$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa File: ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa (raw, json) Hash identifier: ZApMdmNJS7xXG6ELI4pLPBrgsl9INO1iAB0mau7sUfA= Subject key identifier: 46:90:16:E0:32:6C:E6:53:1E:DC:B3:E5:3D:25:2E:82:1E:78:24:FC Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584EC7A1D0AC5380BBA7E20F2740 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 395842 IP address blocks: 2607:8c0::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d0:ac:53:80:bb:a7:e2:0f:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=b9bfbbd6-a475-49fe-b208-038582451a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:04:55:26:71:7f:8f:e0:0c:5b:cc:7a:7a: ab:9a:b6:cd:2a:5a:88:f4:18:b9:61:f5:a7:c0:29: b2:28:94:fc:6c:08:9c:52:5e:61:b6:f6:ce:d0:91: 85:64:96:c7:6c:e4:d9:08:a3:f5:a4:51:e1:fc:c0: 1e:dd:4e:00:cf:38:25:f4:25:c0:4f:a7:34:de:9e: 31:d9:e0:c7:45:d8:71:14:06:0a:70:c9:59:79:65: eb:55:ac:e6:d3:50:2c:8e:c6:ec:84:86:86:e5:17: 9f:a2:65:bb:72:cb:f4:dc:26:c4:1d:f5:0b:38:34: e6:83:6c:1e:ab:5d:11:fd:a8:16:02:9e:18:46:0c: 5d:2a:f1:35:59:69:29:84:cf:ea:2e:d6:2b:23:9c: 58:f8:ee:fb:d6:d3:96:38:61:01:fc:02:33:7a:f4: 5e:b0:42:97:53:48:24:c2:91:53:87:d4:56:bd:dd: 5b:f1:8a:70:b2:d8:00:46:2d:2c:5b:8a:68:a8:28: 1d:aa:93:b1:39:1f:40:17:eb:1a:a0:45:c2:b1:5c: 08:95:1a:1c:7c:27:8d:21:8e:0b:94:27:95:4f:4b: f9:42:8c:3b:03:8e:de:8f:ba:9a:64:8a:6f:50:0a: 19:25:14:2c:39:79:b8:67:4a:54:af:65:a4:bf:86: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:16:E0:32:6C:E6:53:1E:DC:B3:E5:3D:25:2E:82:1E:78:24:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv6: 2607:8c0::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:aa:89:bf:20:10:3a:38:c0:ab:c1:75:45:38:1f:56:6c: 9d:3e:d2:02:15:50:16:d9:34:1b:a4:a2:df:99:5d:d8:b4:cf: aa:57:d7:1a:af:ea:c3:d5:13:3c:f0:82:72:ae:b9:e4:b4:a1: 8d:3a:0a:ce:69:cd:69:7a:cd:f4:a5:17:2a:35:0d:7e:a0:49: 08:56:0c:8f:11:63:b9:b3:ac:1b:97:73:c8:02:c5:48:73:34: 08:aa:a2:00:09:71:05:26:1b:9b:82:23:04:cd:7d:c4:ae:31: 01:3b:17:01:f9:92:8c:f5:14:7f:4c:5c:8e:63:b2:55:d1:7a: 01:87:69:c3:26:46:eb:d7:2c:54:3e:06:76:90:d1:d9:77:5c: 54:6a:c2:ed:1e:6d:2b:e7:c1:8d:e3:5b:9c:2f:99:24:4f:33: fd:33:5b:1a:46:80:8c:d5:13:bc:55:e7:dc:5e:de:5c:9f:2f: c2:16:07:61:9c:40:38:08:cf:58:31:f4:e2:65:45:f8:e2:b0: df:ba:83:c7:17:ea:59:2b:26:14:72:e7:c6:2b:10:5f:52:25: 2d:9b:6e:06:f3:65:3b:e8:81:ce:15:6b:93:ff:f6:c8:29:a6: 54:7a:e3:d3:2e:81:5b:6e:41:dc:8b:a5:84:f9:c8:00:56:44: 24:b5:7d:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7HodCsU4C7p+IPJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjliZmJiZDYtYTQ3NS00OWZlLWIyMDgtMDM4NTgyNDUxYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuUEVSZxf4/gDFvMenqrmrbNKlqI9Bi5YfWn wCmyKJT8bAicUl5htvbO0JGFZJbHbOTZCKP1pFHh/MAe3U4Azzgl9CXAT6c03p4x 2eDHRdhxFAYKcMlZeWXrVazm01AsjsbshIaG5RefomW7csv03CbEHfULODTmg2we q10R/agWAp4YRgxdKvE1WWkphM/qLtYrI5xY+O771tOWOGEB/AIzevResEKXU0gk wpFTh9RWvd1b8YpwstgARi0sW4poqCgdqpOxOR9AF+saoEXCsVwIlRocfCeNIY4L lCeVT0v5Qow7A47ej7qaZIpvUAoZJRQsOXm4Z0pUr2Wkv4aCjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEaQFuAybOZTHtyz5T0lLoIeeCT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvZmY2YjBhNDMtMWQ0OS0z MzJiLTlhMmUtNGQyNWU5ZWVhNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDkaqJvyAQOjjAq8F1RTgfVmydPtICFVAW2TQbpKLfmV3YtM+qV9ca r+rD1RM88IJyrrnktKGNOgrOac1pes30pRcqNQ1+oEkIVgyPEWO5s6wbl3PIAsVI czQIqqIACXEFJhubgiMEzX3ErjEBOxcB+ZKM9RR/TFyOY7JV0XoBh2nDJkbr1yxU PgZ2kNHZd1xUasLtHm0r58GN41ucL5kkTzP9M1saRoCM1RO8VefcXt5cny/CFgdh nEA4CM9YMfTiZUX44rDfuoPHF+pZKyYUcufGKxBfUiUtm24G82U76IHOFWuT//bI KaZUeuPTLoFbbkHci6WE+cgAVkQktX07 -----END CERTIFICATE-----Generated at Fri Aug 21 02:04:59 2026 by rpki-client