$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa File: 86436d71-b41d-34e1-8919-0c89ddd24b27.roa (raw, json) Hash identifier: dSBOvxki5DaWQk813MdkbyVJeEHjB7Z1RQ3ln9zxWeY= Subject key identifier: 13:25:2F:11:C8:8A:D7:4A:AD:C0:37:3D:12:25:46:B7:AE:5B:CE:0A Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584F2EED1403CF6DCCA3A338FD00 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2631:2000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:03:cf:6d:cc:a3:a3:38:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=86846a23-b21a-4cfc-9bf3-e30b79f34ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:c8:b9:83:93:48:81:1b:db:b6:c0:5e:99: 3c:d3:13:d9:8e:f7:19:1b:1e:f7:fc:29:77:5f:83: ab:42:91:af:cf:9c:4e:8f:6f:bf:31:48:d9:e0:2e: 91:17:38:09:98:ce:8b:6e:99:fb:b0:c4:cf:e4:86: 68:2b:2f:22:4c:fb:00:2c:1d:7a:a1:df:09:55:0c: a3:68:2e:57:44:29:66:09:fc:0c:2b:16:59:6e:a3: 71:44:90:a8:06:f0:8d:4e:4a:17:28:80:d2:c2:e8: 29:56:73:35:55:f7:a5:7f:83:4f:ff:17:96:af:21: 83:b2:b5:f5:fc:66:48:02:25:38:52:54:c7:61:f1: 35:bd:11:02:db:7d:41:ea:44:22:d7:92:c6:24:b5: d2:16:93:fe:98:e1:82:9f:9b:53:31:59:09:04:19: ea:27:90:36:a9:8c:25:7b:17:e9:c0:70:37:8b:80: 33:69:0d:d3:06:d2:91:e1:98:4d:a4:6b:7d:c5:59: f7:30:16:3b:02:eb:f3:53:ff:95:d4:1d:e8:a9:55: 52:35:a1:35:a3:1f:70:0b:78:fb:f0:e5:10:50:dc: 8f:13:71:a2:37:1c:5e:d8:3b:b1:89:2a:2b:9c:98: 63:36:51:a0:5e:21:de:83:53:2a:f9:81:ea:22:35: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:2F:11:C8:8A:D7:4A:AD:C0:37:3D:12:25:46:B7:AE:5B:CE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv6: 2631:2000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f9:29:78:9e:99:8d:2c:e9:ee:ad:af:c9:03:bd:5d:bc:e1: 0c:06:5f:23:b6:0e:08:ce:6a:a2:18:c5:33:7f:85:99:5c:83: 47:f3:ac:71:fc:b4:7e:ab:3d:b8:bb:2c:07:71:3a:c8:04:99: e7:8e:3a:d5:2d:ec:ef:48:c5:e3:5c:c8:fb:14:86:d9:a8:8d: 87:71:c7:4f:2e:0c:00:4b:52:97:5a:6e:52:a5:6c:06:5a:10: 66:b6:0d:b5:58:c9:6c:f8:c6:6d:4d:3e:12:e4:4f:52:30:47: 4e:87:0a:16:e8:aa:51:c9:9a:bf:46:50:b9:4d:3b:2c:a1:70: 55:ab:5f:21:18:06:ea:15:b5:da:d8:3f:80:0b:3b:95:85:fb: 8e:8e:51:ca:88:64:b9:b0:41:71:51:50:62:29:12:09:42:e4: 2a:de:c7:e5:4d:48:18:ac:eb:66:fc:08:65:b4:02:e1:98:a8: d1:d9:f8:3c:ea:1b:01:5c:f5:96:e4:92:cc:5d:d0:04:19:ae: ac:e1:c1:f0:64:89:a8:8e:35:b2:2f:0d:14:be:16:fe:5c:1b: 3f:41:72:1b:ac:f4:7c:de:48:a8:53:8b:a3:c0:f8:48:20:1e: df:0f:7a:ce:ab:45:17:78:9b:7e:c5:a1:59:4a:5d:71:2e:44: 76:48:9f:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7RQDz23Mo6M4/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ODY4NDZhMjMtYjIxYS00Y2ZjLTliZjMtZTMwYjc5ZjM0YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsefIuYOTSIEb27bAXpk80xPZjvcZGx73/Cl3 X4OrQpGvz5xOj2+/MUjZ4C6RFzgJmM6Lbpn7sMTP5IZoKy8iTPsALB16od8JVQyj aC5XRClmCfwMKxZZbqNxRJCoBvCNTkoXKIDSwugpVnM1Vfelf4NP/xeWryGDsrX1 /GZIAiU4UlTHYfE1vREC231B6kQi15LGJLXSFpP+mOGCn5tTMVkJBBnqJ5A2qYwl exfpwHA3i4AzaQ3TBtKR4ZhNpGt9xVn3MBY7AuvzU/+V1B3oqVVSNaE1ox9wC3j7 8OUQUNyPE3GiNxxe2DuxiSornJhjNlGgXiHeg1Mq+YHqIjWblwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBMlLxHIitdKrcA3PRIlRreuW84KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODY0MzZkNzEtYjQxZC0z NGUxLTg5MTktMGM4OWRkZDI0YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBu+Sl4npmNLOnura/JA71dvOEMBl8jtg4IzmqiGMUzf4WZXINH86xx /LR+qz24uywHcTrIBJnnjjrVLezvSMXjXMj7FIbZqI2HccdPLgwAS1KXWm5SpWwG WhBmtg21WMls+MZtTT4S5E9SMEdOhwoW6KpRyZq/RlC5TTssoXBVq18hGAbqFbXa 2D+ACzuVhfuOjlHKiGS5sEFxUVBiKRIJQuQq3sflTUgYrOtm/AhltALhmKjR2fg8 6hsBXPWW5JLMXdAEGa6s4cHwZImojjWyLw0Uvhb+XBs/QXIbrPR83kioU4ujwPhI IB7fD3rOq0UXeJt+xaFZSl1xLkR2SJ/k -----END CERTIFICATE-----Generated at Thu Sep 24 14:54:50 2026 by rpki-client