$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa File: 6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa (raw, json) Hash identifier: Pr4vLyrmtDRWxZANW9qew0WCC6SVqe8sPK4GkhIS7+k= Subject key identifier: 36:40:4E:33:C9:41:30:B5:BE:AA:49:D1:E3:B8:33:63:03:69:E4:61 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584F480D3B1BF20186B4D2D41840 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 25664 IP address blocks: 2607:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3b:1b:f2:01:86:b4:d2:d4:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=987b6ad7-8fb4-4ae1-bac1-6a3f53e0cae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:08:ef:d3:a9:ec:15:6d:64:6c:64:09:11: 07:26:8f:7c:09:9e:cf:6e:81:1c:9f:5b:be:e5:f0: 20:01:73:a2:c8:48:65:89:cf:c0:59:04:2e:b2:e5: 7f:6d:92:18:1a:e6:d3:fb:04:11:aa:4c:e5:54:58: dd:73:2b:1a:95:ba:d7:35:c9:b3:9d:2f:ac:6e:b0: 0b:ac:6e:5e:3b:76:11:2d:bc:f5:88:4b:20:b1:a5: 09:56:b5:2e:6a:74:d3:ca:d3:59:54:c9:3f:5c:53: 79:79:53:b9:fc:6e:ea:92:e4:c1:12:1f:ae:29:e4: c0:5a:21:56:b8:3b:64:94:e9:26:43:8b:2f:49:ba: 16:d1:83:0d:6d:5e:80:92:89:05:ec:fd:d7:9d:b3: ac:79:0c:9b:de:15:9b:ce:54:f4:b7:62:4f:96:e4: 42:6b:a8:d7:37:9e:51:39:fb:95:59:53:a5:2a:15: 7a:c5:01:c7:c3:72:18:04:ab:f0:8b:ba:5e:4a:9a: ec:56:fc:c9:ae:f1:2e:f7:47:51:83:6e:28:f8:8f: 1b:71:6c:fc:59:26:af:74:c1:07:99:ad:5b:17:ff: 6c:f1:3e:d9:ab:98:2a:5e:69:b1:26:db:a5:5a:44: 91:01:f0:e8:32:84:5b:8e:01:0d:49:2b:04:5f:58: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:40:4E:33:C9:41:30:B5:BE:AA:49:D1:E3:B8:33:63:03:69:E4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/6891bc6a-b5f5-3e86-a40d-c6aad878d961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a6:f0:4a:a3:f6:df:c1:55:80:a1:c3:69:08:3a:3a:4b:e8: 4d:5b:03:fe:92:e4:28:ef:98:1c:b5:87:e0:2a:35:3e:62:87: 02:d6:27:7e:29:ca:65:b0:db:28:b2:67:9b:ca:70:bd:c8:80: 61:50:40:b0:3d:85:ac:cd:91:23:51:63:75:91:0e:e6:a2:5b: 93:a7:75:7a:9a:1e:0b:b7:67:50:b6:57:b7:6e:7c:d7:37:b2: a6:24:97:bd:58:07:68:23:e4:3b:62:5d:d8:bb:e9:5a:be:1e: 1e:f2:0a:69:67:56:9e:e6:ee:d0:f6:c7:42:b8:23:58:57:ce: 34:bb:6f:88:25:fc:8b:d2:be:47:2d:39:e9:45:f4:53:36:db: 93:e8:65:05:c4:9a:ee:30:b7:2d:37:57:40:90:f5:b1:14:8c: 8c:7a:12:d6:2d:17:8a:14:44:87:5e:cf:70:ca:7e:77:40:b6: c3:17:59:ef:8c:d7:25:81:25:5a:ca:8c:b3:b1:02:8a:d2:ac: b2:69:59:13:61:ad:96:80:ce:11:33:9d:ab:12:62:18:a5:66: c6:a6:ab:22:8a:fe:36:24:67:17:29:3e:92:ae:09:e9:f7:40: 2f:31:8e:51:cb:26:da:93:41:04:77:cf:2b:36:fd:58:f1:7e: 20:d0:b3:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDTsb8gGGtNLUGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk OTg3YjZhZDctOGZiNC00YWUxLWJhYzEtNmEzZjUzZTBjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu44I79Op7BVtZGxkCREHJo98CZ7PboEcn1u+ 5fAgAXOiyEhlic/AWQQusuV/bZIYGubT+wQRqkzlVFjdcysalbrXNcmznS+sbrAL rG5eO3YRLbz1iEsgsaUJVrUuanTTytNZVMk/XFN5eVO5/G7qkuTBEh+uKeTAWiFW uDtklOkmQ4svSboW0YMNbV6AkokF7P3XnbOseQyb3hWbzlT0t2JPluRCa6jXN55R OfuVWVOlKhV6xQHHw3IYBKvwi7peSprsVvzJrvEu90dRg24o+I8bcWz8WSavdMEH ma1bF/9s8T7Zq5gqXmmxJtulWkSRAfDoMoRbjgENSSsEX1jEVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZATjPJQTC1vqpJ0eO4M2MDaeRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNjg5MWJjNmEtYjVmNS0z ZTg2LWE0MGQtYzZhYWQ4NzhkOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKym8Eqj9t/BVYChw2kIOjpL6E1bA/6S5CjvmBy1h+AqNT5ihwLW J34pymWw2yiyZ5vKcL3IgGFQQLA9hazNkSNRY3WRDuaiW5OndXqaHgu3Z1C2V7du fNc3sqYkl71YB2gj5DtiXdi76Vq+Hh7yCmlnVp7m7tD2x0K4I1hXzjS7b4gl/IvS vkctOelF9FM225PoZQXEmu4wty03V0CQ9bEUjIx6EtYtF4oURIdez3DKfndAtsMX We+M1yWBJVrKjLOxAorSrLJpWRNhrZaAzhEznasSYhilZsamqyKK/jYkZxcpPpKu Cen3QC8xjlHLJtqTQQR3zys2/VjxfiDQs90= -----END CERTIFICATE-----Generated at Thu Sep 24 19:15:03 2026 by rpki-client