$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a08b02c4-1b6e-36e0-aa98-39bca6ebdca8.roa File: a08b02c4-1b6e-36e0-aa98-39bca6ebdca8.roa (raw, json) Hash identifier: HZqKlyv3VOcGtg70U5NGKAV3yra4ak5fhHVu0ULiXd0= Subject key identifier: A2:43:4B:B7:8C:C3:0E:0E:0D:F8:83:B8:DC:6A:59:C7:15:4E:18:4D Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584F4973CE355F59C8821F2F0E40 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a08b02c4-1b6e-36e0-aa98-39bca6ebdca8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2152 IP address blocks: 2607:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ce:35:5f:59:c8:82:1f:2f:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2144a9ce-2c9f-42fb-9dfd-4c60a252b5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:23:14:15:88:90:cb:21:0e:2b:e1:95:d7: fa:26:fe:a1:a8:23:86:58:ac:d6:00:cb:ef:90:68: 37:8a:74:9c:1b:16:c5:c5:a1:2d:a9:07:8c:c4:cd: bf:52:3d:b5:18:92:35:9b:7c:df:5f:fc:5d:f0:00: d6:6c:26:52:87:76:21:72:f6:e9:0f:92:ae:96:79: e1:20:05:a8:58:9d:64:1f:93:0e:22:b7:70:07:7b: ec:a8:17:a3:f5:ec:6f:2e:c6:11:9f:6e:1d:37:ed: 3c:83:f4:44:bc:f8:a1:3d:9c:f9:ff:68:fe:88:45: dc:8b:6e:a5:c1:6c:a9:60:e2:20:c4:35:6f:99:fa: 09:35:b9:3d:93:de:1f:ac:c3:94:40:ab:65:40:15: dc:57:e1:ef:fd:a1:86:8c:fc:c8:4a:84:ab:24:09: 09:41:c2:23:c6:1f:97:d4:bb:24:8d:be:08:21:5e: 3d:6d:7f:03:0e:72:e1:d4:56:6b:22:a9:2e:cf:c9: 2e:10:27:eb:99:68:b0:56:c6:aa:e6:5b:a1:ab:d3: d1:2b:68:b1:12:e5:fe:86:b9:da:b3:98:75:7c:68: 0c:1d:ec:82:b4:12:2f:59:87:91:40:bc:1d:77:f9: f2:1e:fc:d3:83:f2:0a:bd:c6:c3:57:42:ed:50:64: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:4B:B7:8C:C3:0E:0E:0D:F8:83:B8:DC:6A:59:C7:15:4E:18:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/a08b02c4-1b6e-36e0-aa98-39bca6ebdca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:64:52:39:70:aa:a8:d4:b4:89:92:52:ae:e6:fa:6f:49:b3: 31:24:18:c0:ea:3b:b4:f2:02:c6:54:aa:17:a1:00:6a:b9:3f: 8a:5f:7f:0c:ff:b4:35:f1:ea:fe:0a:d0:b8:72:c2:51:b7:b0: 3d:3c:07:95:d7:b6:1e:a1:d7:b7:9d:9e:bf:0d:3f:5b:f9:e7: 43:c5:e8:f4:c7:fc:89:bb:e9:19:00:80:82:30:91:c9:4d:ca: 00:95:af:4b:02:44:de:53:58:59:22:db:7e:00:f8:ae:ef:e8: 87:f1:7f:77:30:e6:8d:00:81:b4:f2:0d:8e:a6:5f:40:97:e6: f0:26:00:f0:a5:c4:6b:ac:34:64:b5:94:cb:e9:28:ae:f1:47: 9a:1d:c2:2d:fa:1c:35:cf:8a:8b:29:cb:c5:9a:f4:78:07:4e: 0b:65:80:e2:f7:2f:de:8e:44:37:54:24:ea:79:2a:8e:52:68: b3:92:68:26:d0:f5:07:56:05:3f:66:5e:fc:5f:27:e5:62:a2: f1:fb:5a:0b:19:8c:b4:6e:9b:59:59:85:ff:57:cd:3a:c7:22: 9a:a3:72:7c:21:fa:3a:01:2f:85:1f:35:8f:8b:fb:27:2d:41: 93:12:6d:85:b1:78:60:dc:19:85:49:5f:94:3c:c1:ea:99:68: 01:de:d5:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc841X1nIgh8vDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjE0NGE5Y2UtMmM5Zi00MmZiLTlkZmQtNGM2MGEyNTJiNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdMjFBWIkMshDivhldf6Jv6hqCOGWKzWAMvv kGg3inScGxbFxaEtqQeMxM2/Uj21GJI1m3zfX/xd8ADWbCZSh3YhcvbpD5Kulnnh IAWoWJ1kH5MOIrdwB3vsqBej9exvLsYRn24dN+08g/REvPihPZz5/2j+iEXci26l wWypYOIgxDVvmfoJNbk9k94frMOUQKtlQBXcV+Hv/aGGjPzISoSrJAkJQcIjxh+X 1Lskjb4IIV49bX8DDnLh1FZrIqkuz8kuECfrmWiwVsaq5luhq9PRK2ixEuX+hrna s5h1fGgMHeyCtBIvWYeRQLwdd/nyHvzTg/IKvcbDV0LtUGTJcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJDS7eMww4ODfiDuNxqWccVThhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvYTA4YjAyYzQtMWI2ZS0z NmUwLWFhOTgtMzliY2E2ZWJkY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9kUjlwqqjUtImSUq7m+m9JszEkGMDqO7TyAsZUqhehAGq5P4pf fwz/tDXx6v4K0LhywlG3sD08B5XXth6h17ednr8NP1v550PF6PTH/Im76RkAgIIw kclNygCVr0sCRN5TWFki234A+K7v6Ifxf3cw5o0AgbTyDY6mX0CX5vAmAPClxGus NGS1lMvpKK7xR5odwi36HDXPiospy8Wa9HgHTgtlgOL3L96ORDdUJOp5Ko5SaLOS aCbQ9QdWBT9mXvxfJ+ViovH7WgsZjLRum1lZhf9XzTrHIpqjcnwh+joBL4UfNY+L +yctQZMSbYWxeGDcGYVJX5Q8weqZaAHe1Qo= -----END CERTIFICATE-----Generated at Sat Sep 26 14:37:10 2026 by rpki-client