$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa File: ebd1f481-b63a-3de0-80dc-690d2a04801d.roa (raw, json) Hash identifier: XiRzY4Xw49rVOcN9D2QYoAzPJbJakzcdEWTclSh4YWM= Subject key identifier: EA:89:F0:B3:1E:A2:46:22:0C:E4:F4:59:42:A9:53:CB:E4:4F:21:A8 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584F480D3FC410538D01C338FF80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 25664 IP address blocks: 2607:cc80:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3f:c4:10:53:8d:01:c3:38:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=28ec2fc2-03dc-4aa9-99bc-c4d4fd15ebaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:54:cd:40:33:32:ca:f1:f9:92:91:fc:c7: 8a:69:52:4f:dc:c3:c1:61:a0:a9:e9:3e:50:63:71: e2:3b:2b:55:07:41:e3:e3:1a:b7:09:7a:0d:ab:50: 90:74:b4:86:c6:42:71:6d:d3:6e:26:3e:2b:49:e9: 15:e2:c6:05:bc:18:eb:a8:61:ed:1c:af:65:5e:07: a0:a9:e2:0b:76:b3:91:2f:22:09:34:70:02:51:07: 06:2e:09:9c:6d:74:d1:fc:2c:fa:fe:0d:67:09:b4: 10:d0:ff:e2:da:d9:cf:74:21:f0:e6:d7:00:69:04: e3:18:4b:fb:27:fe:28:c0:34:d0:44:14:ee:cd:a4: cc:0e:c1:ef:83:20:5e:70:80:03:fb:56:90:87:1e: df:07:05:07:ec:97:e9:4e:05:f4:23:58:f5:db:d3: bc:46:fc:25:4b:43:59:47:cc:6e:8c:02:62:d6:ac: 71:bb:65:49:cb:8d:e7:39:39:c0:58:d9:a7:5e:9c: c3:8a:47:1a:ff:43:4e:aa:06:44:13:89:f3:66:64: 81:32:66:ad:1e:21:a8:81:5c:34:23:c8:ec:f4:3f: 08:21:97:7d:aa:83:88:6f:eb:93:01:36:4c:39:04: da:87:cd:fe:75:4e:bb:da:34:ff:48:0f:54:a0:c7: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:89:F0:B3:1E:A2:46:22:0C:E4:F4:59:42:A9:53:CB:E4:4F:21:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/ebd1f481-b63a-3de0-80dc-690d2a04801d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:7c:df:60:52:ae:8e:48:b8:33:2b:e1:01:28:55:ad:5d:94: 3c:55:b5:c0:f9:6a:5b:37:96:5a:e5:a1:27:08:e3:47:3e:20: 60:a0:ad:06:e4:ce:d7:a6:5a:1f:42:cd:14:41:ce:c6:ac:8c: 2a:1b:3e:69:3e:5c:a8:44:59:02:3a:9e:42:7f:10:07:22:2f: 86:3e:a4:71:f9:8f:f1:b8:c3:23:55:be:34:54:49:29:2d:82: a1:6f:29:5f:23:48:54:32:88:ab:cf:1e:4c:3b:17:71:c1:f7: cb:e3:9f:cd:a4:bf:30:61:1e:e4:b5:33:63:9b:dd:61:57:21: a2:fb:7e:64:4c:a1:ac:49:04:6c:0d:49:48:80:6e:63:a7:49: d3:a3:40:8f:b4:b0:9d:06:0d:be:82:26:68:d4:16:10:16:8f: e3:dc:5a:3c:0d:fd:5a:87:d4:5c:64:59:7c:c1:a4:11:77:3f: e1:38:a3:36:d7:e8:7d:2d:c2:14:8f:5b:ae:53:88:0a:1b:3e: f1:10:f2:0f:5b:b4:3a:61:34:67:30:18:a5:f9:6d:56:02:0c: 0c:23:fb:37:e6:0d:bd:58:09:fe:dc:58:c7:8b:8c:3c:52:55: 47:86:d8:ec:81:42:23:81:a7:ac:ff:83:cd:5a:0a:83:49:61: ee:07:f9:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDT/EEFONAcM4/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MjhlYzJmYzItMDNkYy00YWE5LTk5YmMtYzRkNGZkMTVlYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgdUzUAzMsrx+ZKR/MeKaVJP3MPBYaCp6T5Q Y3HiOytVB0Hj4xq3CXoNq1CQdLSGxkJxbdNuJj4rSekV4sYFvBjrqGHtHK9lXgeg qeILdrORLyIJNHACUQcGLgmcbXTR/Cz6/g1nCbQQ0P/i2tnPdCHw5tcAaQTjGEv7 J/4owDTQRBTuzaTMDsHvgyBecIAD+1aQhx7fBwUH7JfpTgX0I1j129O8RvwlS0NZ R8xujAJi1qxxu2VJy43nOTnAWNmnXpzDikca/0NOqgZEE4nzZmSBMmatHiGogVw0 I8js9D8IIZd9qoOIb+uTATZMOQTah83+dU672jT/SA9UoMdnxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqJ8LMeokYiDOT0WUKpU8vkTyGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvZWJkMWY0ODEtYjYzYS0z ZGUwLTgwZGMtNjkwZDJhMDQ4MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9832BSro5IuDMr4QEoVa1dlDxVtcD5als3llrloScI40c+IGCg rQbkztemWh9CzRRBzsasjCobPmk+XKhEWQI6nkJ/EAciL4Y+pHH5j/G4wyNVvjRU SSktgqFvKV8jSFQyiKvPHkw7F3HB98vjn82kvzBhHuS1M2Ob3WFXIaL7fmRMoaxJ BGwNSUiAbmOnSdOjQI+0sJ0GDb6CJmjUFhAWj+PcWjwN/VqH1FxkWXzBpBF3P+E4 ozbX6H0twhSPW65TiAobPvEQ8g9btDphNGcwGKX5bVYCDAwj+zfmDb1YCf7cWMeL jDxSVUeG2OyBQiOBp6z/g81aCoNJYe4H+YQ= -----END CERTIFICATE-----Generated at Sat Sep 26 02:17:39 2026 by rpki-client