$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa File: cf3991eb-5972-3d30-bfbd-8698044dccec.roa (raw, json) Hash identifier: OE1YdMQRsr6klrhQ4Hur+JXD8qc3KZ7DY0HNsueUaZM= Subject key identifier: 6A:7D:7F:3F:2E:CA:67:49:09:0B:88:40:05:0A:44:AB:91:DC:EC:C0 Certificate issuer: /CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b Certificate serial: 010D0C9F4328584F4C3D70657788E76BFF8F7D40 Authority key identifier: 2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 46685 IP address blocks: 68.65.240.0/21 maxlen: 32 199.68.104.0/21 maxlen: 32 2602:fbeb::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:70:65:77:88:e7:6b:ff:8f:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf8ad04-0402-4e5b-ad52-202cba7ac86b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=78d55322-744d-493e-a2a5-8c7d1bc29167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:8b:fe:69:09:25:d3:db:b6:8b:0f:21:cf: df:27:fa:b5:23:1e:b0:29:35:17:04:c9:70:0a:59: 15:a7:9f:93:11:cb:17:a9:80:cf:3f:02:5c:c0:db: de:bb:bf:46:ac:4f:92:1b:a2:cd:b7:b1:a0:38:4e: b4:be:e3:03:d4:73:2d:fe:50:0e:21:6d:d9:4a:c3: d6:2d:bf:df:dd:d6:c0:b5:83:66:b2:9b:7e:14:42: 49:da:d6:88:41:fe:e6:d3:e7:a5:df:aa:a1:b5:ef: 7a:75:83:69:2a:16:84:95:4a:3a:b1:01:f1:63:be: 53:b4:31:77:f3:2e:a2:67:b4:4b:6e:a2:f7:aa:48: 51:a1:7f:49:2b:22:03:91:e4:d9:f3:b7:fc:c7:c3: b9:31:85:0b:cc:17:17:b1:10:d0:7c:ec:16:2d:0c: e5:84:b3:76:ef:1f:1b:2b:79:0f:c2:a7:e6:d2:c7: a8:14:38:9f:30:07:dc:4c:c1:7d:1d:d2:3e:74:88: d3:34:f4:44:69:44:90:a2:f3:f3:fb:bb:9b:c2:b1: 69:7e:ec:0f:73:bd:25:05:72:1b:26:ad:20:3b:a6: 3c:8d:72:6c:b6:d8:91:69:3b:7c:1f:a6:23:22:d7: a3:de:75:2e:ad:5b:42:d1:72:1c:c9:ee:d2:c3:ff: 38:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:7F:3F:2E:CA:67:49:09:0B:88:40:05:0A:44:AB:91:DC:EC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/cf3991eb-5972-3d30-bfbd-8698044dccec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.crl X509v3 Authority Key Identifier: keyid:2A:DA:05:2D:F4:36:68:AB:BA:61:6C:01:9B:88:F7:38:34:C6:7C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fcf8ad04-0402-4e5b-ad52-202cba7ac86b.cer sbgp-ipAddrBlock: critical IPv4: 68.65.240.0/21 199.68.104.0/21 IPv6: 2602:fbeb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6f:76:79:44:e4:3e:72:18:4c:1f:20:a7:62:5e:c3:43:9f: 42:ac:8c:75:8b:2f:aa:0c:40:09:f1:0e:9b:fb:9e:de:fe:43: 8f:ab:c7:fd:d0:4c:1a:08:1a:e6:32:a0:b8:60:df:21:1c:8c: f4:95:6a:b7:a2:6e:8f:79:d9:e3:1a:5e:fd:29:02:4f:64:db: db:e9:b7:73:12:38:b6:c5:bd:fc:64:0f:40:45:0a:5d:e6:22: fa:51:a3:95:44:4d:99:eb:bc:d1:0b:6a:a2:0f:aa:18:a9:f7: 5b:36:05:0e:63:2a:53:e6:0f:ec:76:52:29:94:03:44:33:c6: 07:e2:c9:5d:3b:41:69:35:7f:d8:a1:f1:03:60:81:06:fe:e7: 68:e0:83:8a:b7:f8:4f:58:36:23:23:fd:ea:6b:15:85:c9:b0: a4:d1:17:2a:f6:ea:9f:e5:9d:80:11:fa:a9:71:be:2c:c7:9c: 3f:2e:70:55:f0:1a:2e:a5:f3:6c:31:6b:18:82:ad:54:09:5e: 91:54:8e:f6:b2:7b:09:5a:5c:85:ae:de:c0:c6:a3:1d:59:79: c7:6a:5e:4a:5f:e3:2b:55:41:8b:af:42:4c:53:c6:3e:67:32: 1b:30:0a:84:f8:6f:9f:46:29:db:bc:80:54:4b:b2:3f:0c:63: 7f:7c:c6:29 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9MPXBld4jna/+PfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNmOGFkMDQtMDQwMi00ZTViLWFkNTItMjAyY2JhN2Fj ODZiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzhkNTUzMjItNzQ0ZC00OTNlLWEyYTUtOGM3ZDFiYzI5MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fiL/mkJJdPbtosPIc/fJ/q1Ix6wKTUXBMlw ClkVp5+TEcsXqYDPPwJcwNveu79GrE+SG6LNt7GgOE60vuMD1HMt/lAOIW3ZSsPW Lb/f3dbAtYNmspt+FEJJ2taIQf7m0+el36qhte96dYNpKhaElUo6sQHxY75TtDF3 8y6iZ7RLbqL3qkhRoX9JKyIDkeTZ87f8x8O5MYULzBcXsRDQfOwWLQzlhLN27x8b K3kPwqfm0seoFDifMAfcTMF9HdI+dIjTNPREaUSQovPz+7ubwrFpfuwPc70lBXIb Jq0gO6Y8jXJsttiRaTt8H6YjItej3nUurVtC0XIcye7Sw/84YwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGp9fz8uymdJCQuIQAUKRKuR3OzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4 YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJjYmE3YWM4NmIvY2YzOTkxZWItNTk3Mi0z ZDMwLWJmYmQtODY5ODA0NGRjY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmNmOGFkMDQtMDQwMi00ZTViLWFk NTItMjAyY2JhN2FjODZiL2ZjZjhhZDA0LTA0MDItNGU1Yi1hZDUyLTIwMmNiYTdh Yzg2Yi5jcmwwHwYDVR0jBBgwFoAUKtoFLfQ2aKu6YWwBm4j3ODTGfKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mY2Y4YWQwNC0wNDAyLTRlNWItYWQ1Mi0yMDJj YmE3YWM4NmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDREHwAwQD x0RoMA4EAgACMAgDBgQmAvvrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKb3Z5ROQ+chhMHyCnYl7DQ59C rIx1iy+qDEAJ8Q6b+57e/kOPq8f90EwaCBrmMqC4YN8hHIz0lWq3om6PednjGl79 KQJPZNvb6bdzEji2xb38ZA9ARQpd5iL6UaOVRE2Z67zRC2qiD6oYqfdbNgUOYypT 5g/sdlIplANEM8YH4sldO0FpNX/YofEDYIEG/udo4IOKt/hPWDYjI/3qaxWFybCk 0Rcq9uqf5Z2AEfqpcb4sx5w/LnBV8BoupfNsMWsYgq1UCV6RVI72snsJWlyFrt7A xqMdWXnHal5KX+MrVUGLr0JMU8Y+ZzIbMAqE+G+fRinbvIBUS7I/DGN/fMYp -----END CERTIFICATE-----Generated at Tue Sep 29 15:12:42 2026 by rpki-client