$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa File: d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa (raw, json) Hash identifier: K0+JSjibZurU81N+gUtXuZ61s3SE3YSgSnDhryXEvwo= Subject key identifier: 2A:FD:A5:7C:0B:65:9B:9F:71:7D:85:09:EF:86:20:74:D2:12:AB:5B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498545F4AD1970E4C6CF6C3A Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2607:f8b0:4012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:45:f4:ad:19:70:e4:c6:cf:6c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=297aef2e-3a2f-4e44-8907-0e9f5931d2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:e8:d5:0f:22:d0:c5:27:36:d0:a6:49:3c: 45:b3:60:c7:a4:e6:20:5e:8a:ab:42:27:54:e7:d0: d7:30:ae:04:8c:a6:fd:8f:d3:7d:28:c0:55:45:9a: b5:44:6c:01:96:66:59:9a:97:0f:19:49:de:9d:2b: 49:e4:34:69:ec:6b:77:2e:5a:0b:71:1b:fe:c6:5f: e5:88:10:51:7b:2d:61:7f:10:51:bf:ee:50:8f:7e: 3c:67:17:5d:05:9f:cf:ce:49:d0:91:9f:2e:5d:41: 68:c0:ac:4a:ca:aa:14:e0:79:31:76:41:4e:6d:2f: 72:81:3d:af:69:42:15:9d:78:fa:b4:66:80:0d:d4: 17:74:e1:f3:13:d8:a1:b9:6a:7d:00:65:d1:99:28: b8:83:42:5b:72:a4:4f:e6:e2:cf:82:c1:64:b4:db: bf:10:dd:dd:08:69:45:d3:40:77:f1:41:06:5a:0d: 94:21:8a:98:3f:3f:90:f2:c6:0d:5e:eb:66:df:45: 50:98:8c:e3:aa:95:54:51:ad:d7:bd:bb:3b:3a:a7: 87:9d:33:30:74:09:02:c7:e5:09:5c:ce:bc:c0:ad: fd:11:0a:4f:c7:80:24:c2:fa:af:3c:88:49:69:45: 14:48:cd:1b:00:d1:94:15:e4:07:7f:81:9f:d7:6b: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:A5:7C:0B:65:9B:9F:71:7D:85:09:EF:86:20:74:D2:12:AB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:12:17:ca:f3:e1:aa:f5:fd:be:8b:9f:9d:6f:50:55:04:19: 6a:09:bd:76:2b:b6:b0:a6:7e:85:6f:9f:c5:c8:a2:0f:85:1d: 01:35:62:b9:6b:96:99:10:82:79:a8:32:1f:d6:de:e0:1c:ec: de:74:61:6c:9f:ac:a2:26:f0:b2:5a:d0:a1:79:3d:8c:cd:1f: 9e:50:95:e7:70:80:3b:ad:a6:be:7b:39:94:69:06:04:77:2b: 14:28:4f:eb:78:93:25:b1:25:b1:e7:ca:f5:ee:c0:4b:ab:29: f4:1e:9e:e6:7e:61:52:ff:02:9d:bc:43:d3:81:36:0f:9a:72: a0:92:b3:b6:ff:bb:41:32:d7:ed:37:d1:23:72:27:f8:74:15: 25:c7:f2:c6:af:5c:10:2d:ca:e2:07:7a:eb:14:59:dd:5a:d5: 90:bc:72:85:c9:b4:4a:f9:6b:f8:45:96:bc:88:6f:28:cd:1a: 77:12:fc:45:f3:e8:55:03:a5:0c:10:7e:bb:2b:94:7c:0a:89: eb:f2:a5:d1:65:c7:a3:23:43:4e:f9:1e:70:70:6a:30:5c:75: 64:6a:1e:70:0f:e0:08:50:75:f9:20:d3:ae:9e:0c:27:13:fc: eb:75:4a:f3:24:af:15:1c:22:1d:2c:57:8b:70:6a:c3:ea:a8: 9a:5c:ee:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhUX0rRlw5MbPbDowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjk3YWVmMmUtM2EyZi00ZTQ0LTg5MDctMGU5ZjU5MzFkMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu7o1Q8i0MUnNtCmSTxFs2DHpOYgXoqrQidU 59DXMK4EjKb9j9N9KMBVRZq1RGwBlmZZmpcPGUnenStJ5DRp7Gt3LloLcRv+xl/l iBBRey1hfxBRv+5Qj348ZxddBZ/PzknQkZ8uXUFowKxKyqoU4HkxdkFObS9ygT2v aUIVnXj6tGaADdQXdOHzE9ihuWp9AGXRmSi4g0JbcqRP5uLPgsFktNu/EN3dCGlF 00B38UEGWg2UIYqYPz+Q8sYNXutm30VQmIzjqpVUUa3Xvbs7OqeHnTMwdAkCx+UJ XM68wK39EQpPx4AkwvqvPIhJaUUUSM0bANGUFeQHf4Gf12vZ4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCr9pXwLZZufcX2FCe+GIHTSEqtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgwMThlYmYtY2ViNC0z YjI5LThiZDEtN2E3NGE0MjI0MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQSF8rz4ar1/b6Ln51vUFUEGWoJvXYrtrCmfoVvn8XIog+FHQE1 YrlrlpkQgnmoMh/W3uAc7N50YWyfrKIm8LJa0KF5PYzNH55QledwgDutpr57OZRp BgR3KxQoT+t4kyWxJbHnyvXuwEurKfQenuZ+YVL/Ap28Q9OBNg+acqCSs7b/u0Ey 1+030SNyJ/h0FSXH8savXBAtyuIHeusUWd1a1ZC8coXJtEr5a/hFlryIbyjNGncS /EXz6FUDpQwQfrsrlHwKievypdFlx6MjQ075HnBwajBcdWRqHnAP4AhQdfkg066e DCcT/Ot1SvMkrxUcIh0sV4twasPqqJpc7j4= -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:12 2026 by rpki-client