$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa File: d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa (raw, json) Hash identifier: KbbxC40wohZqrUANoA/zHy0orUQCE2VzZNJB5YDZx4A= Subject key identifier: 2D:68:E5:91:0F:A8:14:13:75:9F:46:6B:38:5B:1F:3F:C2:52:D3:A2 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584F5A33308028DCF080AD8F4C00 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 15130 IP address blocks: 2607:f330::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:30:80:28:dc:f0:80:ad:8f:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=34ecc459-2485-49fa-9b95-00a3a640a3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:58:4a:4d:fb:2d:02:f7:3b:b6:db:2b:44: 81:6e:3c:17:8a:66:bf:c2:98:5e:b9:43:d4:9b:d1: 85:9e:c3:ee:1b:2e:9a:1f:3b:fd:7d:63:bb:dd:9f: 06:aa:26:20:50:9b:89:61:ef:0c:be:c6:02:d9:8c: 62:63:4b:31:fe:54:ae:c5:27:1d:34:15:d0:18:6e: 07:c6:ba:c3:94:f5:2e:42:03:cf:14:6c:94:45:be: 1a:49:3b:39:c0:9e:da:05:14:e5:b3:92:82:b6:a3: c9:4e:2c:b1:25:06:6a:2c:55:c4:61:4e:35:cd:bc: 9e:9d:f0:fc:fc:2e:4d:ee:c3:7f:04:2e:f2:0c:7d: f2:17:de:38:8e:8c:f4:c4:e0:be:f5:22:a2:52:5d: 09:6a:51:64:a8:f2:65:7d:0d:b0:63:24:df:bc:f3: 55:04:45:dc:0b:02:12:39:2f:41:c6:80:db:70:f1: 7e:3f:d3:f2:11:82:a9:27:e6:e1:eb:63:4e:85:5b: 73:a0:d2:b9:be:8f:6a:ea:6d:c1:74:0d:82:da:e4: b8:50:34:2f:87:f6:16:b8:dc:45:5f:4c:49:ff:20: 27:a6:db:b9:79:2b:a5:56:33:52:77:e6:3c:2b:18: cf:30:b1:e3:65:63:0f:7d:28:32:2d:a2:f4:31:3a: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:E5:91:0F:A8:14:13:75:9F:46:6B:38:5B:1F:3F:C2:52:D3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f330::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:96:98:62:94:93:7f:f1:b0:64:bd:05:f6:9d:41:e6:47:e4: fa:b2:02:87:9f:9d:db:84:b5:ca:e5:c9:80:b4:8a:14:30:3a: e7:c4:f4:9e:97:7f:ec:ed:46:b2:5e:e5:ed:03:af:82:62:fb: 6f:b0:30:05:47:73:e7:d5:bb:87:ea:d2:de:eb:04:7b:97:3e: 77:00:ba:41:cc:62:05:ec:98:50:f1:1f:aa:4a:b9:cc:15:07: af:60:43:77:51:06:55:40:a2:26:a5:fb:9c:db:c1:72:25:53: 6a:80:20:c2:9f:53:6a:fe:f0:65:a9:63:69:13:b3:a6:7b:50: b5:65:88:4e:21:c0:d9:93:6a:28:40:f8:57:05:4e:7b:33:aa: 6f:fa:89:54:93:0a:e9:c4:a4:f5:d6:67:9e:62:a0:18:f0:3e: 6b:96:23:98:16:eb:33:dc:0a:e8:93:04:99:6c:1a:0a:f7:b9: be:8d:a8:ca:7e:e2:2e:14:e1:8b:a6:1c:0b:8f:8a:da:eb:29: e2:53:b5:a7:ed:f2:1b:51:f4:8b:b9:59:3b:d9:bd:77:d6:ea: 18:6e:d2:56:e1:cf:1c:f6:53:f6:07:9b:da:43:6b:e4:c2:4a: 58:59:f7:39:1e:36:aa:73:e1:5c:06:e3:9a:38:35:b7:f2:ed: 4e:85:ea:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9aMzCAKNzwgK2PTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzRlY2M0NTktMjQ4NS00OWZhLTliOTUtMDBhM2E2NDBhM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyFYSk37LQL3O7bbK0SBbjwXima/wpheuUPU m9GFnsPuGy6aHzv9fWO73Z8GqiYgUJuJYe8MvsYC2YxiY0sx/lSuxScdNBXQGG4H xrrDlPUuQgPPFGyURb4aSTs5wJ7aBRTls5KCtqPJTiyxJQZqLFXEYU41zbyenfD8 /C5N7sN/BC7yDH3yF944joz0xOC+9SKiUl0JalFkqPJlfQ2wYyTfvPNVBEXcCwIS OS9BxoDbcPF+P9PyEYKpJ+bh62NOhVtzoNK5vo9q6m3BdA2C2uS4UDQvh/YWuNxF X0xJ/yAnptu5eSulVjNSd+Y8KxjPMLHjZWMPfSgyLaL0MTqpfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1o5ZEPqBQTdZ9GazhbHz/CUtOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvZDllODQwMmItZjBhZi0z ZGQxLTgwNmYtYWRhN2JhYTBmYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfzMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUlphilJN/8bBkvQX2nUHmR+T6sgKHn53bhLXK5cmAtIoUMDrnxPSe l3/s7UayXuXtA6+CYvtvsDAFR3Pn1buH6tLe6wR7lz53ALpBzGIF7JhQ8R+qSrnM FQevYEN3UQZVQKImpfuc28FyJVNqgCDCn1Nq/vBlqWNpE7Ome1C1ZYhOIcDZk2oo QPhXBU57M6pv+olUkwrpxKT11meeYqAY8D5rliOYFusz3ArokwSZbBoK97m+jajK fuIuFOGLphwLj4ra6yniU7Wn7fIbUfSLuVk72b131uoYbtJW4c8c9lP2B5vaQ2vk wkpYWfc5Hjaqc+FcBuOaODW38u1Oheo2 -----END CERTIFICATE-----Generated at Sun Oct 11 22:19:35 2026 by rpki-client