$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa File: 06a7945a-0360-3338-a5f2-7799e064b387.roa (raw, json) Hash identifier: xegi0Ip3eVxHwpIYpVPVx4paKjO85NKSGxAwK+rJaOs= Subject key identifier: A3:86:0D:69:5C:24:7A:F3:98:01:DC:FF:E4:5A:F6:0E:9F:52:91:F8 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584F8F3DEDE392D3FBFD9D88D540 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16557 IP address blocks: 2607:f528::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ed:e3:92:d3:fb:fd:9d:88:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=7827d724-e5cf-4fa0-acf0-fd578b1489e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:87:b8:a2:69:35:77:75:26:f8:c0:e6:5b: 6b:b8:cd:cd:c6:cc:99:d0:36:4c:a1:77:f0:e6:5b: 54:8b:b7:30:01:99:25:08:89:25:b4:77:4d:f8:31: b1:b5:a3:4e:0c:b4:3a:aa:76:1b:e0:ec:30:6b:85: fc:1f:85:92:38:56:12:40:f6:07:e2:9b:4d:7c:81: 09:3e:35:dd:06:5a:b6:0c:97:2f:b1:03:66:0f:d1: e4:1e:87:c0:53:da:99:83:c6:1b:62:26:fd:26:36: 93:bc:81:c4:9c:4d:4e:8e:b0:cc:df:57:b5:73:aa: 81:67:5d:35:32:2c:93:af:ec:6f:7a:51:7f:4d:e7: 36:49:a8:b6:67:0d:19:db:20:61:25:00:09:2e:97: 63:8a:4e:ad:f0:07:a7:db:68:26:b9:24:13:a2:9b: d1:29:b4:c8:7d:f1:34:53:ed:d5:99:02:7d:97:9e: 25:c5:dc:c8:34:d4:9d:9c:64:c4:bc:84:e2:b2:4d: ec:40:21:9b:27:9b:ec:4d:a9:e8:99:69:26:1b:83: f5:b2:89:4c:b0:6c:00:de:62:42:7b:3b:91:b6:38: 94:34:24:6d:8a:22:b1:b5:f7:86:05:73:6a:95:e7: 3e:89:e1:10:6b:f9:99:6f:7f:0e:b9:61:4a:ad:ea: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:86:0D:69:5C:24:7A:F3:98:01:DC:FF:E4:5A:F6:0E:9F:52:91:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv6: 2607:f528::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:08:6d:4f:78:93:d0:0f:11:1f:02:52:c8:f8:bc:a1:f4:18: 57:7a:d0:b9:2b:a3:21:a4:50:e5:2f:b2:70:fd:73:2b:8e:62: 92:9f:df:38:9e:bc:3f:44:b3:d7:9b:96:e3:c1:4c:4f:0b:be: bf:f6:58:1e:bb:02:31:64:90:4a:ae:99:a1:f9:a6:4a:cb:b5: 64:f2:c6:fb:42:0c:75:81:3c:d3:ae:21:c2:6a:83:f6:ef:a1: f8:09:70:e0:ba:b8:ca:c9:ac:1a:89:2e:77:56:b7:e1:9f:d3: 50:2e:d2:54:13:3f:d6:d0:49:c1:e3:cf:12:38:ae:f2:c3:7e: b7:68:10:2a:9c:7e:bd:76:d6:b0:11:10:aa:e2:97:fa:b3:c3: ea:4a:76:7a:0b:89:c7:11:6c:86:3d:7c:b2:22:b3:34:ec:f9: 2b:f7:b9:b8:e3:f3:11:31:8b:96:4f:00:0b:6f:1c:0e:d5:7f: c4:43:3f:50:72:9d:90:e2:96:7b:72:82:8b:1b:c2:a6:5a:e4: d1:5a:bf:03:d0:5a:b9:7d:63:1f:87:45:ee:43:19:d1:f9:42: e7:03:c9:97:df:ab:9e:7e:b1:74:1f:7e:24:65:ef:e0:ae:0a: 2d:59:23:41:ea:a3:0e:6e:4f:1c:44:a6:2a:f6:72:0b:cd:ab: b1:5d:5c:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+PPe3jktP7/Z2I1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NzgyN2Q3MjQtZTVjZi00ZmEwLWFjZjAtZmQ1NzhiMTQ4OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitaHuKJpNXd1JvjA5ltruM3NxsyZ0DZMoXfw 5ltUi7cwAZklCIkltHdN+DGxtaNODLQ6qnYb4Owwa4X8H4WSOFYSQPYH4ptNfIEJ PjXdBlq2DJcvsQNmD9HkHofAU9qZg8YbYib9JjaTvIHEnE1OjrDM31e1c6qBZ101 MiyTr+xvelF/Tec2Sai2Zw0Z2yBhJQAJLpdjik6t8Aen22gmuSQTopvRKbTIffE0 U+3VmQJ9l54lxdzINNSdnGTEvITisk3sQCGbJ5vsTanomWkmG4P1solMsGwA3mJC ezuRtjiUNCRtiiKxtfeGBXNqlec+ieEQa/mZb38OuWFKreplfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOGDWlcJHrzmAHc/+Ra9g6fUpH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDZhNzk0NWEtMDM2MC0z MzM4LWE1ZjItNzc5OWUwNjRiMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1KDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOCG1PeJPQDxEfAlLI+Lyh9BhXetC5K6MhpFDlL7Jw/XMrjmKSn984 nrw/RLPXm5bjwUxPC76/9lgeuwIxZJBKrpmh+aZKy7Vk8sb7Qgx1gTzTriHCaoP2 76H4CXDgurjKyawaiS53Vrfhn9NQLtJUEz/W0EnB488SOK7yw363aBAqnH69dtaw ERCq4pf6s8PqSnZ6C4nHEWyGPXyyIrM07Pkr97m44/MRMYuWTwALbxwO1X/EQz9Q cp2Q4pZ7coKLG8KmWuTRWr8D0Fq5fWMfh0XuQxnR+ULnA8mX36uefrF0H34kZe/g rgotWSNB6qMObk8cRKYq9nILzauxXVyI -----END CERTIFICATE-----Generated at Sun Nov 1 14:39:29 2026 by rpki-client