:5f:c2:d6: 5d:9e:32:94:48:64:b0:3e:4b:8d:4c:5c:d5:f1:6f: 70:37:e6:fd:de:ba:9e:11:4f:59:2d:ea:47:8e:a9: ef:df:74:b3:95:1d:ef:57:9f:5f:25:23:8d:1b:02: 35:ed:2e:dd:81:d0:53:86:18:5f:ef:68:03:5d:57: c7:23:55:0b:14:a8:df:c2:51:a4:29:79:62:e2:8c: 39:f4:fa:d2:3c:c7:d3:a9:b5:28:dd:be:b9:24:c5: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:E0:0C:0D:3D:C1:88:15:D5:CE:E8:6D:E5:A9:BB:F5:13:2E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl X509v3 Authority Key Identifier: keyid:9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer sbgp-ipAddrBlock: critical IPv6: 2604:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f9:7d:3c:ed:7c:c5:4a:72:f4:bb:18:f2:0e:66:89:45:fe: b7:e8:cc:92:8a:5b:db:7c:d5:eb:56:f4:54:69:b2:c4:4b:1d: 8f:13:40:cb:3b:13:3f:3b:a0:a4:7a:c7:ed:0a:c9:57:a3:65: c7:49:41:e3:05:03:73:d6:10:15:d6:f3:12:37:58:27:ef:8f: d1:c3:e4:3c:b0:e1:a5:82:78:a7:0a:0a:71:23:58:8c:43:1f: cf:0c:26:b4:14:c2:43:a2:db:9b:ba:fe:25:42:ee:5b:91:10: 45:38:2d:24:36:16:7b:1e:16:38:e8:5a:36:71:79:a4:31:66: a5:3f:14:cd:fb:76:17:a2:94:75:61:f8:13:0a:e7:83:c1:a1: 4f:2c:21:e9:0e:ca:b2:ec:33:cd:ea:54:2f:96:19:6c:b7:3f: 07:3c:2a:42:c8:e5:9e:a1:0e:be:7e:a6:fd:6b:a2:ce:85:ff: 46:be:de:57:70:dd:cc:4a:7f:ec:b0:8f:6f:4f:22:2a:6b:af: aa:29:74:76:96:c3:3f:8a:ef:5c:2e:e9:bb:f2:1c:d6:25:ff: 76:c8:8a:53:04:81:b2:00:bc:f9:3b:f3:f1:30:91:aa:86:ec: 67:95:f8:80:b7:32:be:31:5f:ff:32:11:49:f0:c9:09:e4:04: 68:ae:ae:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jdk9sRHgw+rJeaNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg5MGY4ZmQtM2FlNi00ODE4LThjMWYtMTlhYWI2NmY0 M2ExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmI2YzYzMDgtZjg2YS00YWY3LWIwOWUtMmM2OWY4MDA3OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprYTrBGUIggqX5Dz5cTwzQrtyA5EVZU7ewmd MgpG8NSngc/jiiNODrMXEEeocFGTaH195JuzBCJhM4qzz/IiPbqkXTyHgAkCnaGn SaD1d0GZfmLpdgTIE18+ttJgvC+yxxlOmY1aU5S4NYMB++BzoOz/M5qN4Cr0o9AK EyUIyyJaJ52DmstvBSvImvj0g8xLOUyV6joKNVoe+iEPxNgJCH9fwtZdnjKUSGSw PkuNTFzV8W9wN+b93rqeEU9ZLepHjqnv33SzlR3vV59fJSONGwI17S7dgdBThhhf 72gDXVfHI1ULFKjfwlGkKXli4ow59PrSPMfTqbUo3b65JMVm+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFcL4AwNPcGIFdXO6G3lqbv1Ey7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkw ZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFhYjY2ZjQzYTEvN2MxYmE5ZmYtNzU1ZS0z MTE3LTkxMjAtMjViMTQzYzBmNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg5MGY4ZmQtM2FlNi00ODE4LThj MWYtMTlhYWI2NmY0M2ExLzQ4OTBmOGZkLTNhZTYtNDgxOC04YzFmLTE5YWFiNjZm NDNhMS5jcmwwHwYDVR0jBBgwFoAUn4VJANjIJmaLXtqnBcaJneoferwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkwZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFh YjY2ZjQzYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBx+X087XzFSnL0uxjyDmaJRf636MySilvbfNXrVvRUabLESx2PE0DL OxM/O6CkesftCslXo2XHSUHjBQNz1hAV1vMSN1gn74/Rw+Q8sOGlgninCgpxI1iM Qx/PDCa0FMJDotubuv4lQu5bkRBFOC0kNhZ7HhY46Fo2cXmkMWalPxTN+3YXopR1 YfgTCueDwaFPLCHpDsqy7DPN6lQvlhlstz8HPCpCyOWeoQ6+fqb9a6LOhf9Gvt5X cN3MSn/ssI9vTyIqa6+qKXR2lsM/iu9cLum78hzWJf92yIpTBIGyALz5O/PxMJGq huxnlfiAtzK+MV//MhFJ8MkJ5ARorq4P -----END CERTIFICATE-----Generated at Sun Oct 11 19:46:56 2026 by rpki-client