$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5b71540c-cc32-3573-9a1b-1f71e1d0c89d.roa File: 5b71540c-cc32-3573-9a1b-1f71e1d0c89d.roa (raw, json) Hash identifier: sOKu5z/z7X/utRxBn/hUXiX9Da5o6uRQC+b2yq+22/s= Subject key identifier: B3:0E:38:14:A0:25:4B:A4:CA:BB:29:38:A9:9F:6D:68:C3:6A:8E:81 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584F1E2CEDD3C5D0694726D74240 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5b71540c-cc32-3573-9a1b-1f71e1d0c89d.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 271 IP address blocks: 2607:f8f0:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:ed:d3:c5:d0:69:47:26:d7:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=4bf15207-a662-4e62-8a02-86ba8a5e1e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:7b:fa:b6:2b:a9:5b:c8:3b:2f:ae:b3:f6: 23:7d:50:17:45:f9:55:51:29:cd:9e:98:9f:96:71: f1:ef:f1:db:26:85:07:ed:cb:1d:5d:e3:24:ad:29: 33:8a:31:e2:be:75:65:32:85:65:34:b9:ed:3b:ac: bd:98:40:93:46:64:06:2d:e7:5e:2b:91:b7:97:ef: 21:ea:46:00:f2:91:c2:df:d2:b9:f8:d3:bf:17:d5: a4:cb:5e:02:9c:88:a8:22:2d:da:27:09:a1:b4:4e: ce:45:82:ce:e9:d8:28:f1:53:21:19:fe:59:c2:ca: 2b:28:89:ce:c6:da:35:5a:bc:e3:8b:8b:9f:3c:1e: 94:69:a6:78:f0:e1:3a:75:ec:80:93:0f:21:87:ed: e4:a0:86:1b:d9:03:72:ec:e3:13:8b:1f:f7:1c:f6: a0:31:01:dd:c9:63:f6:39:cc:d3:09:db:b7:01:8c: b1:48:9f:e0:3f:c0:06:f9:c1:30:11:2e:f1:65:9c: 89:03:65:10:4a:c1:6d:48:d1:4f:70:d5:4a:3e:b0: c3:0a:c1:03:1f:d7:f0:b7:63:d0:d2:00:ab:33:ae: 1f:69:87:60:98:23:54:61:4c:81:5f:f2:06:81:05: a7:dd:fe:04:c7:79:60:a8:a2:a3:79:74:c8:83:69: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0E:38:14:A0:25:4B:A4:CA:BB:29:38:A9:9F:6D:68:C3:6A:8E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/5b71540c-cc32-3573-9a1b-1f71e1d0c89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cf:86:20:9c:e8:20:65:08:5c:4c:e5:f3:94:47:62:aa:ef: 90:e4:8e:b0:ee:20:2f:a5:2c:4a:ba:f4:41:45:95:33:ce:88: c9:17:9d:21:8a:63:bc:dd:80:1e:69:6b:d5:9e:f9:ef:9c:61: 7d:92:b6:33:d9:6f:32:a7:74:f4:49:0f:c9:54:f0:8f:97:a8: 46:99:bb:61:fe:89:f7:82:b1:3b:50:ae:42:b0:ed:ef:61:c9: 51:8d:b7:92:8d:23:40:fd:99:e2:eb:78:7d:3a:95:75:5c:02: 6b:ed:36:64:84:2b:31:5e:bf:21:26:eb:00:44:7c:24:87:bd: 26:ef:0a:7d:a7:4f:68:a9:77:ff:0a:fe:91:e0:62:85:4d:56: 94:46:69:21:24:b8:1d:25:95:26:fc:4e:d6:e6:87:fa:84:de: fa:6a:48:19:65:43:c8:4b:3b:e6:b9:98:76:0e:84:c8:4a:66: 21:cd:65:29:fe:7f:ae:8a:72:77:a3:2a:15:3b:c8:00:3f:d1: 29:f4:de:a3:c9:8f:75:12:a5:74:10:c0:c7:44:fc:ab:45:37: d2:1a:8b:a8:57:f5:d8:99:f3:63:95:fd:0b:c8:c3:6b:cd:61: 9b:e5:e7:c3:09:bd:03:17:94:90:be:59:c3:49:ab:b3:43:87: e9:7e:fe:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8eLO3TxdBpRybXQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk NGJmMTUyMDctYTY2Mi00ZTYyLThhMDItODZiYThhNWUxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLh7+rYrqVvIOy+us/YjfVAXRflVUSnNnpif lnHx7/HbJoUH7csdXeMkrSkzijHivnVlMoVlNLntO6y9mECTRmQGLedeK5G3l+8h 6kYA8pHC39K5+NO/F9Wky14CnIioIi3aJwmhtE7ORYLO6dgo8VMhGf5ZwsorKInO xto1Wrzji4ufPB6UaaZ48OE6deyAkw8hh+3koIYb2QNy7OMTix/3HPagMQHdyWP2 OczTCdu3AYyxSJ/gP8AG+cEwES7xZZyJA2UQSsFtSNFPcNVKPrDDCsEDH9fwt2PQ 0gCrM64faYdgmCNUYUyBX/IGgQWn3f4Ex3lgqKKjeXTIg2kQrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMOOBSgJUukyrspOKmfbWjDao6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNWI3MTU0MGMtY2MzMi0z NTczLTlhMWItMWY3MWUxZDBjODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELPhiCc6CBlCFxM5fOUR2Kq75DkjrDuIC+lLEq69EFFlTPOiMkX nSGKY7zdgB5pa9We+e+cYX2StjPZbzKndPRJD8lU8I+XqEaZu2H+ifeCsTtQrkKw 7e9hyVGNt5KNI0D9meLreH06lXVcAmvtNmSEKzFevyEm6wBEfCSHvSbvCn2nT2ip d/8K/pHgYoVNVpRGaSEkuB0llSb8Ttbmh/qE3vpqSBllQ8hLO+a5mHYOhMhKZiHN ZSn+f66KcnejKhU7yAA/0Sn03qPJj3USpXQQwMdE/KtFN9Iai6hX9diZ82OV/QvI w2vNYZvl58MJvQMXlJC+WcNJq7NDh+l+/uA= -----END CERTIFICATE-----Generated at Sun Sep 27 01:15:45 2026 by rpki-client