$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: X8U287UnvvntXEBOAEMRBFgDM25YxK6uoqomwSpXYdg= Subject key identifier: 7B:22:03:1F:85:05:E1:69:F5:05:87:40:CB:AF:03:FD:C2:6E:90:F3 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584F4973F07662B58ADFCFA86580 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f0:76:62:b5:8a:df:cf:a8:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a300ed6d-141b-4cea-bc1f-0c2c9e5f0612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:37:ca:b3:6b:de:d2:1c:99:e0:44:21:39:ec: f8:ce:10:0e:ac:59:0d:14:6a:62:33:42:95:ec:b9: 17:c4:a7:76:8e:15:f6:5e:15:bb:8d:52:c5:fe:ed: b7:94:6f:88:2e:e5:31:e9:2d:3a:e5:18:82:a8:05: 2d:4b:c1:ef:db:56:2e:1e:07:26:9e:e5:1d:bc:37: 03:91:02:73:13:9b:7a:dd:69:6e:6c:dc:d9:a2:13: b0:e4:82:85:5b:97:55:46:46:2b:31:c2:93:a7:96: db:f5:87:8a:65:06:28:6f:d5:e1:52:da:4b:f5:45: c0:14:8a:88:c9:d3:8e:80:3c:13:ac:62:34:ac:b0: 6b:14:7a:32:dd:51:b0:a5:db:50:67:43:b4:fb:41: 78:6a:28:c7:67:7b:d7:9a:c9:19:14:4a:c9:25:92: 37:28:ad:11:2b:0e:97:a9:76:9f:2a:a2:d9:51:47: ee:c1:82:56:46:45:36:60:e2:14:17:43:2e:23:1f: 99:bc:e0:f1:4e:57:c1:b3:29:b1:d4:e1:70:95:ee: 8c:c7:2a:7e:8e:34:e8:f0:a9:f8:1c:48:93:8e:f9: a8:a0:18:70:cd:1f:ef:ab:53:f2:82:d0:76:f1:97: 36:23:f1:b4:7c:f1:31:3a:43:84:ed:f5:22:c9:1f: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:03:1F:85:05:E1:69:F5:05:87:40:CB:AF:03:FD:C2:6E:90:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2c:70:20:bd:89:06:90:5c:62:09:17:14:51:54:bc:0e:e1: ad:f4:22:9d:ec:80:35:22:0e:33:37:c8:b8:54:f9:e7:7e:91: 22:32:af:b6:b2:5d:54:ab:87:dc:e3:e4:c1:27:08:ab:ad:6c: c6:66:d3:93:ea:b2:a7:cc:92:ef:05:3d:be:3d:49:4b:ac:3f: 36:3f:1d:46:e6:69:71:0f:18:c5:cc:45:b8:14:8e:64:1b:b9: 11:01:ee:df:4c:87:d3:6f:d6:98:85:b5:0a:73:6e:39:09:30: 42:d6:38:73:84:10:a8:d0:66:d9:2d:6f:b8:b2:77:bb:74:31: 41:9b:84:5f:02:57:4d:14:75:03:08:43:a8:25:34:f7:41:5c: 7a:e3:3e:d2:82:6e:3f:bb:57:73:7e:68:b7:63:c5:ed:95:8d: f3:ee:3e:ed:d9:6f:d7:5d:5c:74:f8:b7:16:df:03:20:4e:d9: 13:7a:21:c8:0f:cf:5e:b3:70:c3:fd:f7:7a:af:06:3a:0d:80: 2e:5a:39:37:9e:71:a8:58:e9:98:ea:83:be:59:e8:54:62:da: ab:98:82:68:0a:4f:18:3d:3d:b1:b6:a5:5b:f5:a8:1a:fb:68: 7d:de:bc:89:39:31:e0:bd:4c:36:ce:09:dd:81:48:8b:41:9b: b7:a2:84:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc/B2YrWK38+oZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTMwMGVkNmQtMTQxYi00Y2VhLWJjMWYtMGMyYzllNWYwNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTfKs2ve0hyZ4EQhOez4zhAOrFkNFGpiM0KV 7LkXxKd2jhX2XhW7jVLF/u23lG+ILuUx6S065RiCqAUtS8Hv21YuHgcmnuUdvDcD kQJzE5t63WlubNzZohOw5IKFW5dVRkYrMcKTp5bb9YeKZQYob9XhUtpL9UXAFIqI ydOOgDwTrGI0rLBrFHoy3VGwpdtQZ0O0+0F4aijHZ3vXmskZFErJJZI3KK0RKw6X qXafKqLZUUfuwYJWRkU2YOIUF0MuIx+ZvODxTlfBsymx1OFwle6Mxyp+jjTo8Kn4 HEiTjvmooBhwzR/vq1PygtB28Zc2I/G0fPExOkOE7fUiyR/lswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHsiAx+FBeFp9QWHQMuvA/3CbpDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoLHAgvYkGkFxiCRcUUVS8DuGt9CKd7IA1Ig4zN8i4VPnnfpEiMq+2 sl1Uq4fc4+TBJwirrWzGZtOT6rKnzJLvBT2+PUlLrD82Px1G5mlxDxjFzEW4FI5k G7kRAe7fTIfTb9aYhbUKc245CTBC1jhzhBCo0GbZLW+4sne7dDFBm4RfAldNFHUD CEOoJTT3QVx64z7Sgm4/u1dzfmi3Y8XtlY3z7j7t2W/XXVx0+LcW3wMgTtkTeiHI D89es3DD/fd6rwY6DYAuWjk3nnGoWOmY6oO+WehUYtqrmIJoCk8YPT2xtqVb9aga +2h93ryJOTHgvUw2zgndgUiLQZu3ooQw -----END CERTIFICATE-----Generated at Thu Oct 8 19:20:58 2026 by rpki-client