$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa File: e2d7c243-cefe-3545-86f3-de8081a2ab55.roa (raw, json) Hash identifier: ffPAQaSVEUm2ZsJnnakPh+RUz4kxsxPZTBCQe4ESjW0= Subject key identifier: 0E:48:36:6D:D1:D7:C5:9B:27:47:0A:37:7B:9A:5D:B3:E6:C5:AC:47 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584F3A17D96347252BA7A73A8780 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 6621 IP address blocks: 2001:5b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d9:63:47:25:2b:a7:a7:3a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=d0e2c8e3-5bf8-4929-9a0e-49853a301112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:95:d9:1e:9a:10:f4:96:1d:fd:1e:e2:af: 4f:46:36:76:ce:b1:d7:8e:28:32:4e:b8:d9:50:ed: 3d:af:18:10:05:4e:e5:7b:35:e3:38:18:e5:6c:b7: 91:5f:0e:13:01:70:ad:90:c5:a8:ab:09:bb:c9:17: d9:6d:85:2d:4f:59:eb:a3:65:ad:8a:2a:47:6e:36: 12:8a:94:7c:d2:50:00:c8:a0:50:ca:62:81:97:24: 7b:63:18:86:ec:47:e8:dc:6f:2e:48:4a:83:74:bb: 59:04:5a:2e:45:cc:10:59:8b:57:e5:9a:2c:a0:a1: 78:9b:86:a0:1d:d2:3e:1f:a1:8f:0f:e4:a0:d6:ed: f8:b1:e6:01:24:e1:0d:dc:67:d6:72:31:6b:d9:b4: a9:d1:d1:f5:89:d0:49:2c:fe:f7:6c:64:94:4a:e7: 81:2e:19:75:18:a7:96:65:b0:8f:2c:93:5f:1f:37: 5d:4a:9e:d5:9d:a3:a3:f1:ac:0d:1c:55:e4:04:17: ec:b5:d0:9b:60:81:2f:b0:35:d0:b0:7d:d0:e6:34: 1c:6f:55:fa:38:0c:df:19:3f:b4:e8:28:71:15:8f: f2:cf:2b:ad:a3:3f:56:32:86:b9:2b:ff:0c:9b:b5: 8f:13:c3:62:5d:c8:8f:b9:c1:1c:11:dc:84:d8:86: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:36:6D:D1:D7:C5:9B:27:47:0A:37:7B:9A:5D:B3:E6:C5:AC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv6: 2001:5b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9f:86:7e:a0:e5:89:2a:f0:a6:c3:c1:83:f0:e4:10:3e:ac: 9e:bb:dd:27:da:b3:74:36:78:6d:25:bd:cf:26:b3:3a:c2:cf: 16:c4:74:13:c0:b1:41:39:b6:56:00:d8:15:a3:26:81:35:1f: fd:f6:09:d9:6d:bf:06:36:eb:b3:b9:e8:15:f2:2c:03:50:ed: 5b:ba:80:3d:7b:e7:53:1b:4c:59:b0:14:76:80:73:74:ae:84: d8:3a:c4:8a:69:b0:a8:f6:43:70:aa:53:1c:7f:1f:ad:49:79: a3:65:d0:ac:4e:34:38:9f:49:e4:73:57:db:a0:ca:56:fa:4e: 88:ed:f5:38:64:5e:c2:37:21:dc:21:72:ba:31:64:e1:c5:fe: 8b:46:b6:89:9d:e7:60:2f:71:92:fa:9b:a6:61:bf:ca:1d:e0: af:ec:3c:bb:16:56:6f:2e:19:6f:ce:f3:90:dc:13:ae:79:07: 64:93:ad:e7:2e:b6:be:6c:69:a8:28:99:03:40:f9:df:be:00: 92:dc:44:7d:69:10:01:4c:d6:1e:e8:8b:fe:64:68:cb:fd:10: 92:18:c4:88:63:30:7b:71:5a:88:ca:5b:c1:d5:30:66:31:c5: 8c:a1:fc:df:db:2c:ed:71:85:e5:df:8f:65:ae:81:3c:f8:16: 92:e6:de:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE86F9ljRyUrp6c6h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZDBlMmM4ZTMtNWJmOC00OTI5LTlhMGUtNDk4NTNhMzAxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GeV2R6aEPSWHf0e4q9PRjZ2zrHXjigyTrjZ UO09rxgQBU7lezXjOBjlbLeRXw4TAXCtkMWoqwm7yRfZbYUtT1nro2WtiipHbjYS ipR80lAAyKBQymKBlyR7YxiG7Efo3G8uSEqDdLtZBFouRcwQWYtX5ZosoKF4m4ag HdI+H6GPD+Sg1u34seYBJOEN3GfWcjFr2bSp0dH1idBJLP73bGSUSueBLhl1GKeW ZbCPLJNfHzddSp7VnaOj8awNHFXkBBfstdCbYIEvsDXQsH3Q5jQcb1X6OAzfGT+0 6ChxFY/yzyutoz9WMoa5K/8Mm7WPE8NiXciPucEcEdyE2IakOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA5INm3R18WbJ0cKN3uaXbPmxaxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZTJkN2MyNDMtY2VmZS0z NTQ1LTg2ZjMtZGU4MDgxYTJhYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEFsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsn4Z+oOWJKvCmw8GD8OQQPqyeu90n2rN0NnhtJb3PJrM6ws8WxHQT wLFBObZWANgVoyaBNR/99gnZbb8GNuuzuegV8iwDUO1buoA9e+dTG0xZsBR2gHN0 roTYOsSKabCo9kNwqlMcfx+tSXmjZdCsTjQ4n0nkc1fboMpW+k6I7fU4ZF7CNyHc IXK6MWThxf6LRraJnedgL3GS+pumYb/KHeCv7Dy7FlZvLhlvzvOQ3BOueQdkk63n Lra+bGmoKJkDQPnfvgCS3ER9aRABTNYe6Iv+ZGjL/RCSGMSIYzB7cVqIylvB1TBm McWMofzf2yztcYXl349lroE8+BaS5t7A -----END CERTIFICATE-----Generated at Sun Sep 27 05:58:23 2026 by rpki-client