$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa File: 2689cc5e-73a4-3934-b73d-56b59b54c522.roa (raw, json) Hash identifier: Mlz13SZ1LVohW8uRLhEBrLhqUjqlTWroQIEPli1Zqzk= Subject key identifier: A8:EA:5E:3E:E9:B3:0A:93:A7:BE:77:A9:B3:1A:EC:1A:00:01:02:02 Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584F146797E0B0AB40EFFC3FC2E0 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 400339 IP address blocks: 2606:ab40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:e0:b0:ab:40:ef:fc:3f:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b41a187e-328f-45e7-9407-3d4be6b946a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:6d:2e:d0:e5:5d:17:f9:52:5f:b7:e5:65: ca:8d:76:95:65:cd:1d:0d:df:e6:6f:12:b9:6e:37: 57:60:f4:52:cc:7e:3d:61:40:75:70:11:0b:a9:fc: af:35:b4:d8:e0:5c:ea:6c:dd:07:83:32:dd:51:cf: 1e:6d:0f:51:35:0e:51:b7:c6:cd:6b:53:7c:e5:c2: 6b:d3:11:d1:dd:50:d0:70:a6:1d:4a:9f:43:39:74: 46:d7:f8:1d:70:17:b2:e1:43:06:1d:90:f1:ba:fb: 27:0d:4f:0f:55:78:2d:7e:dd:fb:be:d5:87:5d:1f: 35:b6:37:e7:a5:ea:0c:a1:cc:eb:44:6a:d8:78:5c: ac:b3:9c:80:5e:de:d3:cb:c2:88:01:b0:2e:60:a0: fc:af:bc:ac:e0:70:bd:78:79:67:d7:4a:26:a4:01: 37:5c:de:d0:cd:6c:38:34:24:72:b8:43:ca:03:43: 95:74:d5:73:78:14:ba:25:60:31:a9:90:53:6a:6c: 52:6c:8f:22:08:68:01:ab:57:67:59:b6:9d:f5:cd: 5d:fd:31:5b:24:4b:bb:e0:6a:2a:9a:03:d9:93:dc: 38:be:9a:14:7f:14:7d:f1:8c:7b:46:f5:12:87:08: 9c:7a:10:c5:a5:94:53:9c:d6:93:0e:fc:d1:2a:e5: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EA:5E:3E:E9:B3:0A:93:A7:BE:77:A9:B3:1A:EC:1A:00:01:02:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv6: 2606:ab40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:9b:15:a9:1b:24:58:96:3a:2f:7e:91:58:0e:89:66:d2:de: ca:25:29:e3:cd:2f:f2:78:e9:fb:63:67:83:d3:c9:78:42:cc: c5:86:2e:80:f9:12:94:17:6f:b5:32:7c:68:ed:8e:5b:6b:71: f6:3b:90:18:f6:db:11:86:7c:f4:5e:2b:d1:02:c3:83:79:29: 6a:a6:54:6e:dc:01:6b:bb:a2:16:88:83:90:30:71:b8:8e:9b: 3c:19:0e:b4:3b:1c:53:1e:6d:6a:cc:72:cc:0b:20:1e:b2:54: 05:9b:bc:af:01:5a:82:1b:6b:22:25:83:3d:2e:15:a6:94:be: 03:3b:75:0e:5a:c6:b6:01:8e:d5:78:e1:01:4f:40:99:5a:e8: 24:b7:d5:b2:58:e2:39:69:68:33:7d:24:d8:af:5c:11:a8:8c: e7:33:a2:24:8f:0d:f4:33:35:11:ec:6f:6f:ed:48:84:75:1b: 27:29:b4:45:e8:1f:fd:a4:f0:52:22:b7:58:bb:33:5c:2a:86: 66:33:2c:00:28:3f:f7:19:5c:4b:a4:e4:cf:b0:59:65:26:05: 58:8e:91:e0:d5:6d:39:43:56:d7:bc:b5:67:70:04:ce:78:97: f7:b3:6e:ca:1b:b0:35:44:1c:89:71:88:83:0a:24:10:7d:c1: b3:33:f2:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ5fgsKtA7/w/wuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjQxYTE4N2UtMzI4Zi00NWU3LTk0MDctM2Q0YmU2Yjk0NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ZtLtDlXRf5Ul+35WXKjXaVZc0dDd/mbxK5 bjdXYPRSzH49YUB1cBELqfyvNbTY4FzqbN0HgzLdUc8ebQ9RNQ5Rt8bNa1N85cJr 0xHR3VDQcKYdSp9DOXRG1/gdcBey4UMGHZDxuvsnDU8PVXgtft37vtWHXR81tjfn peoMoczrRGrYeFyss5yAXt7Ty8KIAbAuYKD8r7ys4HC9eHln10ompAE3XN7QzWw4 NCRyuEPKA0OVdNVzeBS6JWAxqZBTamxSbI8iCGgBq1dnWbad9c1d/TFbJEu74Goq mgPZk9w4vpoUfxR98Yx7RvUShwicehDFpZRTnNaTDvzRKuWt+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKjqXj7pswqTp753qbMa7BoAAQICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvMjY4OWNjNWUtNzNhNC0z OTM0LWI3M2QtNTZiNTliNTRjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgarQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVmxWpGyRYljovfpFYDolm0t7KJSnjzS/yeOn7Y2eD08l4QszFhi6A +RKUF2+1Mnxo7Y5ba3H2O5AY9tsRhnz0XivRAsODeSlqplRu3AFru6IWiIOQMHG4 jps8GQ60OxxTHm1qzHLMCyAeslQFm7yvAVqCG2siJYM9LhWmlL4DO3UOWsa2AY7V eOEBT0CZWugkt9WyWOI5aWgzfSTYr1wRqIznM6Ikjw30MzUR7G9v7UiEdRsnKbRF 6B/9pPBSIrdYuzNcKoZmMywAKD/3GVxLpOTPsFllJgVYjpHg1W05Q1bXvLVncATO eJf3s27KG7A1RByJcYiDCiQQfcGzM/Li -----END CERTIFICATE-----Generated at Sun Oct 4 18:50:25 2026 by rpki-client