$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa File: ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa (raw, json) Hash identifier: cgd92wPp590Htb0KdzNUkYm6CBGf6zrGJ4rUP0Js/bI= Subject key identifier: 86:F4:30:68:D4:7A:D2:DC:0E:5F:AF:30:94:E0:15:15:47:6B:59:F2 Certificate issuer: /CN=b1896033-ca2b-44a4-b67f-7160d614cf31 Certificate serial: 010D0C9F4328584EED52011FBE7BAA89CF6A6600 Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 12186 IP address blocks: 2607:2c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:01:1f:be:7b:aa:89:cf:6a:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=eb03eeb4-fd43-4c00-9041-850024959542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:5f:5d:b4:e6:3a:52:7a:f1:9d:40:71:1f: 34:88:f5:ae:d0:f4:47:8c:ae:52:b8:2b:c2:58:27: f0:fe:f0:ea:01:a3:15:52:f4:03:d2:9b:72:f6:c9: 13:60:70:55:67:d6:2e:12:06:04:29:e4:3f:0b:bb: a7:24:96:dd:73:8b:69:7c:2c:23:6c:d1:94:45:5c: 18:93:0d:32:70:5a:31:8d:de:48:fb:47:a2:a0:8e: 96:69:b2:48:3f:40:44:54:6a:4c:75:f3:5d:80:eb: bd:84:66:30:b6:4c:cb:3a:2b:70:15:9f:82:4b:50: 6a:22:81:b1:21:2a:6b:4e:9e:c9:a6:07:1a:87:1e: 00:42:92:f9:da:38:84:4b:e6:f0:7c:b2:5d:0a:92: e8:1e:73:40:23:8e:9f:82:25:e5:b5:95:6b:18:18: f4:7f:de:29:8b:7b:52:ca:17:34:f9:fc:9e:5f:7c: d6:36:cf:f0:c2:25:32:21:ad:28:fb:8b:c5:e6:48: ad:0d:13:a8:19:5f:13:87:a2:63:c5:33:6f:18:6f: 38:b2:b6:30:99:13:3b:c2:4e:33:f3:f2:e9:17:fe: 57:c2:4c:5f:5e:b0:58:07:c5:db:22:f9:26:4b:8d: f9:a3:b8:02:d6:29:20:c5:08:ca:00:9e:e6:80:ed: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:30:68:D4:7A:D2:DC:0E:5F:AF:30:94:E0:15:15:47:6B:59:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/ffd3f8f1-6687-36e1-9370-482f17de0a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl X509v3 Authority Key Identifier: keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer sbgp-ipAddrBlock: critical IPv6: 2607:2c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f7:5d:57:49:92:00:b8:64:81:eb:37:b9:a9:fc:cb:1a:ed: 0c:e9:bf:b4:c1:30:08:46:ef:05:1c:4f:9d:73:b7:04:3d:5a: a0:59:a7:a9:3d:d9:76:4d:78:e0:c5:19:8f:ca:ff:cb:4a:23: 9f:f9:47:24:33:20:dc:b0:be:cc:49:87:24:d0:d6:46:d3:51: e2:6a:55:8d:4e:03:d4:f0:04:b0:d4:6c:a2:75:5f:2a:01:3b: d8:7c:89:34:82:28:56:36:f6:a8:c2:68:e4:54:84:c0:d6:37: af:65:be:b7:54:a9:f2:0f:76:d0:a8:d0:e4:99:31:0a:2c:ce: 1a:e0:72:c1:9f:3f:64:05:9d:aa:d2:d6:bc:72:05:08:58:ac: 4c:85:39:4e:5c:a8:f8:41:ac:e9:f2:60:f5:59:bf:af:fb:e6: 91:85:05:84:3f:5e:47:3d:43:46:56:ee:e9:75:1f:f8:c0:30: b2:c2:64:89:0e:d9:18:03:06:55:bc:5a:95:66:06:56:4c:13: 6b:6d:0d:0a:9a:3f:69:5d:f8:ea:9c:f0:a3:f3:7b:7b:0f:37: 97:ee:a3:d9:63:b2:18:57:79:d1:97:5a:52:e8:5d:ae:ac:1d: 9c:d5:8c:1a:0c:77:4f:63:8f:0b:4f:02:ea:9a:36:f0:9a:08: bf:d2:db:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7tUgEfvnuqic9qZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTYwMzMtY2EyYi00NGE0LWI2N2YtNzE2MGQ2MTRj ZjMxMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWIwM2VlYjQtZmQ0My00YzAwLTkwNDEtODUwMDI0OTU5NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFxfXbTmOlJ68Z1AcR80iPWu0PRHjK5SuCvC WCfw/vDqAaMVUvQD0pty9skTYHBVZ9YuEgYEKeQ/C7unJJbdc4tpfCwjbNGURVwY kw0ycFoxjd5I+0eioI6WabJIP0BEVGpMdfNdgOu9hGYwtkzLOitwFZ+CS1BqIoGx ISprTp7Jpgcahx4AQpL52jiES+bwfLJdCpLoHnNAI46fgiXltZVrGBj0f94pi3tS yhc0+fyeX3zWNs/wwiUyIa0o+4vF5kitDROoGV8Th6JjxTNvGG84srYwmRM7wk4z 8/LpF/5XwkxfXrBYB8XbIvkmS435o7gC1ikgxQjKAJ7mgO1HCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIb0MGjUetLcDl+vMJTgFRVHa1nyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iMTg5 NjAzMy1jYTJiLTQ0YTQtYjY3Zi03MTYwZDYxNGNmMzEvZmZkM2Y4ZjEtNjY4Ny0z NmUxLTkzNzAtNDgyZjE3ZGUwYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjE4OTYwMzMtY2EyYi00NGE0LWI2 N2YtNzE2MGQ2MTRjZjMxL2IxODk2MDMzLWNhMmItNDRhNC1iNjdmLTcxNjBkNjE0 Y2YzMS5jcmwwHwYDVR0jBBgwFoAUWK+j8sCAqdqqltOm1dHGumnwiTIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iMTg5NjAzMy1jYTJiLTQ0YTQtYjY3Zi03MTYw ZDYxNGNmMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcsQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+911XSZIAuGSB6ze5qfzLGu0M6b+0wTAIRu8FHE+dc7cEPVqgWaep Pdl2TXjgxRmPyv/LSiOf+UckMyDcsL7MSYck0NZG01HialWNTgPU8ASw1GyidV8q ATvYfIk0gihWNvaowmjkVITA1jevZb63VKnyD3bQqNDkmTEKLM4a4HLBnz9kBZ2q 0ta8cgUIWKxMhTlOXKj4Qazp8mD1Wb+v++aRhQWEP15HPUNGVu7pdR/4wDCywmSJ DtkYAwZVvFqVZgZWTBNrbQ0Kmj9pXfjqnPCj83t7DzeX7qPZY7IYV3nRl1pS6F2u rB2c1YwaDHdPY48LTwLqmjbwmgi/0tv0 -----END CERTIFICATE-----Generated at Mon Sep 28 10:50:08 2026 by rpki-client