$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: BjQMwo8Gzo/A7gIsjxQCxnomAVCVPzHoWcTeoSImxSI= Subject key identifier: A1:8A:4F:00:F8:2C:17:3B:AC:A5:0D:E8:3C:06:8B:5C:26:3D:80:E1 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584F497648318CC80CAC4D855740 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:48:31:8c:c8:0c:ac:4d:85:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6df2d4fe-eb9f-44ff-8a3f-2e8d3cf93291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:0d:62:06:31:d3:42:c4:04:e4:b9:2c:80: 69:17:a5:be:76:81:c1:9d:4b:26:00:3d:a7:a1:4d: 42:ed:9a:ad:ad:da:9d:49:c3:5c:fd:64:09:e4:9d: 0a:4a:d0:93:fc:fc:3d:c2:fb:62:42:88:ad:92:33: 22:9f:41:0d:94:9c:af:44:78:24:b7:bb:41:f2:4c: 3f:cb:52:7e:c7:2d:a0:2f:0b:2a:a8:05:c0:11:33: 1c:17:8c:ff:31:85:09:91:ee:85:28:4a:6b:4c:d6: 4e:45:7d:11:db:94:0e:71:ed:04:60:fe:ff:ce:2c: cd:d8:4f:06:21:f1:f8:75:a9:61:bc:9a:29:f4:42: 3c:8c:6e:6e:9d:e8:36:9e:d5:f1:cd:db:c3:7b:66: b9:1d:88:a5:d7:98:a6:44:2a:13:4b:23:01:f4:bf: ef:42:36:85:79:82:95:ad:06:05:b5:0b:0e:a1:e7: da:85:72:ca:35:b2:14:3a:2b:06:8c:c0:28:55:ea: 42:6a:57:0a:9a:98:2e:7a:c7:24:90:93:ab:a8:eb: d4:af:d1:5e:49:74:ce:2d:c1:8b:c5:32:14:11:f0: 7b:df:c6:cc:30:f4:35:ad:f9:de:b3:e2:71:9b:21: b7:09:94:8b:35:4e:a1:53:8f:df:ca:5b:3f:7c:3d: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8A:4F:00:F8:2C:17:3B:AC:A5:0D:E8:3C:06:8B:5C:26:3D:80:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c3:87:01:84:da:9e:bf:7d:7a:e2:6c:f2:8b:6c:85:9a:32: 64:a4:99:49:7f:13:a4:30:c2:c0:fd:51:a1:7d:9a:97:79:85: c7:70:cd:eb:6f:1b:95:ea:19:28:8f:c6:6f:9b:c9:04:1a:5a: 43:7b:e0:0c:25:8e:0b:96:e3:d8:7b:85:1f:9b:fb:7a:96:a1: 68:a1:c7:70:5b:e9:97:91:ff:20:d9:00:fd:6c:64:fd:e9:ee: 89:39:4a:c1:6b:d9:97:70:61:6f:63:f9:96:4e:3e:06:a6:61: e8:bb:6c:ef:5b:e6:ab:aa:82:c9:7c:9b:81:95:fe:ab:67:5c: 24:6f:7a:4c:ca:a7:1b:e9:33:08:f5:71:59:6b:2b:57:30:83: b4:00:d8:65:7e:a8:07:08:d9:be:26:23:03:69:b2:7b:95:bc: 98:24:ec:35:eb:54:fa:e9:05:5b:77:ab:b9:31:0f:01:96:a6: 97:b4:44:d8:90:5c:78:f7:38:b4:58:3c:49:70:26:d3:01:20: b5:d0:cf:93:57:39:9f:3a:6d:9e:20:74:b9:0d:ea:d9:a1:e2: 12:fe:e1:e6:04:d5:d9:68:d9:48:0d:1c:f8:a8:15:0b:d3:1e: 54:94:6a:ae:10:34:2b:30:64:43:8e:7d:e9:fa:bc:40:7e:51: aa:c4:80:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdkgxjMgMrE2FV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmRmMmQ0ZmUtZWI5Zi00NGZmLThhM2YtMmU4ZDNjZjkzMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAcNYgYx00LEBOS5LIBpF6W+doHBnUsmAD2n oU1C7ZqtrdqdScNc/WQJ5J0KStCT/Pw9wvtiQoitkjMin0ENlJyvRHgkt7tB8kw/ y1J+xy2gLwsqqAXAETMcF4z/MYUJke6FKEprTNZORX0R25QOce0EYP7/zizN2E8G IfH4dalhvJop9EI8jG5uneg2ntXxzdvDe2a5HYil15imRCoTSyMB9L/vQjaFeYKV rQYFtQsOoefahXLKNbIUOisGjMAoVepCalcKmpguesckkJOrqOvUr9FeSXTOLcGL xTIUEfB738bMMPQ1rfnes+JxmyG3CZSLNU6hU4/fyls/fD0dLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKGKTwD4LBc7rKUN6DwGi1wmPYDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTDhwGE2p6/fXribPKLbIWaMmSkmUl/E6QwwsD9UaF9mpd5hcdw zetvG5XqGSiPxm+byQQaWkN74AwljguW49h7hR+b+3qWoWihx3Bb6ZeR/yDZAP1s ZP3p7ok5SsFr2ZdwYW9j+ZZOPgamYei7bO9b5quqgsl8m4GV/qtnXCRvekzKpxvp Mwj1cVlrK1cwg7QA2GV+qAcI2b4mIwNpsnuVvJgk7DXrVPrpBVt3q7kxDwGWppe0 RNiQXHj3OLRYPElwJtMBILXQz5NXOZ86bZ4gdLkN6tmh4hL+4eYE1dlo2UgNHPio FQvTHlSUaq4QNCswZEOOfen6vEB+UarEgG0= -----END CERTIFICATE-----Generated at Tue Sep 29 19:45:23 2026 by rpki-client