$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa File: d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa (raw, json) Hash identifier: j63iYA2SUEn0TfDp+/X3p/LawBSQm/lL7JXqYtsfl/s= Subject key identifier: 37:E8:70:78:15:B3:5B:83:1C:62:42:E3:AE:19:06:57:06:CE:CB:21 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D2CEB3AEECA58C9E73EE8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2607:f8b0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:2c:eb:3a:ee:ca:58:c9:e7:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e176fa32-ac88-4442-a224-f70fcf2c9729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:72:4a:9e:6b:3a:4e:57:37:d0:52:dd:41: b4:86:db:c0:e6:d5:5e:e1:9d:5d:10:a1:e5:9f:11: c0:e3:83:38:3d:c2:74:55:24:8f:54:ff:9b:58:48: 9e:b1:b6:22:7f:e8:0d:ea:de:67:d4:2b:5d:3f:4f: 10:4a:c0:5f:02:10:ab:18:7c:5a:d8:c5:be:5c:06: 70:c4:ef:3c:24:68:27:cd:37:2d:2e:39:44:e6:1f: 4f:2b:76:12:ba:34:4d:6e:93:6b:46:65:e3:e6:26: 6e:b7:d0:62:cc:21:c7:f7:72:67:65:aa:4c:e7:5d: 25:77:41:64:d2:0a:c0:c4:1f:03:51:ca:00:a8:a1: 78:89:13:4c:d1:a5:11:22:ae:23:fc:0e:eb:1d:dc: 50:e4:f9:1e:d0:95:dc:11:b5:bf:21:95:5b:ad:7f: 0d:32:6e:02:0e:1b:50:b6:5b:fc:af:ae:dd:2c:59: 3e:d1:0e:7e:0f:f6:1e:d6:48:69:9e:09:d7:e7:93: 25:b9:8c:d7:28:15:6d:8b:bf:8a:60:c8:f2:dc:95: c9:c4:c2:d4:ad:2c:f9:f8:ff:6c:29:8b:73:3c:2a: 2f:d0:b5:9d:bd:08:b4:fa:b6:00:23:a8:c5:19:75: fb:c9:9e:a8:9f:a9:42:dc:b8:55:62:3e:0f:bc:19: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:70:78:15:B3:5B:83:1C:62:42:E3:AE:19:06:57:06:CE:CB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dd:37:5c:6f:d6:f8:57:e7:2c:4d:52:e9:5e:12:1f:71:7e: 5b:20:dd:b0:af:61:c3:11:00:2d:e0:79:dd:fd:b8:09:f0:12: 57:75:8f:83:67:fb:6e:16:4e:dd:b8:b2:81:96:2c:03:5a:d4: f7:d8:f3:12:8c:f3:3e:66:41:7c:64:0d:90:b1:88:5f:a1:a5: 01:97:d9:0b:6c:66:b2:6d:69:06:ae:b8:6e:f5:12:e8:43:04: 84:a7:5d:58:3e:12:f8:a0:91:59:27:68:df:8c:d1:83:92:b4: 69:03:c9:af:60:99:5a:2b:fc:aa:8f:b2:25:40:99:58:91:16: e3:e4:70:7f:33:84:70:35:94:a4:c7:d2:51:b8:20:c5:7f:73: f8:cb:c2:2c:99:75:68:c5:1b:d9:61:f5:e9:a4:9a:1e:99:d3: ab:36:b2:1c:ae:0f:71:97:64:43:c0:9d:95:eb:0b:e4:a1:98: 1a:b0:9f:ae:53:4b:58:e0:60:3e:9d:33:f5:1a:c0:2b:0b:3f: ac:a7:fe:ee:da:ac:62:fe:62:8e:10:73:94:47:81:fe:f2:be: 32:cb:75:90:66:82:a4:e4:5f:9d:99:47:39:fe:57:f3:8d:da: 59:b2:35:5b:3a:b4:af:63:6e:9c:39:44:fe:b0:75:b3:52:24: 46:f2:66:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfSzrOu7KWMnnPugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTE3NmZhMzItYWM4OC00NDQyLWEyMjQtZjcwZmNmMmM5NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo21ySp5rOk5XN9BS3UG0htvA5tVe4Z1dEKHl nxHA44M4PcJ0VSSPVP+bWEiesbYif+gN6t5n1CtdP08QSsBfAhCrGHxa2MW+XAZw xO88JGgnzTctLjlE5h9PK3YSujRNbpNrRmXj5iZut9BizCHH93JnZapM510ld0Fk 0grAxB8DUcoAqKF4iRNM0aURIq4j/A7rHdxQ5Pke0JXcEbW/IZVbrX8NMm4CDhtQ tlv8r67dLFk+0Q5+D/Ye1khpngnX55MluYzXKBVti7+KYMjy3JXJxMLUrSz5+P9s KYtzPCov0LWdvQi0+rYAI6jFGXX7yZ6on6lC3LhVYj4PvBlpCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDfocHgVs1uDHGJC464ZBlcGzsshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA0OWVkNGItZDdiNS0z NmFhLTg3ZTMtNTViODQ2ZTY4OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHdN1xv1vhX5yxNUuleEh9xflsg3bCvYcMRAC3ged39uAnwEld1 j4Nn+24WTt24soGWLANa1PfY8xKM8z5mQXxkDZCxiF+hpQGX2QtsZrJtaQauuG71 EuhDBISnXVg+EvigkVknaN+M0YOStGkDya9gmVor/KqPsiVAmViRFuPkcH8zhHA1 lKTH0lG4IMV/c/jLwiyZdWjFG9lh9emkmh6Z06s2shyuD3GXZEPAnZXrC+ShmBqw n65TS1jgYD6dM/UawCsLP6yn/u7arGL+Yo4Qc5RHgf7yvjLLdZBmgqTkX52ZRzn+ V/ON2lmyNVs6tK9jbpw5RP6wdbNSJEbyZuA= -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:06 2026 by rpki-client