$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/789c4e7a-0fd9-3aba-85e3-17e4738ba880.roa File: 789c4e7a-0fd9-3aba-85e3-17e4738ba880.roa (raw, json) Hash identifier: 5TD6JtJA28mDafSihDEP2ECrpMxBbJ4BpleC+HWj7Ws= Subject key identifier: 9C:0E:2A:06:DB:CE:BE:92:3D:A6:59:16:6A:4A:F4:75:A1:F4:73:BE Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F03A775F592B0504BD9C47FC0 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/789c4e7a-0fd9-3aba-85e3-17e4738ba880.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 11776 IP address blocks: 2606:f40b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:75:f5:92:b0:50:4b:d9:c4:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=e9167121-157f-4a4d-8ea0-5912a6198a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:0d:04:89:de:2f:cb:9d:aa:7f:12:93:0c: e3:1f:45:16:e4:89:85:98:1f:0a:57:0e:0e:7b:21: 51:b4:10:b8:2e:f9:69:2d:e4:52:86:e5:b3:8d:7a: 38:fa:e4:23:dd:42:43:ec:21:f9:16:81:75:dc:4b: ee:ec:63:27:5c:7e:89:2a:9a:04:ce:ae:28:b0:80: 76:76:75:db:21:0f:ff:56:2a:50:e5:65:fe:8f:af: e0:82:9f:8e:e4:0b:cd:b7:e3:dd:9c:3b:86:54:f7: 87:9e:2d:58:ab:5b:a2:e1:b7:d9:68:58:5d:ac:29: 71:59:b0:ec:1d:4f:17:29:ec:50:d6:cc:ae:de:c4: c4:0a:e9:d6:dc:fc:da:94:96:4b:e7:e5:6d:70:70: 30:2f:7a:24:b4:11:d8:d9:a3:4a:c1:1c:a8:d6:82: 1f:0e:f9:60:ae:d8:ac:c8:4d:a0:ff:37:19:81:47: 92:49:52:fd:b5:4b:8a:99:d9:49:04:e9:51:a3:f7: b9:03:f3:4b:75:80:bf:49:99:74:f0:5c:d3:68:aa: 96:fd:37:d0:cb:75:0e:6a:9d:4c:31:8b:09:ac:38: 83:07:d6:47:cc:66:97:fa:74:1c:58:d5:28:b1:b8: 33:38:dc:ec:43:7e:42:b8:03:9a:5c:9a:d8:bf:7d: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0E:2A:06:DB:CE:BE:92:3D:A6:59:16:6A:4A:F4:75:A1:F4:73:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/789c4e7a-0fd9-3aba-85e3-17e4738ba880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv6: 2606:f40b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1a:07:77:ac:d9:59:1a:68:dd:1b:25:41:25:ec:5a:47:4e: 6c:37:35:fe:78:b3:e0:6e:aa:2b:9b:07:68:41:59:a5:2d:ac: 0c:fb:1b:bf:da:9c:d1:c7:cd:44:74:8b:9c:09:c0:6a:27:55: 91:84:70:5f:b7:dd:ea:69:5f:a8:c7:49:db:b2:ee:4d:ae:6f: 40:ee:c6:3d:e6:d9:95:fc:00:5d:cb:fb:ba:0d:95:02:36:15: 70:15:b2:a4:3d:da:05:96:97:d6:7c:6b:1f:d6:77:d4:71:3e: 23:d9:15:6d:80:04:9b:f7:1b:5e:a0:1a:08:4f:d2:3f:10:d0: 13:6d:7b:4a:d6:1e:b6:f8:bb:28:43:c7:57:81:bd:98:02:80: 8f:f8:9a:31:9b:8b:05:bb:7f:f2:51:c9:ab:d0:6e:75:4a:b5: cd:b0:ad:5c:e5:8c:74:cb:8a:1c:7a:cd:15:d7:34:df:8f:41: c8:ef:59:6f:77:32:e7:d0:29:02:79:71:b7:91:7c:b0:c0:54: 91:bf:50:2b:25:a3:03:3a:8b:26:f5:b3:09:1d:da:ae:ba:39: 1a:f7:f5:00:9f:17:bb:ac:44:41:9a:0b:fe:cb:cf:a0:68:69: e0:a6:81:28:0c:fe:d5:7b:33:ec:0c:8d:30:8b:88:26:e3:47: 8a:85:45:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3X1krBQS9nEf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZTkxNjcxMjEtMTU3Zi00YTRkLThlYTAtNTkxMmE2MTk4YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUgNBIneL8udqn8SkwzjH0UW5ImFmB8KVw4O eyFRtBC4LvlpLeRShuWzjXo4+uQj3UJD7CH5FoF13Evu7GMnXH6JKpoEzq4osIB2 dnXbIQ//VipQ5WX+j6/ggp+O5AvNt+PdnDuGVPeHni1Yq1ui4bfZaFhdrClxWbDs HU8XKexQ1syu3sTECunW3PzalJZL5+VtcHAwL3oktBHY2aNKwRyo1oIfDvlgrtis yE2g/zcZgUeSSVL9tUuKmdlJBOlRo/e5A/NLdYC/SZl08FzTaKqW/TfQy3UOap1M MYsJrDiDB9ZHzGaX+nQcWNUosbgzONzsQ35CuAOaXJrYv30oDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJwOKgbbzr6SPaZZFmpK9HWh9HO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvNzg5YzRlN2EtMGZkOS0z YWJhLTg1ZTMtMTdlNDczOGJhODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb0CzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8Ggd3rNlZGmjdGyVBJexaR05sNzX+eLPgbqormwdoQVmlLawM+xu/ 2pzRx81EdIucCcBqJ1WRhHBft93qaV+ox0nbsu5Nrm9A7sY95tmV/ABdy/u6DZUC NhVwFbKkPdoFlpfWfGsf1nfUcT4j2RVtgASb9xteoBoIT9I/ENATbXtK1h62+Lso Q8dXgb2YAoCP+Joxm4sFu3/yUcmr0G51SrXNsK1c5Yx0y4oces0V1zTfj0HI71lv dzLn0CkCeXG3kXywwFSRv1ArJaMDOosm9bMJHdquujka9/UAnxe7rERBmgv+y8+g aGngpoEoDP7VezPsDI0wi4gm40eKhUWE -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:12 2026 by rpki-client