$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa File: 06a7945a-0360-3338-a5f2-7799e064b387.roa (raw, json) Hash identifier: cJjRpS+BnaT821uhnlq0+hqPxAynnwJYGzN/oLe1lno= Subject key identifier: 40:40:46:18:65:3F:F7:56:C4:24:EB:CC:C6:6A:B2:D6:A9:20:58:AD Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584EED524053D6AA8C4AF5A99A00 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 16557 IP address blocks: 2607:f528::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:40:53:d6:aa:8c:4a:f5:a9:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=e658ffff-d132-46fa-8011-fc32501838da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:3c:df:b1:2b:59:d7:ef:e4:67:dd:58:ce: 8d:62:6a:60:cf:e8:08:a7:06:57:a6:bc:0e:5a:b5: 77:cb:a9:c3:c1:b4:00:06:62:e7:d7:83:60:0c:68: 59:51:cb:a5:05:98:a3:88:86:31:4a:a7:b4:7a:bd: 66:f7:8c:26:b3:15:7c:d9:85:e5:f7:1e:6e:68:4d: 40:b2:5c:04:14:b5:36:7d:05:6d:d2:f2:f6:9d:7e: 95:b0:98:65:bb:fc:d7:93:59:cc:c7:9b:0f:ad:95: 35:50:da:de:79:b0:1e:a1:e2:1a:52:07:36:32:b1: 88:06:10:b5:d0:3a:1c:bb:ac:b4:ce:fd:6b:8c:8a: 29:92:9d:2a:d4:6c:7a:16:17:3b:ec:b9:f7:ed:60: bc:33:eb:bf:06:2a:7a:e1:5f:31:d5:bf:12:af:36: 3a:8e:73:61:96:44:93:3c:dc:c5:fa:bf:dc:80:8e: bf:ab:d5:28:b3:ca:b6:ee:05:d9:5a:33:71:44:67: 15:dd:16:ae:d7:e9:0e:9f:39:ce:27:f5:f5:67:be: 7d:04:a9:aa:d5:18:aa:2f:cd:2e:4f:67:9b:13:60: aa:79:7d:08:28:95:6f:23:0f:f9:0e:e3:b7:b5:2d: ed:91:aa:ff:46:d4:3a:ce:dd:ad:e5:4e:5b:3a:d1: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:46:18:65:3F:F7:56:C4:24:EB:CC:C6:6A:B2:D6:A9:20:58:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv6: 2607:f528::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ce:44:52:87:f1:3e:ee:ce:88:74:77:5c:55:6e:d0:b0:03: d6:f9:ee:e0:23:49:c9:eb:b0:d9:1a:8c:cb:23:5f:39:29:be: 62:68:13:21:3d:57:3a:04:30:3a:fe:89:bd:bb:cf:a4:6c:32: 99:6f:2f:45:81:99:d7:37:b4:bc:56:a8:63:fa:b1:0a:fb:17: f2:33:9a:54:54:8e:dc:0f:94:bc:96:aa:51:a2:ec:21:d8:78: 3e:02:10:e5:86:ed:f9:cf:ed:b3:df:cd:07:1f:26:76:d4:d8: f5:08:96:3f:ca:99:38:c5:87:82:2e:2c:7e:d4:a2:8f:14:4c: 09:1c:fe:52:6b:04:d9:74:ab:d7:1f:c2:9f:0b:bb:7d:61:bd: 5d:cc:2c:09:3c:fc:53:78:67:27:69:b1:26:91:08:5d:e9:67: 30:89:d6:6e:33:40:9b:22:5f:71:ac:57:b5:29:44:17:a7:ce: 68:24:b4:68:dd:5f:74:c2:17:be:4f:74:cb:15:47:31:06:35: 15:28:0d:b3:a4:90:b2:c3:1e:68:94:f7:0b:eb:7e:0d:54:29: 77:ed:f0:58:e8:af:ba:69:65:88:05:48:df:4d:d9:17:06:cc: 74:17:52:72:24:0b:a7:98:ae:73:83:64:d1:17:56:ec:6f:eb: 0a:08:59:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7tUkBT1qqMSvWpmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTY1OGZmZmYtZDEzMi00NmZhLTgwMTEtZmMzMjUwMTgzOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqs837ErWdfv5GfdWM6NYmpgz+gIpwZXprwO WrV3y6nDwbQABmLn14NgDGhZUculBZijiIYxSqe0er1m94wmsxV82YXl9x5uaE1A slwEFLU2fQVt0vL2nX6VsJhlu/zXk1nMx5sPrZU1UNreebAeoeIaUgc2MrGIBhC1 0Docu6y0zv1rjIopkp0q1Gx6Fhc77Ln37WC8M+u/Bip64V8x1b8SrzY6jnNhlkST PNzF+r/cgI6/q9Uos8q27gXZWjNxRGcV3Rau1+kOnznOJ/X1Z759BKmq1RiqL80u T2ebE2CqeX0IKJVvIw/5DuO3tS3tkar/RtQ6zt2t5U5bOtELqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBARhhlP/dWxCTrzMZqstapIFitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDZhNzk0NWEtMDM2MC0z MzM4LWE1ZjItNzc5OWUwNjRiMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1KDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMzkRSh/E+7s6IdHdcVW7QsAPW+e7gI0nJ67DZGozLI185Kb5iaBMh PVc6BDA6/om9u8+kbDKZby9FgZnXN7S8Vqhj+rEK+xfyM5pUVI7cD5S8lqpRouwh 2Hg+AhDlhu35z+2z380HHyZ21Nj1CJY/ypk4xYeCLix+1KKPFEwJHP5SawTZdKvX H8KfC7t9Yb1dzCwJPPxTeGcnabEmkQhd6WcwidZuM0CbIl9xrFe1KUQXp85oJLRo 3V90whe+T3TLFUcxBjUVKA2zpJCywx5olPcL634NVCl37fBY6K+6aWWIBUjfTdkX Bsx0F1JyJAunmK5zg2TRF1bsb+sKCFnJ -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:05 2026 by rpki-client