$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa File: c299288c-7614-30cd-a6e7-c56fc746d67e.roa (raw, json) Hash identifier: QsnBfcI8Of1gVfYjeta6pYFO0ji0J3Zg1e3IAYiEt+k= Subject key identifier: F4:82:D0:71:0B:99:12:29:23:17:19:73:3C:BA:1A:F4:37:A0:FD:FE Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4F0819E522A36C049A579680 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 33322 IP address blocks: 2607:fbb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:19:e5:22:a3:6c:04:9a:57:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=811afcb8-a2cc-48c6-94e8-c963248817f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:90:62:7e:16:66:3d:0b:dc:5d:71:e1:03: 17:8e:66:21:79:05:8b:0f:f2:71:fa:7b:8e:c9:99: aa:e4:e0:65:db:55:12:5c:3f:21:fd:cd:f6:e4:b6: 7a:c3:0c:6a:28:2e:3b:0f:db:60:ad:22:d0:74:be: ee:15:20:25:f2:04:3e:34:ec:80:45:c5:72:b8:bf: 2a:8d:1c:04:c1:6d:8e:92:ad:b3:09:5d:05:ed:ea: a0:8b:99:d3:68:68:c2:f4:f6:ed:4b:18:40:bf:ac: 3e:a3:62:32:43:1a:a2:be:1d:9f:f0:50:9d:0d:52: 41:04:31:0d:e7:14:90:c3:fb:09:83:44:69:9e:3e: ee:3d:af:29:24:9a:17:9d:f2:9f:8f:07:49:72:f8: 57:12:5b:37:8a:30:35:20:7f:f7:ec:02:a9:fb:89: 3d:5d:9c:93:7e:87:3d:f5:7e:35:53:14:de:08:3b: a2:19:03:02:60:f2:d9:9a:1e:ab:84:25:0f:e4:b2: 4f:b8:e1:ae:2c:3b:8f:b4:42:e6:9c:ae:97:b8:91: 15:98:06:a6:86:dc:53:b0:de:e5:d8:76:e7:7d:51: d9:67:f5:76:35:de:67:3b:5c:65:2c:5f:bd:e1:bc: 9d:b6:0f:73:7e:ce:ea:2e:23:47:27:c2:89:c0:2b: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:82:D0:71:0B:99:12:29:23:17:19:73:3C:BA:1A:F4:37:A0:FD:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbb0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4b:4c:c7:c6:af:81:12:d3:da:76:1c:21:91:5e:86:73:0f: 51:eb:89:a0:72:1c:21:f2:e6:cc:be:42:24:ae:2c:79:8b:65: 65:a8:a4:c4:44:17:15:df:d8:2e:ff:7f:9f:9e:70:9a:d1:b3: 0c:cb:43:ad:af:8f:62:d1:22:a1:45:ad:34:98:68:e7:f8:f5: 00:38:5c:3a:7e:58:ce:5a:41:10:92:c2:60:17:09:35:ed:bf: 48:1b:a1:b3:26:72:bb:3d:b4:87:8b:35:f1:a3:9e:39:ed:a8: 6a:76:be:f1:ae:ed:05:d7:3f:63:72:5e:a7:a6:8a:c1:e3:65: 40:67:1c:df:54:49:00:12:d7:25:8f:72:11:78:0e:6a:4f:82: 39:3f:66:e3:8b:e8:05:5f:d5:38:bd:63:e8:e4:c5:0c:aa:0d: 2b:fa:83:f5:82:5d:eb:e5:54:0c:25:4c:f9:a3:72:61:52:3a: 5b:71:6f:3a:a1:12:31:9a:4f:5e:89:c4:ea:04:cd:75:e3:ff: e8:6e:1b:57:7a:04:da:df:bb:ce:a6:b9:1a:a7:ee:e5:2e:61: 76:8c:c9:07:64:42:cb:33:1d:0d:43:61:79:71:54:d1:fc:18: 5b:95:71:f3:a1:19:d5:56:c3:f4:75:b2:35:c9:8e:d6:c0:0f: 56:66:48:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9PCBnlIqNsBJpXloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ODExYWZjYjgtYTJjYy00OGM2LTk0ZTgtYzk2MzI0ODgxN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkSQYn4WZj0L3F1x4QMXjmYheQWLD/Jx+nuO yZmq5OBl21USXD8h/c325LZ6wwxqKC47D9tgrSLQdL7uFSAl8gQ+NOyARcVyuL8q jRwEwW2Okq2zCV0F7eqgi5nTaGjC9PbtSxhAv6w+o2IyQxqivh2f8FCdDVJBBDEN 5xSQw/sJg0Rpnj7uPa8pJJoXnfKfjwdJcvhXEls3ijA1IH/37AKp+4k9XZyTfoc9 9X41UxTeCDuiGQMCYPLZmh6rhCUP5LJPuOGuLDuPtELmnK6XuJEVmAamhtxTsN7l 2HbnfVHZZ/V2Nd5nO1xlLF+94bydtg9zfs7qLiNHJ8KJwCvm5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPSC0HELmRIpIxcZczy6GvQ3oP3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvYzI5OTI4OGMtNzYxNC0z MGNkLWE2ZTctYzU2ZmM3NDZkNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNS0zHxq+BEtPadhwhkV6Gcw9R64mgchwh8ubMvkIkrix5i2VlqKTE RBcV39gu/3+fnnCa0bMMy0Otr49i0SKhRa00mGjn+PUAOFw6fljOWkEQksJgFwk1 7b9IG6GzJnK7PbSHizXxo5457ahqdr7xru0F1z9jcl6nporB42VAZxzfVEkAEtcl j3IReA5qT4I5P2bji+gFX9U4vWPo5MUMqg0r+oP1gl3r5VQMJUz5o3JhUjpbcW86 oRIxmk9eicTqBM114//obhtXegTa37vOprkap+7lLmF2jMkHZELLMx0NQ2F5cVTR /BhblXHzoRnVVsP0dbI1yY7WwA9WZkgC -----END CERTIFICATE-----Generated at Sun Oct 4 13:44:53 2026 by rpki-client