$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa File: 40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa (raw, json) Hash identifier: lvApWJ+1SlTZ2ipEbQOisSFxuLCX+X7+DnhcAZWyQYA= Subject key identifier: C7:8E:1E:4C:A2:8C:87:43:3A:6F:1C:04:59:F0:A8:54:2C:D6:09:95 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584F13023709357E3B78EFFFF080 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 271 IP address blocks: 2607:f8f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:37:09:35:7e:3b:78:ef:ff:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=ec0639b5-858a-4cae-9ead-738773495bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:13:df:88:87:18:20:64:c8:16:85:c4:35:b3: e2:fd:bb:90:d8:d5:5d:e2:1d:af:d3:1b:80:f5:21: 5d:bb:cc:32:56:1e:b1:d6:e6:01:17:5f:57:2b:45: 4f:8f:9a:c9:b2:6a:1f:10:db:20:fb:e3:a8:94:8b: e7:48:2f:07:8d:4d:24:37:2d:f4:e1:26:13:33:99: bc:b9:67:90:35:8b:88:59:fa:cf:54:6c:a8:9c:d1: b5:8b:3e:37:38:82:eb:fd:9a:6e:14:b7:58:45:c6: 81:6e:0a:cf:5e:99:7e:46:0b:31:69:13:61:60:67: 7c:19:22:61:f6:a8:a8:6d:ec:68:16:69:62:ad:bb: 7e:27:0e:9e:bb:56:b4:54:d5:f7:8c:5b:75:27:2e: 76:5d:b2:1e:de:9d:65:94:1b:7e:8a:98:65:cb:21: 11:b5:00:3c:b0:63:29:3b:13:f5:5d:88:82:b1:fc: d7:e1:bb:2e:16:a0:64:63:7f:51:04:b9:93:ac:39: b3:f7:8a:1f:26:93:b9:46:4a:ba:2a:6b:5f:5a:a0: d7:7e:59:05:f6:86:5e:27:18:a9:8c:74:64:aa:16: 74:ea:77:d5:3c:7b:76:bc:40:73:3f:50:ba:ec:ed: 75:e5:06:7b:65:91:9f:0c:03:5d:29:81:96:53:42: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8E:1E:4C:A2:8C:87:43:3A:6F:1C:04:59:F0:A8:54:2C:D6:09:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2b:16:20:01:aa:2a:0a:d3:d1:ef:7b:24:ac:49:9c:9c:93: 81:71:25:a2:2f:17:ed:5f:11:2f:71:05:d5:c1:cc:8e:02:3a: c2:da:d3:04:8d:cf:45:15:03:11:7c:cb:51:cd:64:05:4a:b1: b1:b0:11:d3:ac:e7:5f:4f:8b:75:fd:27:fd:86:00:8c:cc:b9: 32:0a:c9:62:47:38:b5:5f:10:df:4d:7c:f7:46:08:31:07:d3: d1:78:70:84:b0:74:3f:5a:ee:42:4c:52:72:57:24:3d:3a:3d: 65:fe:9f:4a:0b:56:38:b8:2a:e0:f1:08:68:e8:99:d6:b7:be: e4:d3:36:97:37:f9:6e:94:bd:48:a3:22:48:38:f1:27:87:a7: a2:95:68:50:3f:21:6a:d1:5a:6c:de:6a:b5:94:42:df:1d:02: 4d:42:41:3e:4c:8c:92:a7:17:65:22:0e:4c:c5:41:1f:4f:6c: d0:f4:83:d2:27:ef:c0:7c:97:9e:7b:03:aa:3a:16:f4:39:97: 4c:ec:3c:4f:8c:5e:7b:f7:84:4c:e2:e5:11:38:97:ea:aa:aa: 78:92:c1:72:08:82:e4:c2:29:9d:64:ce:84:39:0d:67:2d:29: 04:9d:cb:26:c9:50:92:75:27:f2:04:de:f4:68:6d:5d:ce:20: b3:0e:ff:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAjcJNX47eO//8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZWMwNjM5YjUtODU4YS00Y2FlLTllYWQtNzM4NzczNDk1YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghPfiIcYIGTIFoXENbPi/buQ2NVd4h2v0xuA 9SFdu8wyVh6x1uYBF19XK0VPj5rJsmofENsg++OolIvnSC8HjU0kNy304SYTM5m8 uWeQNYuIWfrPVGyonNG1iz43OILr/ZpuFLdYRcaBbgrPXpl+RgsxaRNhYGd8GSJh 9qiobexoFmlirbt+Jw6eu1a0VNX3jFt1Jy52XbIe3p1llBt+iphlyyERtQA8sGMp OxP1XYiCsfzX4bsuFqBkY39RBLmTrDmz94ofJpO5Rkq6KmtfWqDXflkF9oZeJxip jHRkqhZ06nfVPHt2vEBzP1C67O115QZ7ZZGfDANdKYGWU0JxlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMeOHkyijIdDOm8cBFnwqFQs1gmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNDBjMGFmZDYtNmJhMi0z ZTcyLTg1NTctYjlkMGVhOTk1ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48ABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkrFiABqioK09HveySsSZyck4FxJaIvF+1fES9xBdXBzI4COsLa 0wSNz0UVAxF8y1HNZAVKsbGwEdOs519Pi3X9J/2GAIzMuTIKyWJHOLVfEN9NfPdG CDEH09F4cISwdD9a7kJMUnJXJD06PWX+n0oLVji4KuDxCGjomda3vuTTNpc3+W6U vUijIkg48SeHp6KVaFA/IWrRWmzearWUQt8dAk1CQT5MjJKnF2UiDkzFQR9PbND0 g9In78B8l557A6o6FvQ5l0zsPE+MXnv3hEzi5RE4l+qqqniSwXIIguTCKZ1kzoQ5 DWctKQSdyybJUJJ1J/IE3vRobV3OILMO/zk= -----END CERTIFICATE-----Generated at Sat Sep 26 11:33:10 2026 by rpki-client