$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa File: f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa (raw, json) Hash identifier: GV+4ElTYhPZLIUQ9U6n5na/P5FbmEcdrXcvYOlop+kY= Subject key identifier: 6C:54:80:A0:C9:3A:54:A2:D4:0F:3B:EF:91:0F:33:C1:60:91:D7:92 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F4975A2FBED6FC1C85A90CC80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8987 IP address blocks: 2605:4300:2c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:a2:fb:ed:6f:c1:c8:5a:90:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8766f44-bb7a-480f-a093-94d9a4ef07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:ee:f6:ce:ae:65:16:ea:a9:8e:29:d9:a7: 60:4d:c5:06:14:cb:24:a1:07:e8:4d:ab:1f:40:47: 65:5b:e9:9b:85:f0:4c:3e:14:05:92:3b:85:6a:17: e1:88:9d:5f:28:a1:13:19:05:94:6e:84:f8:52:fc: 42:c0:85:38:2a:d2:5e:64:15:d5:d1:d4:bd:b6:73: 28:8c:59:1e:75:a8:9e:98:64:9d:a7:dd:d7:ad:ac: 61:b7:71:a2:06:70:27:c5:8b:f8:b7:20:df:8f:0a: a6:7c:22:74:88:dc:c7:2a:15:c2:f3:e2:87:25:48: c6:6d:bd:d7:bb:db:ff:c3:62:65:a3:1a:9b:97:5f: c5:b1:ec:79:36:a0:ea:96:d0:bf:b0:1a:ff:05:80: 60:f1:35:e4:88:d8:92:65:d2:25:20:ef:5a:65:9c: 4e:ef:62:02:b6:1b:ea:31:98:85:99:a2:80:0d:15: 09:f1:97:41:52:8e:dd:31:19:aa:9a:9e:64:96:22: 50:47:b1:ca:89:f5:dc:a8:31:0f:f8:2f:7e:1b:6a: 98:79:ae:7b:aa:bc:7d:90:8f:02:c4:13:65:3d:da: 61:03:74:87:aa:eb:bc:9a:d5:61:df:33:4b:9e:4e: 29:7e:e7:4a:95:a2:6c:a4:36:d7:e4:2f:fc:2e:6a: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:80:A0:C9:3A:54:A2:D4:0F:3B:EF:91:0F:33:C1:60:91:D7:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:02:59:76:79:66:55:aa:71:62:9b:6f:ef:99:73:94:95:d1: 13:3a:bc:4b:f8:99:d2:d6:29:d2:9c:49:d7:1a:e7:b6:91:25: d0:13:1d:22:44:71:9d:e9:3c:f2:90:c4:30:a5:b0:78:8c:7c: 15:53:ea:ae:74:3a:55:d4:fc:18:1a:e4:e0:6a:26:cc:00:44: 1d:a8:30:55:e2:55:06:a6:19:ea:22:d6:7c:f3:b4:15:c0:1d: 31:8f:c8:b6:8d:ca:3e:ef:ab:a9:37:2e:07:d3:d4:96:6d:8f: 0c:6b:00:7a:fb:69:8a:7c:b0:83:52:62:f0:15:30:13:0b:5e: 31:e0:a9:46:53:72:79:4d:16:ba:82:1a:3c:2f:3e:59:16:5a: 2b:35:0c:49:ce:ff:1a:70:8d:aa:5d:53:fb:59:e0:1a:e8:0b: e8:12:c0:6f:4b:f5:99:f8:5e:74:e9:70:53:a2:62:65:7f:3a: 02:f4:cb:db:bc:0a:12:b5:27:ca:74:79:96:b7:0b:50:de:20: cd:58:5f:b4:9e:75:3a:6d:74:e0:64:f8:36:83:c6:86:94:ce: 13:97:a8:0a:01:c6:61:01:eb:a7:c5:ff:3a:2b:42:b6:24:e5: 9c:97:fd:b8:d2:ae:f2:1e:f7:cc:ef:89:42:7d:fb:77:77:68: 86:e4:af:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdaL77W/ByFqQzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg3NjZmNDQtYmI3YS00ODBmLWEwOTMtOTRkOWE0ZWYwN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt/u9s6uZRbqqY4p2adgTcUGFMskoQfoTasf QEdlW+mbhfBMPhQFkjuFahfhiJ1fKKETGQWUboT4UvxCwIU4KtJeZBXV0dS9tnMo jFkedaiemGSdp93Xraxht3GiBnAnxYv4tyDfjwqmfCJ0iNzHKhXC8+KHJUjGbb3X u9v/w2Jloxqbl1/Fsex5NqDqltC/sBr/BYBg8TXkiNiSZdIlIO9aZZxO72ICthvq MZiFmaKADRUJ8ZdBUo7dMRmqmp5kliJQR7HKifXcqDEP+C9+G2qYea57qrx9kI8C xBNlPdphA3SHquu8mtVh3zNLnk4pfudKlaJspDbX5C/8Lmri1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxUgKDJOlSi1A8775EPM8FgkdeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjYzMTQ0YWItNWVhNy0z MTY1LWEwYTAtNmEwYTE4NzI1MGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALECWXZ5ZlWqcWKbb++Zc5SV0RM6vEv4mdLWKdKcSdca57aRJdAT HSJEcZ3pPPKQxDClsHiMfBVT6q50OlXU/Bga5OBqJswARB2oMFXiVQamGeoi1nzz tBXAHTGPyLaNyj7vq6k3LgfT1JZtjwxrAHr7aYp8sINSYvAVMBMLXjHgqUZTcnlN FrqCGjwvPlkWWis1DEnO/xpwjapdU/tZ4BroC+gSwG9L9Zn4XnTpcFOiYmV/OgL0 y9u8ChK1J8p0eZa3C1DeIM1YX7SedTptdOBk+DaDxoaUzhOXqAoBxmEB66fF/zor QrYk5ZyX/bjSrvIe98zviUJ9+3d3aIbkr+A= -----END CERTIFICATE-----Generated at Mon Sep 28 22:02:27 2026 by rpki-client