$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa File: bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json) Hash identifier: vO+Q37Jop7W3m2WEikopneG8NtAFs37gRrmobYDToGU= Subject key identifier: 49:45:09:3E:AD:76:FA:28:99:07:60:5D:C9:DE:22:AE:E3:75:31:ED Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584F4975479DDD8E1EE0F89408C0 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31972 IP address blocks: 2607:8680::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:47:9d:dd:8e:1e:e0:f8:94:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7dde95e3-ec05-4ec2-8e15-61e66062f3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:35:de:29:f9:09:2d:39:09:ac:46:f3:c2: 41:1e:16:27:c2:f5:27:dc:10:98:a2:c4:b3:43:de: 51:ea:d6:2b:f9:3a:5d:73:ed:91:b5:4f:6c:98:6d: 4c:95:ac:3d:63:cb:78:4d:21:34:d2:79:ce:af:57: a4:6b:33:c9:cc:d4:33:d2:bf:b1:c7:7e:2a:40:22: 5c:04:44:d5:e2:6a:64:5b:f6:48:78:ed:33:2f:03: 4d:fa:e4:31:9c:67:5d:80:18:83:99:8f:b4:4c:c2: 8e:f6:30:ae:01:26:92:da:4a:60:df:70:8c:a8:a0: d6:6e:f5:73:f7:a8:1c:30:65:bb:f0:5e:d3:c8:68: f4:e0:6c:26:7d:f3:a4:36:e9:40:20:e6:c0:33:52: bb:a2:6b:62:c6:98:65:fc:dc:c0:93:26:9e:4c:d0: 78:c5:99:d4:31:e0:d1:eb:2e:91:3e:73:09:a5:c5: b1:f9:21:f8:98:11:57:5f:8c:79:b6:58:fd:82:e9: ad:29:12:02:c3:c3:b2:b7:e1:e7:16:a3:be:8b:9a: 66:d6:d7:ba:a6:26:34:b8:2b:75:cf:b9:bc:28:36: bb:02:42:ca:d0:83:bf:b1:ae:14:e7:cf:b2:51:0a: b5:76:15:37:e7:f6:dd:d2:eb:ad:7c:4d:55:bc:61: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:09:3E:AD:76:FA:28:99:07:60:5D:C9:DE:22:AE:E3:75:31:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv6: 2607:8680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:3e:0b:1c:e6:66:ca:98:7c:df:00:4e:fa:e3:71:77:ea:56: dd:8e:40:ff:22:c6:6f:6f:19:bc:40:b4:82:c0:5b:ec:3f:06: e7:ad:ed:a9:30:96:cb:4a:91:43:4f:2a:43:48:24:2f:ed:78: 4f:27:fe:37:9f:62:8b:27:4b:d0:3f:60:b9:03:5d:1b:d3:d5: f4:0c:f2:9a:50:3c:95:00:ac:a3:83:22:7d:29:b1:78:86:4e: c7:9a:21:f3:e9:0f:eb:86:45:fa:18:c9:b1:35:ee:0a:e7:0c: 99:17:35:22:e9:86:ba:28:fc:ce:57:03:0a:05:b1:e2:1c:59: ac:73:1a:8f:f1:c9:16:03:91:31:d1:bf:73:3f:05:0f:32:86: 4a:94:3e:31:68:3f:24:40:ad:5e:5b:84:85:f3:b7:b8:d7:ad: d1:62:41:22:9b:70:2e:be:f3:fa:b8:da:b7:dc:1e:3a:f0:82: a2:8a:8c:d5:ec:a8:9b:f4:2e:be:1e:df:58:29:b8:f4:f1:18: 48:ed:b2:26:d0:96:3e:d5:19:c5:4a:e9:51:1b:72:e0:6d:e1: a9:9c:55:62:fc:5c:5f:67:14:0b:40:bf:b7:a0:90:ea:c4:84: 1b:c8:ec:d8:2f:b8:d1:09:b9:e0:91:ec:33:d5:a6:bf:65:d8: 97:f2:11:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdUed3Y4e4PiUCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RkZTk1ZTMtZWMwNS00ZWMyLThlMTUtNjFlNjYwNjJmM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyQ13in5CS05CaxG88JBHhYnwvUn3BCYosSz Q95R6tYr+Tpdc+2RtU9smG1Mlaw9Y8t4TSE00nnOr1ekazPJzNQz0r+xx34qQCJc BETV4mpkW/ZIeO0zLwNN+uQxnGddgBiDmY+0TMKO9jCuASaS2kpg33CMqKDWbvVz 96gcMGW78F7TyGj04GwmffOkNulAIObAM1K7omtixphl/NzAkyaeTNB4xZnUMeDR 6y6RPnMJpcWx+SH4mBFXX4x5tlj9gumtKRICw8Oyt+HnFqO+i5pm1te6piY0uCt1 z7m8KDa7AkLK0IO/sa4U58+yUQq1dhU35/bd0uutfE1VvGEgTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFElFCT6tdvoomQdgXcneIq7jdTHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvYmQ4YmVjNmYtMWE3MC0z Mzc4LTkxYjUtY2IyMWM1NTMzZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeGgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC+Pgsc5mbKmHzfAE7643F36lbdjkD/IsZvbxm8QLSCwFvsPwbnre2p MJbLSpFDTypDSCQv7XhPJ/43n2KLJ0vQP2C5A10b09X0DPKaUDyVAKyjgyJ9KbF4 hk7HmiHz6Q/rhkX6GMmxNe4K5wyZFzUi6Ya6KPzOVwMKBbHiHFmscxqP8ckWA5Ex 0b9zPwUPMoZKlD4xaD8kQK1eW4SF87e4163RYkEim3AuvvP6uNq33B468IKiiozV 7Kib9C6+Ht9YKbj08RhI7bIm0JY+1RnFSulRG3LgbeGpnFVi/FxfZxQLQL+3oJDq xIQbyOzYL7jRCbngkewz1aa/ZdiX8hEv -----END CERTIFICATE-----Generated at Tue Sep 29 04:07:16 2026 by rpki-client