$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa File: b640e40a-1d4d-3423-99a0-815a476ab16e.roa (raw, json) Hash identifier: Y4BSfSwsiaBE/aw2vHskD0rV1jDbNAulr9BycQdaWjI= Subject key identifier: EB:A3:3C:DC:D1:8A:5D:9C:C8:7F:9E:9D:1A:5D:FA:5A:A5:D2:E9:C7 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584F4973B70A3F0B97C63A3820C0 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14230 IP address blocks: 2604:9b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b7:0a:3f:0b:97:c6:3a:38:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=12ff1c8a-6b9c-44dd-ad4a-afb8d73bfbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:c1:f2:88:4c:3c:3e:fe:2d:9b:45:8e:ea: ca:18:f5:21:fc:0c:22:32:6f:c5:c1:84:3b:47:92: a5:29:21:1c:b6:bc:4d:1d:28:1b:5e:98:5d:8f:b4: 66:a2:f8:3a:4e:db:82:46:12:98:6d:5a:5c:79:8d: 68:40:2a:69:6e:63:d4:9a:19:35:59:f2:a7:7b:dc: ca:78:f3:e7:60:25:1a:37:32:de:3c:98:7d:e3:e9: f7:11:bb:c4:73:3b:9b:b9:96:44:b9:9f:68:9d:30: ad:87:65:1b:7a:71:4f:a2:f5:31:92:f9:01:ec:1d: 26:1a:dc:ae:a3:dd:f3:4b:09:eb:9d:8a:76:42:2b: 9a:bd:67:3a:6d:d7:84:8b:15:8a:65:03:83:58:05: 10:c0:ec:2f:6e:de:fb:6e:e3:e8:cd:80:61:63:94: c9:00:a6:6b:a9:7a:cf:c5:89:48:84:68:58:94:18: 80:fb:fa:a3:07:31:43:0f:83:e0:43:35:9c:19:6a: e2:b5:d8:4b:88:5a:7f:92:92:b6:31:2a:e8:d4:bc: 52:d0:37:39:9a:8c:8f:57:c1:7f:15:8f:19:b9:c5: 57:b4:11:96:c7:8d:da:ff:a2:59:53:14:c2:eb:ea: cf:bd:e9:de:f5:9a:55:93:41:71:aa:50:96:0c:aa: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:3C:DC:D1:8A:5D:9C:C8:7F:9E:9D:1A:5D:FA:5A:A5:D2:E9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:84:38:b6:cb:a7:bf:b8:ba:91:0d:4a:c2:aa:ae:b8:98:80: f2:67:26:3f:3d:0a:f9:87:ae:fd:72:07:49:83:fe:59:58:e0: 0f:a1:51:11:7b:c9:9a:48:54:0f:52:0b:52:b1:e3:aa:34:aa: 69:2d:da:df:0f:01:26:21:84:b6:1b:e7:13:9f:a4:9f:97:96: b3:8d:d8:64:a5:79:16:5e:4d:55:20:93:32:5e:f8:d3:c1:5e: 65:ba:bc:58:f3:44:18:ae:39:03:b7:08:3b:4d:6b:13:21:52: 7e:fe:af:9b:07:a8:c4:67:8b:af:16:39:20:11:31:08:c7:96: 3c:16:1d:dc:d0:dc:2b:f1:50:89:5a:01:5b:33:fb:c1:16:56: 9c:51:f6:e0:c8:b5:6a:36:5b:fe:0c:cf:27:15:d2:88:18:af: 41:6a:50:09:b6:df:39:4a:34:75:7e:cc:47:ee:b5:3b:6b:75: d3:fd:4f:9b:39:4c:cb:3d:be:dd:56:b5:f1:c8:53:56:ca:6e: e6:f6:aa:9d:d6:d8:58:fb:7b:1f:9b:e4:c3:51:85:88:9d:eb: dc:4a:17:71:19:d6:95:1d:36:f9:e0:6e:d6:7c:f0:f9:4f:a4: 5f:98:bc:f5:e7:86:da:c3:7b:f0:9f:bb:32:b2:bd:a8:7d:e4: d6:d6:a2:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc7cKPwuXxjo4IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTJmZjFjOGEtNmI5Yy00NGRkLWFkNGEtYWZiOGQ3M2JmYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0rB8ohMPD7+LZtFjurKGPUh/AwiMm/FwYQ7 R5KlKSEctrxNHSgbXphdj7Rmovg6TtuCRhKYbVpceY1oQCppbmPUmhk1WfKne9zK ePPnYCUaNzLePJh94+n3EbvEczubuZZEuZ9onTCth2UbenFPovUxkvkB7B0mGtyu o93zSwnrnYp2QiuavWc6bdeEixWKZQODWAUQwOwvbt77buPozYBhY5TJAKZrqXrP xYlIhGhYlBiA+/qjBzFDD4PgQzWcGWritdhLiFp/kpK2MSro1LxS0Dc5moyPV8F/ FY8ZucVXtBGWx43a/6JZUxTC6+rPvene9ZpVk0FxqlCWDKr6hQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOujPNzRil2cyH+enRpd+lql0unHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYjY0MGU0MGEtMWQ0ZC0z NDIzLTk5YTAtODE1YTQ3NmFiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARhDi2y6e/uLqRDUrCqq64mIDyZyY/PQr5h679cgdJg/5ZWOAPoVER e8maSFQPUgtSseOqNKppLdrfDwEmIYS2G+cTn6Sfl5azjdhkpXkWXk1VIJMyXvjT wV5lurxY80QYrjkDtwg7TWsTIVJ+/q+bB6jEZ4uvFjkgETEIx5Y8Fh3c0Nwr8VCJ WgFbM/vBFlacUfbgyLVqNlv+DM8nFdKIGK9BalAJtt85SjR1fsxH7rU7a3XT/U+b OUzLPb7dVrXxyFNWym7m9qqd1thY+3sfm+TDUYWInevcShdxGdaVHTb54G7WfPD5 T6RfmLz154baw3vwn7sysr2ofeTW1qKb -----END CERTIFICATE-----Generated at Sat Sep 26 03:49:19 2026 by rpki-client