$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa File: 5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa (raw, json) Hash identifier: q+vua0WmxDcj4EduYW/N+xDSEzDuKFsmv7bGmG1wmEE= Subject key identifier: C2:21:6A:6C:9E:76:EC:02:A3:1E:B9:FC:BD:26:A5:6F:27:0D:B9:BC Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584F093CEAF5F0F2A26368062F40 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 4226 IP address blocks: 2604:f587:8000::/34 maxlen: 34 2604:f587:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:ea:f5:f0:f2:a2:63:68:06:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=e18d3445-c9f7-4d44-995f-a9d9574c1db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:0b:5e:7a:c3:2a:ee:f1:11:f0:1f:e2:8e: 0e:ba:d9:6c:bf:90:7e:94:1a:81:1d:d5:e3:cc:4e: fd:a6:00:61:83:47:77:b1:4d:c3:20:57:6c:55:cc: 6d:a4:c9:a5:b9:de:74:dc:0e:81:a9:e4:d9:10:27: 12:c9:79:5a:ed:ff:f8:45:4c:d4:9c:88:f6:43:1c: 72:de:28:17:46:b9:e4:81:a8:00:56:eb:85:cd:0a: e7:d2:a3:51:6d:e5:d1:7e:32:b5:45:3c:b5:96:d1: 62:d6:4f:76:e7:3f:ec:02:e8:96:35:cf:77:a2:af: 8c:8d:a0:40:1c:ff:f4:86:42:12:7f:d1:f1:10:7d: 59:9f:e1:6e:c7:1a:d9:8a:3e:66:49:55:d0:9f:a3: dc:36:70:55:89:3d:50:7d:db:3b:77:89:ea:ed:04: 67:34:5d:28:a1:bc:e0:ef:67:9e:c7:b7:eb:c5:a0: 31:24:63:93:f3:f9:91:7d:5d:a4:34:b0:ee:99:2e: cc:f9:60:73:75:9d:1b:02:b1:b8:92:61:ca:6d:04: ec:05:dc:83:da:54:e6:0c:34:81:1b:ed:29:77:84: e7:d1:e4:7c:93:d4:b3:30:4c:26:a9:53:a8:5c:16: a5:49:06:b3:54:c5:fc:2a:9e:d5:f3:28:8d:0a:86: 86:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:6A:6C:9E:76:EC:02:A3:1E:B9:FC:BD:26:A5:6F:27:0D:B9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f587:8000::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a8:af:c7:62:72:3b:bd:6f:91:9c:29:bf:72:df:8f:89:13: da:77:27:95:d1:24:66:e0:87:a2:d5:3c:3c:51:23:03:e0:b3: 85:e9:87:73:71:ae:c1:58:fe:c4:80:90:df:69:47:01:e5:30: df:84:f9:8e:9c:fb:3e:1b:92:b2:0b:52:2e:4f:33:f5:a8:80: 41:c4:03:4e:7d:55:5d:03:f0:9d:d7:b0:60:64:83:0d:b8:94: 97:f9:0c:ab:be:38:0c:de:a9:a7:d8:4b:9f:0f:36:a0:c6:a6: 93:c1:0b:c3:8a:45:40:8c:01:9e:13:4a:05:f4:08:3f:15:47: 7c:cb:5e:07:f5:82:20:8f:1b:25:bd:3a:bf:95:78:02:ee:59: ed:03:29:35:4e:35:b3:f5:41:da:0b:63:b2:8d:0f:57:a0:a1: c2:e7:3f:18:84:97:57:0d:02:99:f8:52:e0:5b:bf:17:35:be: 71:31:ec:e0:9a:cc:cd:51:23:11:ee:48:ff:b6:fc:e2:1b:de: 3c:31:55:bd:1a:e9:54:98:a2:5e:09:7c:f3:7e:9a:46:b1:57: d0:92:92:25:d5:53:95:0b:f8:3d:99:d0:cc:f6:d0:16:14:06: dd:1a:14:fb:46:94:7c:35:97:8b:fd:4f:97:d6:55:63:d1:55: a4:22:81:5d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPOr18PKiY2gGL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTE4ZDM0NDUtYzlmNy00ZDQ0LTk5NWYtYTlkOTU3NGMxZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMYLXnrDKu7xEfAf4o4Outlsv5B+lBqBHdXj zE79pgBhg0d3sU3DIFdsVcxtpMmlud503A6BqeTZECcSyXla7f/4RUzUnIj2Qxxy 3igXRrnkgagAVuuFzQrn0qNRbeXRfjK1RTy1ltFi1k925z/sAuiWNc93oq+MjaBA HP/0hkISf9HxEH1Zn+FuxxrZij5mSVXQn6PcNnBViT1Qfds7d4nq7QRnNF0oobzg 72eex7frxaAxJGOT8/mRfV2kNLDumS7M+WBzdZ0bArG4kmHKbQTsBdyD2lTmDDSB G+0pd4Tn0eR8k9SzMEwmqVOoXBalSQazVMX8Kp7V8yiNCoaGrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMIhamyeduwCox65/L0mpW8nDbm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNWU0ZGJjMGMtMDMyMS0z MmQ1LWE5MjQtMGI3YzA3YjU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgT1h4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbqivx2JyO71vkZwpv3Lfj4kT2ncnldEkZuCHotU8PFEjA+CzhemH c3GuwVj+xICQ32lHAeUw34T5jpz7PhuSsgtSLk8z9aiAQcQDTn1VXQPwndewYGSD DbiUl/kMq744DN6pp9hLnw82oMamk8ELw4pFQIwBnhNKBfQIPxVHfMteB/WCII8b Jb06v5V4Au5Z7QMpNU41s/VB2gtjso0PV6Chwuc/GISXVw0CmfhS4Fu/FzW+cTHs 4JrMzVEjEe5I/7b84hvePDFVvRrpVJiiXgl8836aRrFX0JKSJdVTlQv4PZnQzPbQ FhQG3RoU+0aUfDWXi/1Pl9ZVY9FVpCKBXQ== -----END CERTIFICATE-----Generated at Wed Sep 23 01:49:35 2026 by rpki-client