$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa File: f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json) Hash identifier: RW5f8IAj4Pb+9Wx51cdzm4lkJmbyTR120kGbj/Fif/w= Subject key identifier: 34:E8:8C:F2:FD:C2:9D:1A:5E:67:11:C7:C9:DA:0D:00:22:DD:E1:EE Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F4328584F49756128AEC5846F29923C80 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 2620:10f:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:61:28:ae:c5:84:6f:29:92:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d375c9d-74a4-48de-897e-96c03da1da02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:49:89:b5:97:11:9d:52:07:eb:aa:e1:0d: 3c:21:49:f3:3c:77:b9:f4:16:9a:8c:b0:67:19:e4: a4:c3:fd:89:5b:67:33:a0:8f:74:59:ff:9f:06:c2: 89:72:cd:12:76:f2:3b:9c:d0:20:1e:51:56:4f:e8: ce:e7:98:30:fa:4e:cb:60:92:1d:d0:4e:29:ba:cc: 4b:cf:34:13:e0:1a:d0:10:f1:94:81:59:4b:30:5a: 33:a1:3b:0f:9b:39:b3:ea:73:43:3e:94:f6:60:2a: a8:b3:26:d5:e3:16:42:df:8b:23:de:ef:d4:ae:e9: 0d:61:9b:90:01:5d:e3:67:ed:7d:0c:d5:6f:e1:05: 7c:1c:3d:9f:82:af:74:71:6f:e7:12:36:8e:c2:d6: ea:38:6b:82:34:a3:a5:66:0e:8b:2c:d9:c5:49:fd: d9:c7:c1:62:51:ae:90:1a:84:9c:2d:04:27:9c:b5: f8:fe:3e:01:a3:9b:cb:70:0f:5c:76:d6:3e:9e:7d: 92:e1:68:09:7c:2a:34:9c:69:60:c7:ec:c7:8d:0a: 81:45:0a:59:cb:f8:b1:b2:68:ed:04:69:d1:56:9b: 64:04:a0:64:0b:e4:45:8b:e7:a2:4c:5b:b0:0b:0a: 28:b6:45:53:b0:76:b0:a9:bd:ee:5d:da:de:a6:99: 26:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E8:8C:F2:FD:C2:9D:1A:5E:67:11:C7:C9:DA:0D:00:22:DD:E1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fa:99:98:74:29:8f:c3:f6:b5:8a:e0:6d:99:a7:67:5b:88: 67:74:0b:71:d6:ad:ca:87:a5:1b:d1:f3:21:2b:10:87:31:87: c7:2e:42:cb:bb:64:9b:d0:60:77:de:95:81:11:95:15:3b:1f: f9:10:69:bd:f4:04:6d:74:03:eb:c5:95:da:b3:60:27:12:fa: e8:2f:97:98:77:b2:c7:24:ed:eb:56:51:4f:34:82:4b:55:5f: c9:4a:35:0b:80:08:5f:d0:79:eb:12:53:34:a7:a2:fd:bb:a4: d9:c1:7f:bb:55:18:5a:9f:31:e2:b1:86:d8:c2:20:67:80:b0: 96:3b:cc:41:3f:a8:c7:a2:35:f2:73:8c:c6:90:50:76:3f:f8: 7e:a8:8b:1a:01:14:d0:ee:f4:17:29:7e:26:31:a6:f3:45:e4: 51:95:7c:a0:ec:18:6a:b6:c6:c2:1d:61:4f:9b:d6:34:4c:6b: b6:42:bb:8e:e6:f1:78:3d:70:d0:6b:f4:7f:8e:4b:11:eb:1c: bc:23:8f:66:22:15:58:10:f1:41:c9:11:30:c6:dc:45:f6:fb: 72:ae:e8:82:45:7b:33:9e:10:0b:ba:8e:4b:9e:3f:7c:2e:10: b7:1c:86:12:bb:3d:5b:3b:9f:85:14:16:6e:64:38:e8:87:24: 23:0e:f7:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdWEorsWEbymSPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQzNzVjOWQtNzRhNC00OGRlLTg5N2UtOTZjMDNkYTFkYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHBJibWXEZ1SB+uq4Q08IUnzPHe59BaajLBn GeSkw/2JW2czoI90Wf+fBsKJcs0SdvI7nNAgHlFWT+jO55gw+k7LYJId0E4pusxL zzQT4BrQEPGUgVlLMFozoTsPmzmz6nNDPpT2YCqosybV4xZC34sj3u/UrukNYZuQ AV3jZ+19DNVv4QV8HD2fgq90cW/nEjaOwtbqOGuCNKOlZg6LLNnFSf3Zx8FiUa6Q GoScLQQnnLX4/j4Bo5vLcA9cdtY+nn2S4WgJfCo0nGlgx+zHjQqBRQpZy/ixsmjt BGnRVptkBKBkC+RFi+eiTFuwCwootkVTsHawqb3uXdreppkmyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDTojPL9wp0aXmcRx8naDQAi3eHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvZjM0ZTcwZWItZjUxMS0z NzhkLWE4ZjktMDM3YWViYmM1NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABD7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANPqZmHQpj8P2tYrgbZmnZ1uIZ3QLcdatyoelG9HzISsQhzGHxy5C y7tkm9Bgd96VgRGVFTsf+RBpvfQEbXQD68WV2rNgJxL66C+XmHeyxyTt61ZRTzSC S1VfyUo1C4AIX9B56xJTNKei/buk2cF/u1UYWp8x4rGG2MIgZ4CwljvMQT+ox6I1 8nOMxpBQdj/4fqiLGgEU0O70Fyl+JjGm80XkUZV8oOwYarbGwh1hT5vWNExrtkK7 jubxeD1w0Gv0f45LEescvCOPZiIVWBDxQckRMMbcRfb7cq7ogkV7M54QC7qOS54/ fC4QtxyGErs9WzufhRQWbmQ46IckIw73sg== -----END CERTIFICATE-----Generated at Mon Sep 28 10:12:59 2026 by rpki-client