$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa File: d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json) Hash identifier: IQEniXh/mPJ79+n23970RtT/AUNvBHMdmycojRN6nlc= Subject key identifier: 63:5B:5B:EB:1B:D9:06:CE:4F:09:04:DF:4F:8C:A3:08:3F:C4:AA:EC Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F549D558F00FEDF4718C94EE8 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16433 IP address blocks: 2605:f00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:55:8f:00:fe:df:47:18:c9:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=521895d1-7e97-4897-9173-65a3ddd51635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:cf:13:80:94:e7:45:62:d8:95:24:df:84: 51:5c:e1:e4:d6:7b:c8:b7:59:96:22:ff:74:84:91: df:72:01:ac:40:0d:ca:6a:a2:e7:59:41:39:5a:eb: 4b:08:a9:8a:ee:e6:38:d6:cb:2c:75:ca:3d:9f:eb: 1b:d7:89:d3:92:cf:3b:a7:79:19:a7:59:d7:da:be: 19:6d:80:9c:75:0b:a2:0e:2b:7c:df:13:30:2f:33: 74:d4:a7:75:25:7d:a4:3d:7d:68:f8:4e:2e:2b:eb: f8:3c:18:8e:2e:67:f1:70:49:b1:e8:6c:71:7d:c0: 2f:70:16:af:45:58:66:ab:94:5a:49:af:07:df:b2: ce:9e:c4:85:4d:09:58:18:4c:93:4b:5e:5a:a1:27: 10:71:77:0f:fb:93:05:9d:f4:dc:b6:6c:2d:83:f5: a9:04:e5:88:37:d0:0c:32:b7:a4:f3:7c:66:d6:eb: 8f:aa:4f:83:56:56:d5:50:d8:6b:37:bb:da:89:3f: a0:d5:56:88:33:48:df:68:69:39:81:a1:e3:76:e0: 96:d9:5b:a4:6b:1a:1a:d8:99:f4:3d:4f:c1:81:dc: eb:62:ae:42:37:92:5b:ca:54:fe:6f:35:9b:df:10: 65:6a:30:4a:28:8a:69:0d:ce:ff:d0:af:b2:87:36: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5B:5B:EB:1B:D9:06:CE:4F:09:04:DF:4F:8C:A3:08:3F:C4:AA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv6: 2605:f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e6:91:d0:f3:f3:b4:5c:76:6a:31:3a:95:53:5a:f2:54:72: 91:7b:a8:ee:49:a6:9d:bf:53:2f:d7:ec:5c:b1:50:22:68:30: cc:4f:c3:d3:7e:d7:79:a9:dd:9b:6a:5a:ff:50:ea:2e:ae:44: c6:4d:88:a0:06:8c:8d:b1:52:06:29:5d:b7:fe:4c:85:cc:31: 81:f5:2a:9b:43:5a:ce:68:5b:b4:66:b5:5f:d9:60:02:87:a6: 8a:74:d6:e5:5f:5c:19:c7:eb:e2:e7:74:b4:80:a9:99:a4:08: 13:4a:26:e7:df:82:96:38:cd:d2:8a:dd:89:f1:1c:e3:2d:ce: 54:72:a7:c0:03:91:31:29:82:c9:e1:90:66:88:3f:16:39:a7: a6:bf:4a:9d:84:e0:8f:38:3c:ab:29:a0:38:58:e6:f7:93:17: 75:88:25:94:d1:dd:42:36:46:ce:ad:85:bb:90:0b:a7:d7:87: 7c:4e:9c:b1:cb:00:6b:ea:3f:b3:d5:57:bc:2d:36:d1:dd:9f: 64:90:ab:28:2e:bb:07:cf:6f:a3:a6:6c:2b:2c:54:3b:c5:d9: 3c:22:65:22:82:2d:ba:48:69:8c:11:43:20:a6:cd:b4:ce:34: 0b:0c:94:5f:56:24:ff:42:7d:51:21:3d:d9:e9:3d:72:e0:a3: 62:7d:b1:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9UnVWPAP7fRxjJTugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTIxODk1ZDEtN2U5Ny00ODk3LTkxNzMtNjVhM2RkZDUxNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h/PE4CU50Vi2JUk34RRXOHk1nvIt1mWIv90 hJHfcgGsQA3KaqLnWUE5WutLCKmK7uY41sssdco9n+sb14nTks87p3kZp1nX2r4Z bYCcdQuiDit83xMwLzN01Kd1JX2kPX1o+E4uK+v4PBiOLmfxcEmx6GxxfcAvcBav RVhmq5RaSa8H37LOnsSFTQlYGEyTS15aoScQcXcP+5MFnfTctmwtg/WpBOWIN9AM Mrek83xm1uuPqk+DVlbVUNhrN7vaiT+g1VaIM0jfaGk5gaHjduCW2Vukaxoa2Jn0 PU/BgdzrYq5CN5JbylT+bzWb3xBlajBKKIppDc7/0K+yhzbLxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGNbW+sb2QbOTwkE30+Mowg/xKrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZDBlZTI4ODgtMDI5ZC0z MDMzLWFhZjgtNTUyMjBhYTcwYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAE5pHQ8/O0XHZqMTqVU1ryVHKRe6juSaadv1Mv1+xcsVAiaDDMT8PT ftd5qd2balr/UOourkTGTYigBoyNsVIGKV23/kyFzDGB9SqbQ1rOaFu0ZrVf2WAC h6aKdNblX1wZx+vi53S0gKmZpAgTSibn34KWOM3Sit2J8RzjLc5UcqfAA5ExKYLJ 4ZBmiD8WOaemv0qdhOCPODyrKaA4WOb3kxd1iCWU0d1CNkbOrYW7kAun14d8Tpyx ywBr6j+z1Ve8LTbR3Z9kkKsoLrsHz2+jpmwrLFQ7xdk8ImUigi26SGmMEUMgps20 zjQLDJRfViT/Qn1RIT3Z6T1y4KNifbHp -----END CERTIFICATE-----Generated at Sun Oct 4 20:06:32 2026 by rpki-client