$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa File: 3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json) Hash identifier: MIJnQLthqNsHZES+dlSwHz0HH6AWKQFtCEyLyi7uvJ8= Subject key identifier: 3D:81:47:85:0B:5B:2C:ED:49:60:E5:81:28:FF:77:9D:EE:64:3B:06 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F189799C56E952DE27EC20E80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:99:c5:6e:95:2d:e2:7e:c2:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=e223f4dc-36f1-4a64-8340-5caeec91cd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:ae:75:06:16:b4:8c:33:f2:20:02:2e:8c: b9:07:fb:dd:c3:7e:4b:ce:e2:5b:8e:d5:40:b3:58: ad:02:be:f0:91:31:51:6d:16:d6:2d:6d:00:3a:b5: 07:7c:b7:cc:ed:27:00:55:2b:62:91:46:6d:e6:f0: e3:66:ce:2d:1f:ea:84:c7:8b:b5:0f:15:21:09:8b: 72:45:ea:8e:06:7a:44:d9:f9:a6:f2:cb:43:f7:9d: b9:d4:58:98:e3:3f:4e:fc:d1:ec:79:b7:d6:99:c4: 57:68:65:74:ce:2f:86:70:98:1a:25:59:7a:d1:ee: b5:12:88:9d:b2:f6:41:3c:ec:b6:43:33:31:cc:be: fb:cc:af:d7:96:49:ce:47:d7:63:60:a7:50:03:f1: ee:a8:1f:78:78:b6:86:26:61:87:d0:48:93:9a:e9: 7f:37:b3:23:f2:29:9f:28:a8:e6:4d:9a:af:99:5e: a0:c9:7b:2b:8e:45:e6:5a:e3:2b:8f:4c:a7:4d:8d: 2e:f1:f3:16:69:b9:16:67:fb:2d:40:e5:6a:7a:d5: f8:07:7b:41:e0:02:c2:cc:bf:51:5b:e2:9c:a8:e0: 62:81:a8:49:27:84:9b:dd:0c:2f:50:63:29:11:35: 81:24:73:17:4d:c5:72:be:b3:d0:8d:8c:83:26:f5: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:47:85:0B:5B:2C:ED:49:60:E5:81:28:FF:77:9D:EE:64:3B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:98:33:17:c2:f8:e7:e5:31:a7:d6:63:b5:c1:ce:ca:ab:9c: 11:ff:8f:83:db:55:90:9e:e3:04:26:a2:0b:ac:1e:6c:04:4f: c6:1e:20:9c:fc:01:ad:ee:df:e8:45:da:aa:d4:d2:28:51:a1: c7:e5:03:67:3a:e3:0d:8c:01:d6:10:ac:be:81:b9:b6:a2:5b: e2:53:78:8a:79:13:a9:ce:22:92:36:4c:b2:be:c1:75:9f:8b: 65:95:3d:cb:54:84:b3:4b:68:3f:1c:de:d8:4b:69:43:66:a9: 06:27:a8:5b:77:a8:db:70:c6:03:53:0f:12:7b:f0:0a:06:6b: 5d:ec:2c:a6:dd:87:aa:b0:df:42:af:05:ac:35:64:51:09:5f: 9e:2b:5e:19:d1:28:46:9f:a3:33:a1:5f:24:0b:96:e3:06:72: b1:e5:98:e3:6f:bf:a2:3f:8b:a6:9c:e5:35:63:b6:a7:a3:8b: a7:b7:69:e6:45:d3:31:6d:28:95:ff:d2:34:45:7f:4a:a2:cc: f7:b7:e5:c6:47:1c:9e:e7:1a:3d:49:31:fd:d7:b0:78:fa:d8: 47:9c:27:bd:95:6a:b5:fa:bc:c4:5f:3e:e7:79:40:9d:f6:43: c6:5b:69:0a:44:40:9a:3d:c3:f3:82:a5:e4:6f:02:6d:68:5f: 38:18:32:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Yl5nFbpUt4n7CDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTIyM2Y0ZGMtMzZmMS00YTY0LTgzNDAtNWNhZWVjOTFjZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMmudQYWtIwz8iACLoy5B/vdw35LzuJbjtVA s1itAr7wkTFRbRbWLW0AOrUHfLfM7ScAVStikUZt5vDjZs4tH+qEx4u1DxUhCYty ReqOBnpE2fmm8stD95251FiY4z9O/NHsebfWmcRXaGV0zi+GcJgaJVl60e61Eoid svZBPOy2QzMxzL77zK/XlknOR9djYKdQA/HuqB94eLaGJmGH0EiTmul/N7Mj8imf KKjmTZqvmV6gyXsrjkXmWuMrj0ynTY0u8fMWabkWZ/stQOVqetX4B3tB4ALCzL9R W+KcqOBigahJJ4Sb3QwvUGMpETWBJHMXTcVyvrPQjYyDJvVkawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2BR4ULWyztSWDlgSj/d53uZDsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzAyMWQ5NTQtOWUwMi0z NjI4LTkyZjMtMzFmMTE5MTE5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6YMxfC+OflMafWY7XBzsqrnBH/j4PbVZCe4wQmogusHmwET8Ye IJz8Aa3u3+hF2qrU0ihRocflA2c64w2MAdYQrL6BubaiW+JTeIp5E6nOIpI2TLK+ wXWfi2WVPctUhLNLaD8c3thLaUNmqQYnqFt3qNtwxgNTDxJ78AoGa13sLKbdh6qw 30KvBaw1ZFEJX54rXhnRKEafozOhXyQLluMGcrHlmONvv6I/i6ac5TVjtqeji6e3 aeZF0zFtKJX/0jRFf0qizPe35cZHHJ7nGj1JMf3XsHj62EecJ72VarX6vMRfPud5 QJ32Q8ZbaQpEQJo9w/OCpeRvAm1oXzgYMkM= -----END CERTIFICATE-----Generated at Sun Oct 4 09:27:58 2026 by rpki-client