$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa File: 4119a5a7-c170-3693-ab45-9cec8eb09f41.roa (raw, json) Hash identifier: 3P1MOpUT+j/QQo35ep0GzzOsNTAGQkS2WQfkmIfCxyg= Subject key identifier: 91:58:E3:E1:F3:B1:88:4C:F1:70:5E:1B:4A:6F:F6:81:05:2E:77:B4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292AF2954A8D6DE8981C780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 2607:f5b2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:af:29:54:a8:d6:de:89:81:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8ba203d4-94e3-43ef-b262-7954687b7f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:25:7d:c8:27:76:b8:bd:af:b5:03:e2:4d: 49:ff:cd:34:52:4a:b0:a2:83:15:e9:0b:28:15:a8: 30:46:22:d3:c4:79:7c:a7:63:00:30:f9:0b:fc:b0: 48:13:41:03:60:9b:cc:9b:10:21:79:49:d3:91:3d: e3:f2:d6:a6:71:91:59:f0:44:d3:7e:c7:4e:c1:18: aa:3c:68:84:13:2a:58:db:e1:1b:5e:72:0c:c3:5a: 75:22:4d:af:2d:60:c2:29:a2:a4:d9:e0:86:23:6e: 74:f5:9f:15:8a:d1:f9:f1:29:3b:6a:21:0f:d9:5e: ad:ce:a3:de:76:87:d6:b5:3c:30:89:9f:29:71:63: 03:ae:ec:4d:fb:18:ec:91:39:1b:8c:de:e0:7c:68: 94:03:ae:b1:b0:f8:53:44:92:85:72:a9:77:33:15: b5:6d:65:15:d2:cf:84:8d:b8:b4:0d:54:0f:50:79: 39:85:b6:63:7b:e0:08:39:32:3e:a1:08:41:1c:fc: a9:c2:cf:75:b7:1d:9e:ff:26:e4:4e:82:5e:af:e5: 86:c8:fd:bd:b9:c7:d0:a4:68:68:1d:43:87:1f:c2: ad:0b:26:82:ce:a2:fd:00:23:1b:6a:f7:12:20:16: 93:a5:c0:e0:c3:20:54:0e:d6:59:da:d5:c2:66:68: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:E3:E1:F3:B1:88:4C:F1:70:5E:1B:4A:6F:F6:81:05:2E:77:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4119a5a7-c170-3693-ab45-9cec8eb09f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:d6:94:64:be:13:0a:db:b7:20:ac:03:53:31:ef:c4:06: b3:08:86:ab:29:86:e9:84:dd:69:b2:9e:6a:3a:c3:1f:53:f9: bb:5c:01:87:e4:22:76:81:de:54:42:85:70:1b:dc:f8:d9:19: af:0e:88:f6:b8:f0:c3:0d:46:64:aa:5c:16:29:8d:9f:af:df: cf:ad:8c:79:23:fe:06:cf:ae:3f:f2:1e:30:1c:87:fd:88:28: e8:de:4a:a8:9a:29:43:2e:5b:5e:32:f0:50:81:c6:56:de:e3: ff:54:1a:2a:51:8a:d0:a5:b1:a4:c6:d7:8d:d5:b7:94:b1:f8: f8:a7:d2:45:07:4b:15:59:c4:8a:81:91:13:65:27:93:8c:4b: d8:6c:c4:02:ef:95:73:13:90:77:b3:b7:25:42:2f:42:1a:ed: e0:0c:c6:12:ea:57:ae:ab:d8:72:03:15:bc:76:e2:d9:12:39: e7:3d:93:30:2f:f7:90:fa:fa:34:ed:38:28:3d:fa:1d:93:ec: 82:6d:cd:67:0e:80:0e:2b:43:5f:b2:49:4a:03:30:8b:0b:5c: 39:9c:d3:59:95:d6:7d:b6:39:21:53:21:1a:d4:8e:e9:82:2a: 0a:79:c9:ca:3a:45:d6:19:cc:ba:53:10:87:35:e7:9d:95:fe: ac:90:f9:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikq8pVKjW3omBx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGJhMjAzZDQtOTRlMy00M2VmLWIyNjItNzk1NDY4N2I3ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoMlfcgndri9r7UD4k1J/800UkqwooMV6Qso FagwRiLTxHl8p2MAMPkL/LBIE0EDYJvMmxAheUnTkT3j8tamcZFZ8ETTfsdOwRiq PGiEEypY2+EbXnIMw1p1Ik2vLWDCKaKk2eCGI2509Z8VitH58Sk7aiEP2V6tzqPe dofWtTwwiZ8pcWMDruxN+xjskTkbjN7gfGiUA66xsPhTRJKFcql3MxW1bWUV0s+E jbi0DVQPUHk5hbZje+AIOTI+oQhBHPypws91tx2e/ybkToJer+WGyP29ucfQpGho HUOHH8KtCyaCzqL9ACMbavcSIBaTpcDgwyBUDtZZ2tXCZmgOUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJFY4+HzsYhM8XBeG0pv9oEFLne0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDExOWE1YTctYzE3MC0z NjkzLWFiNDUtOWNlYzhlYjA5ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1sjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7iNaUZL4TCtu3IKwDUzHvxAazCIarKYbphN1psp5qOsMfU/m7XAGH 5CJ2gd5UQoVwG9z42RmvDoj2uPDDDUZkqlwWKY2fr9/PrYx5I/4Gz64/8h4wHIf9 iCjo3kqomilDLlteMvBQgcZW3uP/VBoqUYrQpbGkxteN1beUsfj4p9JFB0sVWcSK gZETZSeTjEvYbMQC75VzE5B3s7clQi9CGu3gDMYS6leuq9hyAxW8duLZEjnnPZMw L/eQ+vo07TgoPfodk+yCbc1nDoAOK0NfsklKAzCLC1w5nNNZldZ9tjkhUyEa1I7p gioKecnKOkXWGcy6UxCHNeedlf6skPkO -----END CERTIFICATE-----Generated at Wed Oct 14 07:55:29 2026 by rpki-client