$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3d8f0153-b0ed-3203-8477-871a7f82d70b.roa File: 3d8f0153-b0ed-3203-8477-871a7f82d70b.roa (raw, json) Hash identifier: tjBpUALpgZ/vQ2+m3b9gIWRLf5sR5eW0bGt65qoU5os= Subject key identifier: 20:0E:31:7B:90:0B:56:4B:18:BF:E4:01:8A:B8:BB:80:A5:6F:B0:74 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F454289860B7935C709C5DE00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3d8f0153-b0ed-3203-8477-871a7f82d70b.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 64286 IP address blocks: 2606:f180:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:89:86:0b:79:35:c7:09:c5:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=42aff9e3-29d1-4e45-8029-1cbb6d7323f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:65:6f:ca:f9:6c:5f:0c:ae:7d:30:fd:78: 8c:6c:5c:b3:4d:e4:e3:cc:94:12:42:59:06:71:dc: 44:38:12:42:8e:bd:f0:ee:b9:cb:5f:53:af:7e:8b: b6:99:d4:35:fb:5d:e1:78:d3:7c:47:19:54:29:f3: 3e:64:4e:75:9e:cc:0f:d8:2d:4a:d5:8b:26:f4:3d: e8:93:75:69:50:82:5d:9c:11:18:c8:83:a3:18:c1: 25:37:34:a3:f1:68:70:d6:d7:0b:93:2f:aa:3b:66: e0:38:f5:d0:d6:08:53:17:16:e7:04:81:9a:7d:1f: a0:7a:ca:d9:57:cc:07:a4:c9:da:22:09:7a:70:49: 6f:ea:82:f4:08:04:5a:63:a3:cf:76:50:d3:82:37: e4:43:21:bb:bb:a5:3c:1a:b3:1f:ec:39:a6:ac:2f: 69:39:91:03:c5:36:b4:55:20:eb:65:f2:18:16:e0: c5:69:38:75:a4:f7:4d:99:d8:cc:87:b0:6f:5e:e1: 9c:a5:94:27:78:97:61:bf:14:85:e2:ee:79:fd:9b: be:1e:fd:2c:8e:0c:75:e7:eb:5f:86:95:96:b9:21: 9b:a8:4b:12:23:6e:5c:86:c5:31:f5:cd:db:7e:2c: 65:66:d5:19:bd:f3:92:97:86:1c:bc:3a:a8:8c:4a: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:31:7B:90:0B:56:4B:18:BF:E4:01:8A:B8:BB:80:A5:6F:B0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3d8f0153-b0ed-3203-8477-871a7f82d70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f180:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fe:35:1b:69:77:4a:5d:06:26:f0:74:05:9f:08:bd:80:20: e4:35:8e:37:7d:2d:6e:17:dc:d1:f6:40:4f:a7:ad:cf:53:51: 9a:47:7c:a6:05:39:d6:08:d9:99:b9:4a:d6:5d:a4:d4:42:84: 4f:e0:5b:e7:67:d3:ad:7f:b5:82:d7:af:d9:4c:5a:12:00:d2: 5e:d2:fa:b8:a9:cc:c5:e5:a1:b5:77:b0:af:12:47:ee:ea:05: 89:01:f0:49:a9:32:03:c2:ef:3c:19:d0:8a:90:ae:74:28:b6: 6a:ae:33:8b:2e:94:e8:58:c1:e6:6c:10:3c:51:8e:19:fe:4c: 78:ef:7f:6a:60:e6:0a:2e:af:c7:49:a1:dd:98:7c:94:75:43: 84:8d:a2:a6:be:79:5f:bd:cc:64:b1:49:9a:9d:f8:8e:21:85: e0:c2:7d:c7:34:69:c8:fd:38:27:41:e8:d1:82:07:51:75:b8: f9:1f:5b:9b:d4:2c:e1:a2:79:f1:9f:d5:e3:1c:47:a3:d3:14: 2e:1c:27:f6:ae:07:ff:02:b2:a4:d0:e5:f6:90:0c:89:f5:87: 6e:d9:6d:49:0c:c8:03:6e:b9:2a:fa:7a:f2:d6:58:79:2e:f4: bf:6d:06:8e:b9:72:3e:64:22:50:4c:70:94:55:64:7e:36:ad: df:b6:91:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FQomGC3k1xwnF3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NDJhZmY5ZTMtMjlkMS00ZTQ1LTgwMjktMWNiYjZkNzMyM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWllb8r5bF8Mrn0w/XiMbFyzTeTjzJQSQlkG cdxEOBJCjr3w7rnLX1Ovfou2mdQ1+13heNN8RxlUKfM+ZE51nswP2C1K1Ysm9D3o k3VpUIJdnBEYyIOjGMElNzSj8Whw1tcLky+qO2bgOPXQ1ghTFxbnBIGafR+gesrZ V8wHpMnaIgl6cElv6oL0CARaY6PPdlDTgjfkQyG7u6U8GrMf7DmmrC9pOZEDxTa0 VSDrZfIYFuDFaTh1pPdNmdjMh7BvXuGcpZQneJdhvxSF4u55/Zu+Hv0sjgx15+tf hpWWuSGbqEsSI25chsUx9c3bfixlZtUZvfOSl4YcvDqojEpVqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAOMXuQC1ZLGL/kAYq4u4Clb7B0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvM2Q4ZjAxNTMtYjBlZC0z MjAzLTg0NzctODcxYTdmODJkNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAb+NRtpd0pdBibwdAWfCL2AIOQ1jjd9LW4X3NH2QE+nrc9TUZpH fKYFOdYI2Zm5StZdpNRChE/gW+dn061/tYLXr9lMWhIA0l7S+ripzMXlobV3sK8S R+7qBYkB8EmpMgPC7zwZ0IqQrnQotmquM4sulOhYweZsEDxRjhn+THjvf2pg5gou r8dJod2YfJR1Q4SNoqa+eV+9zGSxSZqd+I4hheDCfcc0acj9OCdB6NGCB1F1uPkf W5vULOGiefGf1eMcR6PTFC4cJ/auB/8CsqTQ5faQDIn1h27ZbUkMyANuuSr6evLW WHku9L9tBo65cj5kIlBMcJRVZH42rd+2kb8= -----END CERTIFICATE-----Generated at Sat Oct 3 20:27:28 2026 by rpki-client