$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa File: b4c9a728-90b0-3673-8d59-1fc525f905b4.roa (raw, json) Hash identifier: Czv3LJx+7tSsAzfd/Mb/tv1QviuRQ182iJU43yYD3r0= Subject key identifier: 39:8E:4C:0B:33:82:47:7A:A8:B1:DA:38:84:19:DF:80:35:9F:84:F4 Certificate issuer: /CN=ef238680-20ad-47df-89b5-7a55fae68594 Certificate serial: 010D0C9F4328584F4973D5654093ABC028AE75C0 Authority key identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 2607:33c0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d5:65:40:93:ab:c0:28:ae:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef238680-20ad-47df-89b5-7a55fae68594 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2937b0b6-c101-42da-b717-cec35998c832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:2f:8e:c9:1f:a5:b5:fc:fe:45:27:59:a1: cd:5c:d8:01:c7:be:5f:6f:99:12:93:2c:a1:90:97: ab:b2:c6:9a:ae:4e:98:50:a3:91:9a:0b:99:1c:28: 74:3f:f0:97:0f:93:68:00:eb:4c:3d:23:c9:97:b0: 48:17:07:8f:c1:fd:ad:a2:a7:80:d4:f6:1c:c5:ef: 15:a8:a5:58:34:6f:0c:49:57:5c:ac:56:cc:a3:b8: f1:67:a4:d4:df:99:76:2e:dd:b2:3b:83:fb:3d:53: 79:e2:2a:36:ee:2b:8f:3a:0e:53:97:9b:1c:e8:3f: a1:27:71:e4:ea:23:7f:25:f8:a2:eb:b4:6d:ca:da: ed:a0:96:fa:e8:c2:cc:67:be:8f:50:d9:30:bf:51: 60:a0:ff:8d:c6:44:6d:26:76:e8:8d:30:82:dc:a4: e5:b1:09:7b:19:3a:38:c9:6d:f9:bd:aa:fd:4d:5a: 0e:aa:15:4d:05:bb:ba:26:c3:38:a3:6e:87:66:01: 45:92:13:4f:c3:b5:7f:cb:58:0e:8c:8a:9c:2e:5b: 1f:db:ea:6b:3c:2e:88:98:09:05:01:4e:6c:9c:fb: 30:1e:59:2c:ae:99:af:de:2c:44:90:62:e7:2b:68: ec:fb:25:1a:69:18:63:6e:29:4f:35:62:dc:ae:45: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8E:4C:0B:33:82:47:7A:A8:B1:DA:38:84:19:DF:80:35:9F:84:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl X509v3 Authority Key Identifier: keyid:7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer sbgp-ipAddrBlock: critical IPv6: 2607:33c0:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b9:ca:c7:d4:14:7a:46:2f:7d:21:31:e7:8a:cb:3a:c3:4a: 6b:a3:28:37:cf:14:11:e0:35:49:6a:75:ba:e8:e1:4f:e1:b9: e3:0a:a8:a8:59:6d:c8:89:58:9d:bf:62:8c:ae:0e:f3:19:67: 4d:19:ce:e3:19:41:28:09:ec:34:cf:8e:7d:fd:15:48:f1:f6: 5f:a6:1e:52:0e:94:da:38:7f:28:ce:fb:58:c1:b6:17:45:94: 93:7b:d3:e7:e7:a5:f2:df:5d:92:f4:4a:f6:e1:0f:87:b0:ec: 1c:43:45:27:a5:47:f8:7a:8b:96:7f:47:66:14:ec:8f:8b:67: 17:75:37:74:45:e4:bf:1c:c8:93:b2:cb:45:0c:68:63:9c:7b: 1b:58:39:c9:95:8b:2f:b9:c2:2f:cc:77:75:7c:35:1d:f4:dc: a8:2c:8e:af:4c:fa:08:bf:dd:a4:14:da:13:bb:b5:a7:c1:b6: 20:13:c5:1b:61:a6:56:eb:35:1d:ee:c0:20:dc:c7:d3:b5:e8: a0:4f:e9:75:7c:ae:e6:5a:f2:e8:df:b0:8d:a1:44:15:6b:ec: d4:68:64:f0:a3:9a:be:af:9e:34:71:b2:0d:35:a5:f7:30:60: 16:0b:f5:f4:9f:b4:af:3b:0a:60:34:23:6a:f5:bd:d0:bd:7a: 21:f8:53:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc9VlQJOrwCiudcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYyMzg2ODAtMjBhZC00N2RmLTg5YjUtN2E1NWZhZTY4 NTk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjkzN2IwYjYtYzEwMS00MmRhLWI3MTctY2VjMzU5OThjODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUvjskfpbX8/kUnWaHNXNgBx75fb5kSkyyh kJerssaark6YUKORmguZHCh0P/CXD5NoAOtMPSPJl7BIFwePwf2toqeA1PYcxe8V qKVYNG8MSVdcrFbMo7jxZ6TU35l2Lt2yO4P7PVN54io27iuPOg5Tl5sc6D+hJ3Hk 6iN/Jfii67RtytrtoJb66MLMZ76PUNkwv1FgoP+NxkRtJnbojTCC3KTlsQl7GTo4 yW35var9TVoOqhVNBbu6JsM4o26HZgFFkhNPw7V/y1gOjIqcLlsf2+prPC6ImAkF AU5snPswHlksrpmv3ixEkGLnK2js+yUaaRhjbilPNWLcrkWyFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmOTAszgkd6qLHaOIQZ34A1n4T0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjIz ODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1ZmFlNjg1OTQvYjRjOWE3MjgtOTBiMC0z NjczLThkNTktMWZjNTI1ZjkwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWYyMzg2ODAtMjBhZC00N2RmLTg5 YjUtN2E1NWZhZTY4NTk0L2VmMjM4NjgwLTIwYWQtNDdkZi04OWI1LTdhNTVmYWU2 ODU5NC5jcmwwHwYDVR0jBBgwFoAUfP9zrJ1uvB0lfs2PzulRsrdq9JMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZjIzODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1 ZmFlNjg1OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgczwACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADm5ysfUFHpGL30hMeeKyzrDSmujKDfPFBHgNUlqdbro4U/hueMK qKhZbciJWJ2/YoyuDvMZZ00ZzuMZQSgJ7DTPjn39FUjx9l+mHlIOlNo4fyjO+1jB thdFlJN70+fnpfLfXZL0SvbhD4ew7BxDRSelR/h6i5Z/R2YU7I+LZxd1N3RF5L8c yJOyy0UMaGOcextYOcmViy+5wi/Md3V8NR303Kgsjq9M+gi/3aQU2hO7tafBtiAT xRthplbrNR3uwCDcx9O16KBP6XV8ruZa8ujfsI2hRBVr7NRoZPCjmr6vnjRxsg01 pfcwYBYL9fSftK87CmA0I2r1vdC9eiH4Uzo= -----END CERTIFICATE-----Generated at Tue Oct 6 12:33:44 2026 by rpki-client