$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa File: c212f2f7-10a0-305d-a60a-eca4e1430a94.roa (raw, json) Hash identifier: 87kcuCgaHFdPPeE/5upR43Ub7gX/aJgbQcSNO7d7deE= Subject key identifier: 6C:C2:23:89:2F:84:2E:7D:69:95:BE:BE:14:72:DA:C7:9A:37:11:7B Certificate issuer: /CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Certificate serial: 010D0C9F4328584F49760277468C8D676C369D80 Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11287 IP address blocks: 2607:1d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:02:77:46:8c:8d:67:6c:36:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0009a8d8-19ec-428e-a1ea-590deb683868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:07:23:71:c5:16:36:9d:ea:1d:74:4b:9b: 83:a3:ee:89:d1:eb:f0:3c:2c:34:5b:b9:18:43:a8: b5:bc:f2:dd:2c:fa:c1:0d:49:1f:5f:0c:c8:07:6a: 45:8a:86:db:22:78:7e:97:3d:c8:e4:de:3e:be:4b: 42:89:3b:7a:e1:9d:69:95:c5:22:46:47:1d:05:29: ec:57:44:d6:d1:ab:68:7b:c5:40:ed:95:15:39:d1: d8:d5:35:09:14:2c:01:cb:18:1e:50:6d:76:96:48: 03:da:2f:ed:e0:9d:d8:e0:0c:cb:e7:39:90:10:65: e2:43:6e:ad:eb:d5:e5:ca:3c:49:1f:2e:b9:ae:ee: ed:1c:c1:c6:bc:43:08:81:8c:83:16:3a:84:6a:04: 25:5f:7f:a2:39:ef:12:4c:63:4d:08:59:88:d5:22: 2d:6b:9c:9a:70:49:cc:11:d2:38:5f:97:ac:29:3b: d2:36:f0:5a:cc:d6:ce:33:32:2c:06:ca:70:f2:24: 75:0c:84:cb:10:e3:0d:dd:d4:b8:7d:48:8e:b7:b5: 9b:a7:2f:1b:c5:27:0b:68:65:71:d5:b0:e8:eb:20: 4d:e0:21:c8:a4:15:ae:0e:f9:0c:4e:cd:d5:69:5c: 14:df:af:28:9d:90:08:76:7c:41:bd:41:60:83:c0: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:23:89:2F:84:2E:7D:69:95:BE:BE:14:72:DA:C7:9A:37:11:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl X509v3 Authority Key Identifier: keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer sbgp-ipAddrBlock: critical IPv6: 2607:1d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4f:2c:43:85:e3:b3:3f:25:94:95:ff:bb:a2:6c:32:c5:73: 29:98:81:2e:23:ef:4c:10:e8:d3:9a:63:a0:37:b7:c9:1e:35: 20:bb:65:1e:6a:ed:50:c0:d1:5e:6f:fe:f2:99:c5:0b:91:17: 8f:2d:e2:b9:55:e8:32:59:cf:38:32:81:f4:e2:00:b4:ad:24: 33:da:e9:74:b3:75:1f:c6:af:f7:ff:f7:fe:0c:c6:f7:8d:62: ff:36:cc:31:62:26:cf:88:db:cb:38:dd:51:f8:e7:a6:33:a5: 0c:75:b1:cf:78:b1:76:77:24:f2:88:4d:5a:98:a0:b1:b0:6e: ee:e6:47:b8:39:d3:85:a1:54:2f:b4:07:a0:4c:d7:53:85:36: df:02:60:91:24:33:01:ef:b7:db:da:2b:6e:23:c4:b8:54:59: f2:0f:d0:ee:f4:8f:62:86:f8:93:b2:9e:be:43:43:64:85:88: 17:c6:cd:4d:44:31:90:f4:59:2d:05:6a:58:87:4e:46:e1:53: 6e:02:84:bf:62:01:73:18:ac:a2:62:c9:c6:58:74:85:6c:69: 61:04:52:2c:e9:68:94:81:93:90:c4:b5:d1:f9:e3:53:11:f4: 64:53:d8:d8:b7:b0:a7:97:96:ca:0d:45:bb:79:da:b5:bb:7e: dd:e3:30:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdgJ3RoyNZ2w2nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkMmIzYzQtYTY0Yy00YWZkLWIwZGYtMTAzMzYxMzM5 NTUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAwOWE4ZDgtMTllYy00MjhlLWExZWEtNTkwZGViNjgzODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWsHI3HFFjad6h10S5uDo+6J0evwPCw0W7kY Q6i1vPLdLPrBDUkfXwzIB2pFiobbInh+lz3I5N4+vktCiTt64Z1plcUiRkcdBSns V0TW0atoe8VA7ZUVOdHY1TUJFCwByxgeUG12lkgD2i/t4J3Y4AzL5zmQEGXiQ26t 69XlyjxJHy65ru7tHMHGvEMIgYyDFjqEagQlX3+iOe8STGNNCFmI1SIta5yacEnM EdI4X5esKTvSNvBazNbOMzIsBspw8iR1DITLEOMN3dS4fUiOt7Wbpy8bxScLaGVx 1bDo6yBN4CHIpBWuDvkMTs3VaVwU368onZAIdnxBvUFgg8A9PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGzCI4kvhC59aZW+vhRy2seaNxF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQy YjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMzNjEzMzk1NTAvYzIxMmYyZjctMTBhMC0z MDVkLWE2MGEtZWNhNGUxNDMwYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGFkMmIzYzQtYTY0Yy00YWZkLWIw ZGYtMTAzMzYxMzM5NTUwLzBhZDJiM2M0LWE2NGMtNGFmZC1iMGRmLTEwMzM2MTMz OTU1MC5jcmwwHwYDVR0jBBgwFoAUuN7Bw2RS8EIH2z6EpDX5BcG/O24wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQyYjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMz NjEzMzk1NTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcdgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyTyxDheOzPyWUlf+7omwyxXMpmIEuI+9MEOjTmmOgN7fJHjUgu2Ue au1QwNFeb/7ymcULkRePLeK5VegyWc84MoH04gC0rSQz2ul0s3Ufxq/3//f+DMb3 jWL/NswxYibPiNvLON1R+OemM6UMdbHPeLF2dyTyiE1amKCxsG7u5ke4OdOFoVQv tAegTNdThTbfAmCRJDMB77fb2ituI8S4VFnyD9Du9I9ihviTsp6+Q0NkhYgXxs1N RDGQ9FktBWpYh05G4VNuAoS/YgFzGKyiYsnGWHSFbGlhBFIs6WiUgZOQxLXR+eNT EfRkU9jYt7Cnl5bKDUW7edq1u37d4zCL -----END CERTIFICATE-----Generated at Sun Sep 27 10:07:05 2026 by rpki-client