$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa File: 3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa (raw, json) Hash identifier: VKFj0+cc8Y+YKBr+wItcTHO5Xy25Ny+Qh5rJtren12c= Subject key identifier: 37:5B:B7:6F:B8:66:A1:FE:7D:52:48:9F:79:33:D1:10:6C:9D:0F:67 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4972E0D717A860DEF26137C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 2607:f750:9300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e0:d7:17:a8:60:de:f2:61:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d0e2126-0e0d-4e14-8a29-665e594c3964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:45:8e:aa:42:f4:34:2b:0f:9f:b8:7c:0f: ec:9c:66:cd:21:e7:9e:9f:d4:2b:29:31:18:e4:f6: 6f:c0:e9:19:97:50:c6:7b:7d:a9:73:d1:e0:a2:97: 63:30:b6:c2:4e:23:8e:dd:ab:f6:6d:68:85:21:1a: ed:2d:8e:f3:a3:1c:98:d6:13:07:a4:0f:ac:23:9a: b1:8a:dc:f0:65:37:4a:f1:77:69:89:fd:a2:5a:6f: 79:4e:3e:5b:7d:c8:ef:ca:ab:6f:5e:06:45:3d:46: f6:54:ab:8c:bf:7d:cb:d0:23:d1:d4:38:83:d4:3b: ec:7e:f1:78:93:7d:c5:cd:7e:9b:9b:e8:74:a6:02: 28:20:79:c7:a6:34:78:47:d7:e9:6e:70:d8:32:e9: d2:ab:66:84:19:ef:aa:f0:b1:c3:c3:6b:90:43:e9: b9:b3:f9:fe:98:93:c1:84:fa:eb:0a:e9:1a:b6:17: 7d:30:81:ef:2a:97:33:de:9e:d1:ee:e3:e4:b5:b5: 85:57:c9:e6:42:18:9b:c4:0d:8a:3b:bf:59:e1:03: a0:0b:a7:cc:6f:56:8b:6f:db:44:91:03:d5:c8:52: a3:95:e1:19:27:0f:9c:0b:08:29:2d:a0:eb:db:cb: 8a:62:a1:76:35:ce:28:ed:c7:c6:51:5d:4f:21:1a: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5B:B7:6F:B8:66:A1:FE:7D:52:48:9F:79:33:D1:10:6C:9D:0F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f750:9300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:60:7c:5d:a3:b6:f6:e2:5f:fa:69:b2:96:76:d8:96:16:ee: 04:8c:b4:70:89:f1:6b:78:2e:c9:47:36:ef:ef:79:55:21:a0: c5:44:be:5e:5b:82:4b:c6:a4:0c:49:5a:5d:11:11:8f:74:b0: c4:7c:c2:0b:45:5b:16:f7:d3:f8:ae:3f:f8:79:4f:99:96:fe: cc:a0:4d:23:cb:53:be:66:9e:04:91:71:0f:10:f7:2b:67:43: 78:f1:0e:67:50:a2:e9:24:94:91:53:b0:4c:9b:ae:12:4b:c6: f3:f8:7d:b9:aa:f2:fd:df:a1:57:a1:05:4c:81:51:e7:bf:a6: 9c:1e:57:bb:d6:21:5e:5d:7a:ff:48:4c:b6:14:9d:91:50:91: 0b:c1:f0:61:ca:d1:37:6c:3e:f1:77:14:71:8b:ce:ff:3c:04: e1:99:4d:69:9a:a9:2a:67:e6:19:55:e5:74:42:f8:25:2f:c9: ef:6c:d0:2d:47:16:55:11:e2:c9:3f:1e:80:31:9a:ba:69:51: b2:ab:72:b0:e2:47:cc:73:26:e7:50:e8:e1:c3:80:f9:81:8f: a0:92:44:93:98:8d:77:dd:fb:3d:06:aa:66:0c:92:6d:d9:5d: 20:f7:11:d0:48:37:6a:0b:d5:26:34:68:0a:d4:f8:ab:87:61: ac:21:15:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcuDXF6hg3vJhN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQwZTIxMjYtMGUwZC00ZTE0LThhMjktNjY1ZTU5NGMzOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZlFjqpC9DQrD5+4fA/snGbNIeeen9QrKTEY 5PZvwOkZl1DGe32pc9HgopdjMLbCTiOO3av2bWiFIRrtLY7zoxyY1hMHpA+sI5qx itzwZTdK8Xdpif2iWm95Tj5bfcjvyqtvXgZFPUb2VKuMv33L0CPR1DiD1DvsfvF4 k33FzX6bm+h0pgIoIHnHpjR4R9fpbnDYMunSq2aEGe+q8LHDw2uQQ+m5s/n+mJPB hPrrCukathd9MIHvKpcz3p7R7uPktbWFV8nmQhibxA2KO79Z4QOgC6fMb1aLb9tE kQPVyFKjleEZJw+cCwgpLaDr28uKYqF2Nc4o7cfGUV1PIRqJeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDdbt2+4ZqH+fVJIn3kz0RBsnQ9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzk2NGYyZTYtZmZlMS0z NDY3LTgzOWEtZmEwOWYxOTA0YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UJMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW2B8XaO29uJf+mmylnbYlhbuBIy0cInxa3guyUc27+95VSGgxUS+ XluCS8akDElaXRERj3SwxHzCC0VbFvfT+K4/+HlPmZb+zKBNI8tTvmaeBJFxDxD3 K2dDePEOZ1Ci6SSUkVOwTJuuEkvG8/h9uary/d+hV6EFTIFR57+mnB5Xu9YhXl16 /0hMthSdkVCRC8HwYcrRN2w+8XcUcYvO/zwE4ZlNaZqpKmfmGVXldEL4JS/J72zQ LUcWVRHiyT8egDGaumlRsqtysOJHzHMm51Do4cOA+YGPoJJEk5iNd937PQaqZgyS bdldIPcR0Eg3agvVJjRoCtT4q4dhrCEVyg== -----END CERTIFICATE-----Generated at Sat Sep 26 15:43:52 2026 by rpki-client