$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa File: af3288f4-75be-314e-b936-36017a52c830.roa (raw, json) Hash identifier: HUI1JzTr9EOMd7zGy4uY63WJWlCdy+BnyO86PMG0CuQ= Subject key identifier: BC:2E:37:01:6C:2B:08:E1:02:A8:02:02:05:F3:D5:E1:7B:B5:47:76 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F331D137BCC72461231088180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 26969 IP address blocks: 2604:3140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:13:7b:cc:72:46:12:31:08:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=6d7a4f2a-35ed-4be1-aa4b-4a56103f113f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:b8:e5:28:27:e2:2e:38:ab:7a:ba:ca:69: 0d:41:7c:19:51:97:b9:49:de:23:d3:f8:07:af:60: 8c:38:95:e7:e4:06:c0:20:fd:6c:38:96:51:ac:da: 56:98:c4:da:42:c2:e3:57:b9:b0:8b:ff:a5:00:43: 1c:94:6b:ac:0c:29:cf:4b:a8:08:c3:51:f0:af:d5: bc:ad:e6:94:7b:a0:43:77:43:bd:60:45:00:ec:3d: 89:09:7f:ec:5d:04:e8:5b:e9:70:84:77:3e:97:73: 3c:05:42:6b:9e:84:96:31:78:2f:44:a5:c0:84:98: d2:67:5d:2d:7e:44:af:8d:fc:37:91:3e:b6:c5:2d: e4:4c:6b:f4:1f:ba:a3:f4:cf:7f:11:b9:de:be:93: 48:bc:05:4a:11:ae:76:ce:0b:78:fd:eb:6b:67:ba: 2c:db:9b:62:0e:c4:89:94:fe:dc:10:e7:7f:fb:fa: 0b:9a:2c:c5:b6:b8:03:6b:95:44:b2:6f:65:de:d9: 0a:34:51:09:59:dd:42:64:6e:6d:6c:3e:fe:bb:02: 87:0b:00:75:43:6f:ff:9d:75:d6:bf:32:f7:cc:96: aa:89:38:06:9e:4f:ee:81:01:15:62:30:15:a2:46: cb:c4:f5:72:76:b8:ff:45:d2:b2:92:1d:2a:4b:49: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2E:37:01:6C:2B:08:E1:02:A8:02:02:05:F3:D5:E1:7B:B5:47:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv6: 2604:3140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6c:8e:4e:6a:78:89:a4:52:31:8a:3b:e6:e3:81:ee:e4:38: 71:7e:ca:a9:8f:cb:ba:30:71:da:40:06:21:6d:41:4c:c2:46: b8:31:d4:0e:e9:57:ce:b3:62:84:18:5e:63:a1:01:69:69:5e: 8a:b3:3e:56:2f:cf:9e:97:19:5d:21:2f:ae:a7:ec:14:b7:b7: 31:e0:ee:9d:42:d3:eb:bc:6f:3e:1c:e8:f0:3c:8d:d2:1c:27: 07:e5:fc:18:b0:f8:11:f9:bf:2a:2a:65:3c:27:2d:21:7d:33: 72:4a:5a:b2:19:b1:8d:31:9d:4d:f7:99:5f:31:32:56:9a:44: b1:72:7e:50:56:47:97:43:d1:a4:e4:f8:ff:92:98:07:97:58: b6:1b:93:b1:08:e7:f1:28:13:84:65:1b:36:a4:ec:1b:45:6d: f0:84:c7:29:b9:c5:5a:11:b9:38:1d:84:d1:07:b1:69:36:83: 91:89:2c:58:5c:ef:62:84:87:ac:64:5b:8c:18:7a:42:cb:a9: 41:23:b2:21:f1:99:66:71:db:9b:d4:b2:2d:25:48:48:ed:fe: 26:87:87:01:f9:02:05:64:73:06:b6:7e:f3:5c:e6:f7:b8:2b: 9d:7d:4c:41:52:c6:2e:29:74:f1:17:a5:b0:e1:11:59:c2:26: 67:b1:54:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8zHRN7zHJGEjEIgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NmQ3YTRmMmEtMzVlZC00YmUxLWFhNGItNGE1NjEwM2YxMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRq45Sgn4i44q3q6ymkNQXwZUZe5Sd4j0/gH r2CMOJXn5AbAIP1sOJZRrNpWmMTaQsLjV7mwi/+lAEMclGusDCnPS6gIw1Hwr9W8 reaUe6BDd0O9YEUA7D2JCX/sXQToW+lwhHc+l3M8BUJrnoSWMXgvRKXAhJjSZ10t fkSvjfw3kT62xS3kTGv0H7qj9M9/EbnevpNIvAVKEa52zgt4/etrZ7os25tiDsSJ lP7cEOd/+/oLmizFtrgDa5VEsm9l3tkKNFEJWd1CZG5tbD7+uwKHCwB1Q2//nXXW vzL3zJaqiTgGnk/ugQEVYjAVokbLxPVydrj/RdKykh0qS0mgAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLwuNwFsKwjhAqgCAgXz1eF7tUd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWYzMjg4ZjQtNzViZS0z MTRlLWI5MzYtMzYwMTdhNTJjODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6bI5OaniJpFIxijvm44Hu5Dhxfsqpj8u6MHHaQAYhbUFMwka4MdQO 6VfOs2KEGF5joQFpaV6Ksz5WL8+elxldIS+up+wUt7cx4O6dQtPrvG8+HOjwPI3S HCcH5fwYsPgR+b8qKmU8Jy0hfTNySlqyGbGNMZ1N95lfMTJWmkSxcn5QVkeXQ9Gk 5Pj/kpgHl1i2G5OxCOfxKBOEZRs2pOwbRW3whMcpucVaEbk4HYTRB7FpNoORiSxY XO9ihIesZFuMGHpCy6lBI7Ih8Zlmcdub1LItJUhI7f4mh4cB+QIFZHMGtn7zXOb3 uCudfUxBUsYuKXTxF6Ww4RFZwiZnsVTO -----END CERTIFICATE-----Generated at Mon Sep 28 18:04:15 2026 by rpki-client