$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c99417e9-dd9f-3363-bd31-4f2d2668c994.roa File: c99417e9-dd9f-3363-bd31-4f2d2668c994.roa (raw, json) Hash identifier: FRejeXEBZx2pLzCDmZdHGJ4iYxxE7yKuhxMMrG0JGjY= Subject key identifier: 95:AE:51:75:4A:D0:AC:60:8A:82:81:D1:B2:C6:45:46:D7:41:26:D4 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584F40122F49E8ED4D26FFE82780 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c99417e9-dd9f-3363-bd31-4f2d2668c994.roa Signing time: Mon 21 Sep 2026 16:23:49 +0000 ROA not before: Mon 21 Sep 2026 16:23:49 +0000 ROA not after: Sun 20 Dec 2026 17:23:49 +0000 asID: 6327 IP address blocks: 2607:ffb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:12:2f:49:e8:ed:4d:26:ff:e8:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Sep 21 16:23:49 2026 GMT Not After : Dec 20 17:23:49 2026 GMT Subject: CN=c2ff6cbd-1b99-4a67-9c61-8bffa3db11ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:fa:62:6c:4f:18:a7:57:7c:53:c1:79:cd: 27:f5:99:d7:15:c5:4b:e9:42:72:1c:f6:9b:16:5a: 68:c1:46:70:68:33:aa:6f:1b:40:ad:ef:b9:6f:02: 76:ab:21:39:86:5b:a9:97:e3:ee:11:97:aa:d6:e6: ee:7e:2e:e6:21:90:e6:da:5d:cc:a6:27:0c:43:e6: 45:9d:96:3f:e6:45:d0:fd:36:52:af:cf:66:38:a3: 4f:7d:df:7a:ad:a0:f0:e5:32:ba:96:3a:d0:71:99: 45:e4:9f:52:ab:b6:94:2e:ae:36:f0:4f:67:98:36: 08:e4:17:d2:b3:05:98:75:ea:4d:52:7b:5b:fc:52: 2f:e5:a2:94:0e:7c:4f:d8:45:3a:14:7c:96:93:b5: ce:f1:87:ed:0f:66:63:23:3a:02:51:70:8c:57:79: 73:90:b5:c3:dc:db:bb:b0:79:ae:2a:43:32:fc:ca: e0:c1:05:cc:f4:0d:a8:b9:be:91:52:fc:0b:9a:e4: b9:0d:99:26:96:07:fe:98:f0:f3:68:bb:6e:d1:cf: 9a:2b:ab:0c:f4:77:cf:c2:eb:84:d1:61:79:03:03: ba:e9:b4:84:17:b6:26:68:19:8a:ab:8d:7c:42:d1: 7a:6b:5f:15:6b:19:fe:47:dc:4c:76:e8:3a:ee:66: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:51:75:4A:D0:AC:60:8A:82:81:D1:B2:C6:45:46:D7:41:26:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c99417e9-dd9f-3363-bd31-4f2d2668c994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv6: 2607:ffb0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5e:4e:e0:69:1b:f7:83:ba:2d:c1:a7:65:ee:f0:90:7c:1f: 15:51:f6:29:a2:46:23:b0:41:77:05:81:d8:34:a0:28:6a:ff: 7e:9c:e2:d3:51:89:0a:fc:3e:b1:4e:79:2f:61:1e:f1:9b:a2: 4c:db:5a:da:4d:15:08:41:93:cd:43:86:39:38:16:c7:07:ff: 01:b6:56:0e:3c:4f:0b:4d:ae:5e:bf:87:77:ae:5d:6d:03:bd: 25:e7:3a:c7:b1:95:7d:61:84:68:ad:67:5f:ae:70:da:d0:4f: 38:23:01:ae:31:f1:02:a1:c1:37:1f:08:e1:f5:99:0f:bc:9b: fa:1e:6a:ee:2e:0a:3c:f6:04:c7:28:ce:4e:7b:97:2e:41:35: c0:dc:dc:23:e5:0e:1a:60:d2:99:1b:22:f0:f6:e7:b7:e9:37: 9e:41:c8:7b:cc:fe:bf:0f:ee:04:5e:b0:a4:c3:fe:20:b6:bd: 88:86:7a:82:29:01:e0:84:93:85:c0:c3:89:47:bd:7f:bf:1f: bf:c0:77:99:7b:34:14:ce:2e:c7:45:1c:d1:b2:a4:9b:00:da: 4f:03:b6:13:c1:89:92:8c:4e:90:db:07:cc:45:f3:c5:80:4d: b0:27:fa:e4:47:a8:24:9a:80:c1:18:f7:10:21:4c:c8:28:73: f4:fb:e1:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9AEi9J6O1NJv/oJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDkyMTE2MjM0OVoXDTI2MTIyMDE3MjM0OVowLzEtMCsGA1UEAxMk YzJmZjZjYmQtMWI5OS00YTY3LTljNjEtOGJmZmEzZGIxMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1D6YmxPGKdXfFPBec0n9ZnXFcVL6UJyHPab FlpowUZwaDOqbxtAre+5bwJ2qyE5hlupl+PuEZeq1ubufi7mIZDm2l3MpicMQ+ZF nZY/5kXQ/TZSr89mOKNPfd96raDw5TK6ljrQcZlF5J9Sq7aULq428E9nmDYI5BfS swWYdepNUntb/FIv5aKUDnxP2EU6FHyWk7XO8YftD2ZjIzoCUXCMV3lzkLXD3Nu7 sHmuKkMy/MrgwQXM9A2oub6RUvwLmuS5DZkmlgf+mPDzaLtu0c+aK6sM9HfPwuuE 0WF5AwO66bSEF7YmaBmKq418QtF6a18Vaxn+R9xMdug67mbHyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJWuUXVK0KxgioKB0bLGRUbXQSbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYzk5NDE3ZTktZGQ5Zi0z MzYzLWJkMzEtNGYyZDI2NjhjOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf/sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgXk7gaRv3g7otwadl7vCQfB8VUfYpokYjsEF3BYHYNKAoav9+nOLT UYkK/D6xTnkvYR7xm6JM21raTRUIQZPNQ4Y5OBbHB/8BtlYOPE8LTa5ev4d3rl1t A70l5zrHsZV9YYRorWdfrnDa0E84IwGuMfECocE3Hwjh9ZkPvJv6HmruLgo89gTH KM5Oe5cuQTXA3Nwj5Q4aYNKZGyLw9ue36TeeQch7zP6/D+4EXrCkw/4gtr2IhnqC KQHghJOFwMOJR71/vx+/wHeZezQUzi7HRRzRsqSbANpPA7YTwYmSjE6Q2wfMRfPF gE2wJ/rkR6gkmoDBGPcQIUzIKHP0++FZ -----END CERTIFICATE-----Generated at Sat Oct 3 17:48:54 2026 by rpki-client