$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa File: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (raw, json) Hash identifier: tk3VtBjq1tgIeKYWqdjJh13HRheCqjjk6IkLyZ78kno= Subject key identifier: C4:D5:37:F5:6A:7E:8E:B2:DB:4C:F6:D9:DA:B3:3C:1E:65:53:79:B7 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584F45428CB9A84967C3613BE2A0 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 15147 IP address blocks: 2600:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:8c:b9:a8:49:67:c3:61:3b:e2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=8a14fcb8-f5dd-47ce-bd0e-ed63b61700a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:87:6e:c5:47:17:f0:5f:de:db:c9:be:b5: a1:13:0f:41:57:4d:72:3e:08:ce:f4:23:d5:e4:c5: f5:9b:e3:99:5f:83:4c:c5:25:66:b5:4d:76:5e:64: 27:76:bd:0f:4e:e4:17:82:a2:8b:28:d0:c2:e5:f1: 58:19:17:2e:87:0b:43:02:48:af:2f:74:e0:b9:4f: 92:18:75:44:f7:33:18:64:ff:76:4b:0a:60:1f:b9: fa:f2:e9:aa:56:3c:80:1e:c3:87:d4:88:31:10:61: 06:f0:57:28:63:ae:00:e7:51:ec:c5:d4:bc:b9:f6: 88:9b:de:7b:32:4d:f2:1a:28:8a:75:98:50:bd:d6: 6d:32:74:f9:89:dc:ee:87:3b:4f:f4:6f:55:35:2a: bc:b7:f0:c6:23:79:31:7e:f7:c7:3b:84:7f:09:5e: 7f:d4:54:d9:13:38:e0:80:e7:44:d2:6f:7f:fd:81: c0:38:18:a8:6c:38:00:4c:65:46:ca:3d:a6:90:da: cc:31:ee:d3:a1:64:ae:48:cd:a6:23:d7:7f:2b:21: 8d:fe:b1:e9:9c:23:2e:97:44:25:08:0b:b5:80:03: db:bd:2e:c0:23:28:d1:7c:2f:08:3f:53:9c:4c:4e: d8:74:a6:28:10:f4:14:70:b9:fe:d4:a6:a3:77:e6: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:37:F5:6A:7E:8E:B2:DB:4C:F6:D9:DA:B3:3C:1E:65:53:79:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:77:ec:91:63:bb:44:1a:8b:35:95:49:3a:9f:58:36:ea:4f: e8:7d:0e:7a:7b:bb:de:b1:f7:5e:3b:5d:f1:f3:83:3c:11:b4: d4:1f:af:6b:6e:c1:9b:d4:4f:05:72:72:6e:f2:d0:09:be:b1: 95:d0:da:83:e2:6f:61:18:70:66:6c:e3:8b:aa:0d:5c:e9:53: e9:d7:cd:dc:95:1e:84:27:3b:84:86:76:3d:40:c8:34:de:c0: 93:69:09:f0:c1:82:d1:9e:81:38:50:6f:80:e7:83:dc:e2:c4: a5:9a:20:23:aa:ab:59:b1:6e:f9:a2:5b:cf:7e:58:1e:a0:71: d4:c4:a5:82:34:41:5b:71:7f:25:f4:fc:bc:22:d4:63:18:69: 86:5d:1f:b2:92:7b:37:81:11:31:d1:ad:88:97:4d:e1:1f:88: b3:87:7a:a8:f9:a2:a6:25:c5:70:95:78:a5:9b:d7:eb:2b:22: ce:62:e5:33:f4:52:1c:a7:d5:4f:ff:f9:aa:70:15:b4:be:74: dd:65:68:b4:29:7b:a2:e2:b9:ab:97:bc:90:00:95:aa:1e:cb: 1e:20:90:ac:70:54:81:5d:b2:6a:10:8f:3c:19:02:e2:ac:b5: 9c:97:30:9b:4b:35:0a:e4:7d:52:07:23:ad:e5:b4:6b:51:b9: a0:1c:72:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9FQoy5qElnw2E74qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OGExNGZjYjgtZjVkZC00N2NlLWJkMGUtZWQ2M2I2MTcwMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgiHbsVHF/Bf3tvJvrWhEw9BV01yPgjO9CPV 5MX1m+OZX4NMxSVmtU12XmQndr0PTuQXgqKLKNDC5fFYGRcuhwtDAkivL3TguU+S GHVE9zMYZP92SwpgH7n68umqVjyAHsOH1IgxEGEG8FcoY64A51HsxdS8ufaIm957 Mk3yGiiKdZhQvdZtMnT5idzuhztP9G9VNSq8t/DGI3kxfvfHO4R/CV5/1FTZEzjg gOdE0m9//YHAOBiobDgATGVGyj2mkNrMMe7ToWSuSM2mI9d/KyGN/rHpnCMul0Ql CAu1gAPbvS7AIyjRfC8IP1OcTE7YdKYoEPQUcLn+1Kajd+Yl2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTVN/Vqfo6y20z22dqzPB5lU3m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNzExMDUzMjctODRkNS0z ZjZhLWJjYzgtZmZmN2YzMmFiOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/d+yRY7tEGos1lUk6n1g26k/ofQ56e7vesfdeO13x84M8EbTUH69r bsGb1E8FcnJu8tAJvrGV0NqD4m9hGHBmbOOLqg1c6VPp183clR6EJzuEhnY9QMg0 3sCTaQnwwYLRnoE4UG+A54Pc4sSlmiAjqqtZsW75olvPflgeoHHUxKWCNEFbcX8l 9Py8ItRjGGmGXR+ykns3gREx0a2Il03hH4izh3qo+aKmJcVwlXilm9frKyLOYuUz 9FIcp9VP//mqcBW0vnTdZWi0KXui4rmrl7yQAJWqHsseIJCscFSBXbJqEI88GQLi rLWclzCbSzUK5H1SByOt5bRrUbmgHHJo -----END CERTIFICATE-----Generated at Thu Sep 24 20:44:36 2026 by rpki-client