$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa File: d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa (raw, json) Hash identifier: s8f8Y6HDEemY/3nxURanByEA0GAOqEnZ80ifxCrxvYU= Subject key identifier: DD:2F:BB:9B:D0:67:0A:78:81:5D:26:B5:85:40:9B:C7:EB:54:90:89 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584F498AAB60B2D8079BF4232880 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14523 IP address blocks: 2607:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ab:60:b2:d8:07:9b:f4:23:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=adce1d0e-4f19-421a-961b-7fb38eea3124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:8c:54:85:95:f4:13:df:c4:7a:d4:9f:1a: 9f:2d:f6:31:f5:56:cf:a9:f2:2d:76:0f:56:cc:7a: e8:a8:89:20:a1:fe:51:2f:d3:56:50:5b:09:42:0b: 20:a7:44:6a:0a:36:ad:7c:f1:28:68:35:88:b9:48: f7:7c:71:f2:1c:a6:4c:49:c4:2d:eb:a9:a1:47:d0: f4:38:a8:21:eb:a1:5f:6a:06:71:97:6d:6d:1f:40: c9:0b:4d:a5:11:37:18:82:ae:a0:3c:41:0d:21:64: df:50:5c:0e:37:4c:4e:dc:90:39:76:d9:d1:32:eb: 13:4d:1c:cd:31:51:2b:30:53:00:1b:ff:4d:4d:22: c7:29:db:ec:da:47:c5:80:21:10:99:ef:35:88:8b: cb:b7:b2:78:73:44:1c:5c:d2:9a:52:18:f4:30:11: 3d:c1:b2:fb:75:15:26:ad:86:53:4a:af:bb:86:49: 8b:e7:ed:53:33:81:e7:ce:a6:57:74:56:45:07:8b: 96:45:fb:d8:7d:a6:42:c7:66:bd:06:a7:c4:1e:b6: 71:10:d6:78:f1:d1:a9:d9:86:29:f8:03:17:fe:d0: 82:64:37:ed:47:55:98:d2:31:59:8e:08:fe:54:e3: db:ac:76:c2:f3:c2:18:76:73:38:da:67:30:fc:fa: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:BB:9B:D0:67:0A:78:81:5D:26:B5:85:40:9B:C7:EB:54:90:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv6: 2607:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:a9:13:33:68:01:e6:6e:b3:20:ac:9d:85:62:6a:f7:65: 7f:cd:ff:a5:60:b5:ef:2e:6f:80:8a:eb:60:83:a1:10:34:21: c7:08:48:e5:6a:80:2f:1d:eb:64:45:d4:2b:f0:41:8e:01:17: 8e:89:1a:c2:b9:cb:b6:b9:30:f2:30:d4:5a:e2:3b:9f:76:1f: d6:dc:41:02:6e:48:e1:5c:07:a2:d4:e2:a5:3f:14:dd:a8:35: 9a:68:82:00:38:eb:d6:ea:25:7f:8f:8e:f7:61:4b:9a:02:10: 11:50:b3:02:fb:4d:ef:2d:17:71:b1:e5:34:55:9e:d1:cb:27: ff:3e:e8:d5:2e:95:19:32:04:3f:3c:39:80:77:a2:c8:d8:29: 7a:50:6c:a2:15:03:46:e7:e1:e1:5e:d6:74:41:8d:a4:92:30: 7e:d2:dc:f0:46:dc:5f:9a:6b:a2:ee:dc:62:60:5b:33:d8:5f: 9d:1b:6d:b2:a8:3d:4d:4c:69:b0:0e:d9:4d:e7:2c:ce:49:32: 14:02:53:e0:69:fc:c4:78:56:78:70:c1:3f:67:25:9c:f4:1f: 58:eb:78:2a:b1:a4:e9:67:c0:9c:4f:48:32:de:66:97:a8:6a: f3:84:ec:bf:50:6d:5c:56:b3:ef:6c:8b:50:08:6d:e3:c9:3a: 32:67:6b:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiqtgstgHm/QjKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWRjZTFkMGUtNGYxOS00MjFhLTk2MWItN2ZiMzhlZWEzMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhWMVIWV9BPfxHrUnxqfLfYx9VbPqfItdg9W zHroqIkgof5RL9NWUFsJQgsgp0RqCjatfPEoaDWIuUj3fHHyHKZMScQt66mhR9D0 OKgh66FfagZxl21tH0DJC02lETcYgq6gPEENIWTfUFwON0xO3JA5dtnRMusTTRzN MVErMFMAG/9NTSLHKdvs2kfFgCEQme81iIvLt7J4c0QcXNKaUhj0MBE9wbL7dRUm rYZTSq+7hkmL5+1TM4HnzqZXdFZFB4uWRfvYfaZCx2a9BqfEHrZxENZ48dGp2YYp +AMX/tCCZDftR1WY0jFZjgj+VOPbrHbC88IYdnM42mcw/PpdLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN0vu5vQZwp4gV0mtYVAm8frVJCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvZDI3MWRkZTAtMmZhMy0z MWRlLThjZTMtY2MxNjdmYjU0NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7C6kTM2gB5m6zIKydhWJq92V/zf+lYLXvLm+Aiutgg6EQNCHHCEjl aoAvHetkRdQr8EGOAReOiRrCucu2uTDyMNRa4jufdh/W3EECbkjhXAei1OKlPxTd qDWaaIIAOOvW6iV/j473YUuaAhARULMC+03vLRdxseU0VZ7Ryyf/PujVLpUZMgQ/ PDmAd6LI2Cl6UGyiFQNG5+HhXtZ0QY2kkjB+0tzwRtxfmmui7txiYFsz2F+dG22y qD1NTGmwDtlN5yzOSTIUAlPgafzEeFZ4cME/ZyWc9B9Y63gqsaTpZ8CcT0gy3maX qGrzhOy/UG1cVrPvbItQCG3jyToyZ2t+ -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:55 2026 by rpki-client