$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa File: d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json) Hash identifier: zP80h2mmfuwZO5rywBmkA62hM+GWZ29oAc7TYaRsO7g= Subject key identifier: D0:A3:89:72:C9:AF:CC:FF:69:B6:AA:19:28:21:A9:D0:65:4A:6E:93 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3017F2DA43E4467CE9FC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 396362 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:01:7f:2d:a4:3e:44:67:ce:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=4002e7f1-98ae-4c2a-9d11-90eb66c69edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:ce:47:41:a3:45:b9:56:bc:62:a2:26:2d: b9:de:5b:0c:64:9e:30:a2:12:9f:1c:7b:96:1b:b9: 11:1c:a9:68:eb:26:39:2e:5f:64:3b:9d:90:3a:c6: 8c:d7:53:3f:84:62:a7:60:65:70:c6:50:8c:54:c9: 47:31:30:0f:ca:4b:70:5c:94:71:f2:13:e8:a3:9e: 44:fb:5a:99:2d:61:84:2c:c8:fa:95:b3:77:8a:e9: a2:04:ad:75:90:08:aa:a0:da:16:9b:77:fb:1c:82: 84:38:05:06:2d:ae:c8:9f:8e:c3:01:70:fc:7c:2a: 46:dc:70:58:36:03:c5:84:5c:78:2a:1a:0d:3c:2f: aa:7d:8e:f0:35:72:8d:b4:63:94:3d:3a:1b:f0:58: 7d:3f:65:93:6d:a9:69:f1:17:0e:e6:5c:f0:d5:24: 0d:1b:fd:36:94:74:d3:d1:25:6f:8b:1f:8b:b8:11: 5c:3c:9a:b3:f0:8d:72:4d:38:fa:df:87:bc:1c:8e: b3:da:27:d8:53:a5:33:0f:8e:75:1a:bc:86:83:52: 28:61:b1:5c:53:46:e3:8c:e5:d7:9b:44:cc:85:71: ce:2f:8a:79:53:a1:ea:3a:6e:66:1e:74:c6:46:bf: 15:c1:87:a1:6f:66:54:e5:52:0c:5a:b9:db:ba:0e: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:89:72:C9:AF:CC:FF:69:B6:AA:19:28:21:A9:D0:65:4A:6E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d9:7a:ce:2d:0f:fd:7c:ef:13:06:a7:3f:64:a7:66:96:f4: b3:61:65:f7:9d:fc:52:ad:fe:0d:48:cd:40:3b:0a:8e:d3:bb: 5d:29:ac:91:79:28:53:a6:dc:b9:a8:2d:18:39:92:04:f6:87: e1:ff:a7:20:67:b2:9e:80:fd:4c:2b:ef:b4:87:2f:b5:88:d8: 09:fc:f4:59:10:ea:88:58:1d:54:6d:54:06:3c:a4:42:9a:5d: e5:b7:34:f5:2a:15:62:35:01:b9:ee:7f:01:f0:bb:6b:be:2c: 54:be:d0:63:61:74:b7:9f:20:7c:38:6b:d7:5e:8c:8f:d2:e4: 5e:94:db:56:80:43:50:33:12:d2:11:66:bf:55:dd:4a:dc:e5: dc:b9:51:1d:2a:93:83:00:4d:aa:31:95:98:68:7e:ac:4b:43: 00:a2:75:99:7a:8e:09:4e:61:c0:e5:c3:ff:b0:2e:12:44:d2: 7a:46:40:ee:6e:f8:82:82:d7:c2:a3:25:84:36:cd:29:5f:6e: 8b:13:ec:a6:14:3b:27:95:f2:3e:06:19:d4:3a:5d:7c:58:59: 89:ce:0e:c3:34:75:02:fa:ab:7d:54:f6:0d:20:8a:a5:c7:7c: 36:44:8a:6e:04:87:0f:78:35:6a:48:e2:4a:07:f5:37:e5:39: 3b:a6:00:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97swF/LaQ+RGfOn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NDAwMmU3ZjEtOThhZS00YzJhLTlkMTEtOTBlYjY2YzY5ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzovOR0GjRblWvGKiJi253lsMZJ4wohKfHHuW G7kRHKlo6yY5Ll9kO52QOsaM11M/hGKnYGVwxlCMVMlHMTAPyktwXJRx8hPoo55E +1qZLWGELMj6lbN3iumiBK11kAiqoNoWm3f7HIKEOAUGLa7In47DAXD8fCpG3HBY NgPFhFx4KhoNPC+qfY7wNXKNtGOUPTob8Fh9P2WTbalp8RcO5lzw1SQNG/02lHTT 0SVvix+LuBFcPJqz8I1yTTj634e8HI6z2ifYU6UzD451GryGg1IoYbFcU0bjjOXX m0TMhXHOL4p5U6HqOm5mHnTGRr8VwYehb2ZU5VIMWrnbug4LZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNCjiXLJr8z/abaqGSghqdBlSm6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDEyZTU3MDgtMWFhZi0z YTQ4LWJlNmQtYzM2OTc2Y2YwNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXZes4tD/187xMGpz9kp2aW9LNhZfed/FKt/g1IzUA7Co7Tu10p rJF5KFOm3LmoLRg5kgT2h+H/pyBnsp6A/Uwr77SHL7WI2An89FkQ6ohYHVRtVAY8 pEKaXeW3NPUqFWI1AbnufwHwu2u+LFS+0GNhdLefIHw4a9dejI/S5F6U21aAQ1Az EtIRZr9V3Urc5dy5UR0qk4MATaoxlZhofqxLQwCidZl6jglOYcDlw/+wLhJE0npG QO5u+IKC18KjJYQ2zSlfbosT7KYUOyeV8j4GGdQ6XXxYWYnODsM0dQL6q31U9g0g iqXHfDZEim4Ehw94NWpI4koH9TflOTumAPw= -----END CERTIFICATE-----Generated at Wed Oct 14 10:09:32 2026 by rpki-client