$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa File: 09168c7f-7549-3339-b932-1c95b7c42c0d.roa (raw, json) Hash identifier: BzG25VQSP5CjT/FGBodL7ofLusIEcfPBChuY9O0+pR4= Subject key identifier: D5:D8:B1:D2:80:F0:13:00:E8:F8:4E:2A:89:B7:EC:DD:C2:7C:19:D7 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584F34827907DC4BCD971C48B080 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 14090 IP address blocks: 2607:faa8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:79:07:dc:4b:cd:97:1c:48:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=f133e4cf-756a-4aa3-be0e-e7f21674d868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:30:51:9d:22:fc:be:b5:11:93:88:f3:13:59: 4f:bc:32:be:05:42:b9:c7:69:9d:36:ae:e7:31:85: 42:b5:5c:da:73:3b:ca:31:66:34:ca:d1:dd:db:65: 4a:a9:08:51:ce:51:56:eb:7a:93:21:a0:e0:be:f4: 3d:5e:34:77:a0:3c:74:c7:a1:c8:08:09:d6:36:b0: c6:9a:f5:61:c1:96:22:bc:c9:98:dd:4c:66:e2:a4: 4f:e3:a8:99:6f:91:df:65:6d:b3:9e:c9:8f:f0:73: 84:c3:c8:31:48:f1:e4:c0:a7:6e:06:ba:9e:90:a9: b6:eb:3f:ae:09:70:d7:75:58:b3:36:c5:5b:f0:e7: fd:0a:80:70:4a:be:ea:81:73:6f:b7:f9:b3:91:15: 60:f5:a1:2a:af:9c:62:73:3d:7d:7d:ef:63:22:17: 14:1b:bd:20:77:a3:0e:d4:5e:cf:2a:a5:f0:7b:a6: b0:da:63:23:00:75:80:2b:de:50:ba:ba:a5:a6:53: 55:86:03:a9:6e:bd:47:7e:6d:8e:3a:1e:4e:b3:a1: 11:aa:e7:d6:d8:a9:66:e5:e6:0c:58:a4:68:41:bd: a5:ce:3b:0d:57:e2:f9:21:29:7e:15:71:4d:df:3d: 94:9c:b4:e6:00:b0:a5:ac:48:0e:54:69:cc:20:6a: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:B1:D2:80:F0:13:00:E8:F8:4E:2A:89:B7:EC:DD:C2:7C:19:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv6: 2607:faa8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:72:7f:4d:38:6a:ec:95:db:9e:2e:e3:e7:88:53:b1:a0:a9: 13:82:8d:26:15:48:53:5e:1f:c2:36:ae:34:dd:8a:f7:e4:a6: 8b:32:3c:d9:9a:73:c4:c6:e5:32:02:24:ab:82:2f:3f:29:2c: 47:f7:24:7a:bd:22:15:af:89:19:b4:9a:e6:ac:78:f7:9c:c0: 77:81:89:4f:a0:7c:87:e7:c1:9c:4c:84:cc:8c:17:21:3e:7e: 58:47:ea:2b:60:09:90:32:88:66:1d:78:13:53:9f:34:58:55: a8:75:e8:e0:56:35:0d:2c:66:47:8a:0d:40:83:ce:e2:f2:10: 3a:a3:b2:35:13:3a:b2:d0:7d:c0:de:fc:5b:29:72:56:7c:1c: 66:00:46:dd:eb:d0:22:1a:ac:d6:75:94:69:7d:5c:7d:61:23: 20:b3:c4:79:5b:92:a5:12:63:2e:cd:5a:86:1b:15:c3:52:c2: 7d:ab:f8:34:35:81:d3:d3:cf:ae:77:6e:b6:0a:d2:d6:79:29: 7f:80:ec:e2:f1:2c:b7:e0:4f:e8:83:d6:cc:e7:97:ee:39:e6: c2:bb:5b:54:49:01:70:02:3a:cf:ad:d4:05:7f:fc:ac:af:87: 97:ee:4e:b8:c1:ad:37:4c:84:b6:10:85:7c:e4:dd:19:3f:ce: df:09:af:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE80gnkH3EvNlxxIsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjEzM2U0Y2YtNzU2YS00YWEzLWJlMGUtZTdmMjE2NzRkODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzBRnSL8vrURk4jzE1lPvDK+BUK5x2mdNq7n MYVCtVzaczvKMWY0ytHd22VKqQhRzlFW63qTIaDgvvQ9XjR3oDx0x6HICAnWNrDG mvVhwZYivMmY3Uxm4qRP46iZb5HfZW2znsmP8HOEw8gxSPHkwKduBrqekKm26z+u CXDXdVizNsVb8Of9CoBwSr7qgXNvt/mzkRVg9aEqr5xicz19fe9jIhcUG70gd6MO 1F7PKqXwe6aw2mMjAHWAK95QurqlplNVhgOpbr1Hfm2OOh5Os6ERqufW2Klm5eYM WKRoQb2lzjsNV+L5ISl+FXFN3z2UnLTmALClrEgOVGnMIGqnwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNXYsdKA8BMA6PhOKom37N3CfBnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMDkxNjhjN2YtNzU0OS0z MzM5LWI5MzItMWM5NWI3YzQyYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6qDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBicn9NOGrsldueLuPniFOxoKkTgo0mFUhTXh/CNq403Yr35KaLMjzZ mnPExuUyAiSrgi8/KSxH9yR6vSIVr4kZtJrmrHj3nMB3gYlPoHyH58GcTITMjBch Pn5YR+orYAmQMohmHXgTU580WFWodejgVjUNLGZHig1Ag87i8hA6o7I1Ezqy0H3A 3vxbKXJWfBxmAEbd69AiGqzWdZRpfVx9YSMgs8R5W5KlEmMuzVqGGxXDUsJ9q/g0 NYHT08+ud262CtLWeSl/gOzi8Sy34E/og9bM55fuOebCu1tUSQFwAjrPrdQFf/ys r4eX7k64wa03TIS2EIV85N0ZP87fCa8M -----END CERTIFICATE-----Generated at Thu Oct 1 13:35:32 2026 by rpki-client