$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa File: cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa (raw, json) Hash identifier: rq0ifvV4Semo4pxZxEeG3+BCpHQ66g73ofwx2HKOysk= Subject key identifier: C4:A9:E3:37:B4:A3:DD:CA:FD:C2:E1:E4:5D:9A:41:A7:2D:B0:4C:47 Certificate issuer: /CN=b927dc15-9316-467a-b50d-d6b361478436 Certificate serial: 010D0C9F4328584F119D1AE3FD307DF3C62371C0 Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 2901 IP address blocks: 2605:800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:1a:e3:fd:30:7d:f3:c6:23:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2a9ec301-d710-4aa5-bdd2-047e5b85e4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:75:2c:1a:69:a2:57:39:5c:de:98:f3:9a: 28:b7:44:2f:d8:65:47:8c:64:12:ad:f8:45:5b:e4: db:e7:53:f6:39:bb:1c:b2:6e:46:21:26:25:d0:b2: 7c:2a:46:d3:12:c0:26:1a:92:d3:1b:4b:c1:57:a8: 2d:dc:be:59:4a:f7:a5:f3:31:2b:bd:50:e4:93:1c: 6c:53:c1:75:7d:64:ed:74:22:98:27:ec:8c:42:3f: ad:42:39:4c:58:42:63:62:27:f7:6a:8b:36:da:73: 62:ca:b2:31:38:20:c4:b4:25:f1:96:53:82:ec:b3: f7:3b:53:2a:24:80:ee:16:db:80:48:50:c3:7d:e4: d3:c7:ce:b3:a7:57:02:fe:16:a7:aa:28:1d:cf:69: 43:26:af:28:aa:ef:de:b7:ba:ed:02:eb:b7:45:d4: dc:ae:7d:59:ae:b7:55:29:f9:45:ae:1d:0a:5a:29: 77:82:e6:f4:8e:d7:0e:c8:72:31:55:79:1b:ca:b9: 47:b1:a9:70:de:28:27:fe:e9:ba:32:3b:ae:91:26: bf:dd:fa:c5:7d:a3:c2:28:7a:fa:da:ff:a5:18:c5: e5:ac:2b:4b:06:1a:8d:5e:f6:a9:c0:98:c6:66:13: 15:32:ec:a2:c9:be:19:2c:14:25:9f:6e:6f:28:dd: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:E3:37:B4:A3:DD:CA:FD:C2:E1:E4:5D:9A:41:A7:2D:B0:4C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl X509v3 Authority Key Identifier: keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer sbgp-ipAddrBlock: critical IPv6: 2605:800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b9:5a:25:12:57:f3:1b:2f:fb:d0:0a:7c:4d:fb:1b:97:c5: a9:dd:b2:5d:fe:4c:1f:fd:03:c6:3c:85:ab:70:65:1f:30:e8: cf:88:4e:09:0f:d6:91:45:43:00:85:f2:4d:21:8f:e4:38:8e: 8d:ac:5f:6d:dd:d2:6b:20:76:50:50:6e:f6:ce:4b:81:4f:a8: b4:df:8e:da:99:3a:72:94:eb:c3:55:fe:17:2e:2d:6a:05:31: f9:89:1d:14:d4:97:3a:d8:c7:d2:45:c2:7c:d3:0d:55:c7:f0: 4d:c2:0a:8b:68:18:bd:0a:dd:3e:89:9f:8d:e7:ca:ff:7a:04: f3:7e:67:17:54:25:8b:7a:8d:2c:cc:b1:0b:57:51:b7:78:d0: ea:2b:0f:76:b5:34:dd:4a:80:43:dd:68:8a:85:54:53:b9:b2: 6c:35:19:83:ac:9e:54:fd:92:56:84:8a:97:b2:0f:66:8b:99: c7:6e:c6:5e:db:9c:38:fc:41:89:61:aa:6d:ef:9f:ea:5f:41: 4f:3b:1e:4e:dc:f1:0f:d1:d4:5d:b0:b4:ae:1a:8a:7f:81:34: e7:36:d1:3c:30:f8:17:5f:96:aa:c5:f3:c4:16:b4:5c:28:3e: e8:45:21:6f:44:5c:a1:af:17:12:ef:77:80:e4:67:02:9f:84: 12:cc:c6:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RnRrj/TB988YjccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4 NDM2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE5ZWMzMDEtZDcxMC00YWE1LWJkZDItMDQ3ZTViODVlNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Z1LBppolc5XN6Y85oot0Qv2GVHjGQSrfhF W+Tb51P2Obscsm5GISYl0LJ8KkbTEsAmGpLTG0vBV6gt3L5ZSvel8zErvVDkkxxs U8F1fWTtdCKYJ+yMQj+tQjlMWEJjYif3aos22nNiyrIxOCDEtCXxllOC7LP3O1Mq JIDuFtuASFDDfeTTx86zp1cC/hanqigdz2lDJq8oqu/et7rtAuu3RdTcrn1ZrrdV KflFrh0KWil3gub0jtcOyHIxVXkbyrlHsalw3ign/um6MjuukSa/3frFfaPCKHr6 2v+lGMXlrCtLBhqNXvapwJjGZhMVMuyiyb4ZLBQln25vKN3lZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSp4ze0o93K/cLh5F2aQactsExHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3 ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvY2ZlYjlkZjgtY2Y4NS0z YzgwLThmODMtMGMzYzI2Zjk0NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1 MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3 ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz NjE0Nzg0MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUIADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvuVolElfzGy/70Ap8Tfsbl8Wp3bJd/kwf/QPGPIWrcGUfMOjPiE4J D9aRRUMAhfJNIY/kOI6NrF9t3dJrIHZQUG72zkuBT6i0347amTpylOvDVf4XLi1q BTH5iR0U1Jc62MfSRcJ80w1Vx/BNwgqLaBi9Ct0+iZ+N58r/egTzfmcXVCWLeo0s zLELV1G3eNDqKw92tTTdSoBD3WiKhVRTubJsNRmDrJ5U/ZJWhIqXsg9mi5nHbsZe 25w4/EGJYapt75/qX0FPOx5O3PEP0dRdsLSuGop/gTTnNtE8MPgXX5aqxfPEFrRc KD7oRSFvRFyhrxcS73eA5GcCn4QSzMbR -----END CERTIFICATE-----Generated at Sun Sep 27 06:38:33 2026 by rpki-client