$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa File: 18a7b006-bca2-30b0-b588-6f3437d24a3c.roa (raw, json) Hash identifier: YtNtfFNQ/8KL6BvbFrb/reEfvdYtIyVsusmSy/VD6cs= Subject key identifier: 5F:D1:F6:93:ED:04:7C:0C:52:7A:C5:AB:A2:A3:83:81:29:B1:A9:18 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7971B1272A06B8E4AC280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 2606:3600:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:97:1b:12:72:a0:6b:8e:4a:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=de6eb652-594f-4020-b173-d0b00b350abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:63:33:43:10:6f:f5:12:f7:b6:82:d9:b6: 5c:22:7b:2a:dc:ee:37:a3:11:24:80:b8:bd:51:06: fb:15:13:fe:32:4e:22:64:f6:13:21:a2:55:a0:0f: 21:bc:78:eb:ae:37:6f:34:f0:54:c9:ed:1c:46:ea: 2e:a0:d6:a0:db:2c:ca:3c:e1:98:5c:55:c8:0a:87: 14:c1:f7:4e:92:19:5e:bf:5e:a7:de:aa:8b:78:40: b9:bf:4b:0a:6c:3d:89:8a:44:00:32:0d:10:b8:d9: 0d:2f:e7:77:49:2d:0a:63:99:78:f2:5a:0c:d9:f6: 16:d9:1c:03:19:87:6b:89:29:a4:77:02:00:ed:fa: 3e:1f:35:0e:0e:26:6e:3c:dc:75:6b:a4:f4:4e:3e: 61:8f:63:94:12:e9:db:74:e1:a0:16:f5:67:11:9a: 6f:0e:19:79:90:55:5d:fa:9e:86:ad:1c:75:78:b6: 57:60:4e:b3:f1:e1:4c:a6:5e:98:ac:40:e4:4d:0e: 48:04:38:cf:59:4e:73:3c:e8:c5:4b:bc:11:57:d2: 7a:c2:67:fa:b6:1f:b9:2c:f2:73:1f:fc:22:37:cd: 09:06:73:b6:4c:1d:91:fd:f2:64:4d:b7:ae:fa:51: 20:36:97:44:fb:45:0f:31:58:0e:a2:ce:4d:27:20: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D1:F6:93:ED:04:7C:0C:52:7A:C5:AB:A2:A3:83:81:29:B1:A9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:130::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:1f:80:49:b6:27:8e:26:fe:29:ec:1e:56:36:f2:f4:94: 9d:93:ee:ca:c8:e6:f2:ad:fc:6f:29:b7:97:21:b6:d8:6a:4a: 12:14:e7:53:53:3a:95:b3:46:02:66:fb:ad:fe:c5:3a:44:c4: 30:f0:a2:a0:8a:df:78:8c:ad:e8:46:5d:a6:e1:77:f3:77:cb: 18:85:a7:bd:bb:d9:56:cf:a8:ee:cd:57:7c:8d:6e:a3:34:86: 10:30:0b:28:91:fe:1d:5f:bd:87:f6:0c:f1:bf:70:86:f7:d7: c5:0c:ad:cf:40:6a:f2:6d:1c:3c:f4:1b:ae:b2:c7:a4:ab:17: 02:0c:8c:17:62:f5:ea:0e:03:28:ae:af:c0:b6:6e:5e:eb:ba: 55:de:13:77:e9:85:2e:6e:75:27:e5:27:e7:56:c5:f2:9a:08: cd:9a:65:f8:6c:33:a2:d1:10:1c:5c:63:9d:81:d9:ee:0e:a0: 19:6a:23:03:7a:eb:dc:f7:32:2f:d3:8b:43:ef:9a:04:b3:4e: 8d:8c:23:bb:94:80:52:ab:5e:11:31:1a:5b:fa:90:b0:55:90: 34:e3:59:63:0a:8d:69:64:b2:76:d7:cf:24:1e:69:f3:ca:34: b4:b4:2f:55:6e:2e:cd:45:14:aa:cc:5c:73:d8:b2:7f:93:4d: cb:25:97:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp5cbEnKga45KwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGU2ZWI2NTItNTk0Zi00MDIwLWIxNzMtZDBiMDBiMzUwYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBBjM0MQb/US97aC2bZcInsq3O43oxEkgLi9 UQb7FRP+Mk4iZPYTIaJVoA8hvHjrrjdvNPBUye0cRuouoNag2yzKPOGYXFXICocU wfdOkhlev16n3qqLeEC5v0sKbD2JikQAMg0QuNkNL+d3SS0KY5l48loM2fYW2RwD GYdriSmkdwIA7fo+HzUODiZuPNx1a6T0Tj5hj2OUEunbdOGgFvVnEZpvDhl5kFVd +p6GrRx1eLZXYE6z8eFMpl6YrEDkTQ5IBDjPWU5zPOjFS7wRV9J6wmf6th+5LPJz H/wiN80JBnO2TB2R/fJkTbeu+lEgNpdE+0UPMVgOos5NJyDYkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF/R9pPtBHwMUnrFq6Kjg4EpsakYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMThhN2IwMDYtYmNhMi0z MGIwLWI1ODgtNmYzNDM3ZDI0YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0VH4BJtieOJv4p7B5WNvL0lJ2T7srI5vKt/G8pt5chtthqShIU 51NTOpWzRgJm+63+xTpExDDwoqCK33iMrehGXabhd/N3yxiFp7272VbPqO7NV3yN bqM0hhAwCyiR/h1fvYf2DPG/cIb318UMrc9AavJtHDz0G66yx6SrFwIMjBdi9eoO Ayiur8C2bl7rulXeE3fphS5udSflJ+dWxfKaCM2aZfhsM6LREBxcY52B2e4OoBlq IwN669z3Mi/Ti0PvmgSzTo2MI7uUgFKrXhExGlv6kLBVkDTjWWMKjWlksnbXzyQe afPKNLS0L1VuLs1FFKrMXHPYsn+TTcsll1o= -----END CERTIFICATE-----Generated at Mon Sep 28 14:52:03 2026 by rpki-client