$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/716dc358-7f26-3c35-b872-43b811256672.roa File: 716dc358-7f26-3c35-b872-43b811256672.roa (raw, json) Hash identifier: WjMel6Z9ocS2UFio5oRJl8m4A9lP3mk32RxNc7ip6HA= Subject key identifier: 2F:A3:1E:55:BA:C8:01:31:48:5C:74:8E:06:C6:3E:23:9C:29:E1:DC Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584F46A7DA5BC1902A0791249600 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/716dc358-7f26-3c35-b872-43b811256672.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 922 IP address blocks: 2607:db00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:da:5b:c1:90:2a:07:91:24:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=f853aa07-d263-44f5-ac94-a4c9f2cef1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:94:e0:c3:dd:79:e0:7f:cf:b1:a1:49:57:de: eb:9a:71:42:5f:d1:b6:f5:9d:48:ef:63:64:c8:2a: a3:5f:43:f0:23:bb:88:fa:61:6c:c8:60:02:88:01: 3a:10:d9:6a:c8:c1:41:af:62:fa:26:d0:1b:27:13: 9b:84:dc:d3:7c:36:5c:be:49:83:14:dc:bd:ec:69: 17:b6:23:74:4c:67:f6:99:9d:ad:cb:83:91:da:27: f8:35:92:64:7f:a3:36:b4:0a:e6:a0:79:9c:cf:1a: 25:fa:07:c5:64:20:f3:be:e8:ad:3f:f1:d4:0d:8d: d6:0c:3d:aa:45:e3:06:d2:89:64:34:5f:b5:8a:03: 37:97:1f:21:ec:b8:01:48:7e:bb:e0:0a:9b:55:b2: 6f:35:75:a1:66:7c:9d:a5:86:76:c0:9e:20:c0:e7: 9e:7d:ec:bf:0b:f1:57:e2:34:df:ee:2b:dd:dc:7b: c8:7b:c8:1b:2e:11:0d:7c:b8:a7:45:f4:c5:14:08: b9:2e:42:92:ed:a5:80:58:bc:ef:00:f4:1f:fc:17: 82:34:1e:d1:99:25:79:e1:c8:5f:3b:a7:74:8a:ca: 67:d7:4e:06:c4:c7:7b:1b:6c:d1:5d:4e:1c:03:ac: 51:49:4e:48:aa:52:51:38:ff:b1:73:2d:75:0c:b3: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A3:1E:55:BA:C8:01:31:48:5C:74:8E:06:C6:3E:23:9C:29:E1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/716dc358-7f26-3c35-b872-43b811256672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv6: 2607:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:e4:e2:8e:39:48:cd:ce:90:f1:2b:82:8e:37:6c:18:81:26: 6f:a7:c0:3f:aa:4d:aa:38:62:ea:62:86:22:2b:9c:87:63:cf: ef:00:8d:eb:e6:6b:ce:cc:d6:87:b8:6a:f8:db:bf:f4:ad:0b: 23:7d:bb:43:17:81:ae:eb:1a:a0:ab:6f:76:37:f4:ea:14:10: c6:96:f3:57:da:aa:3b:a8:fe:dc:d8:71:13:df:ad:32:1a:8a: b7:1e:41:4a:f8:b2:31:1d:81:7f:e7:71:87:e0:0a:d0:9c:14: 2d:8d:56:db:0b:1e:fb:cc:33:0b:24:62:67:03:90:89:ed:b9: 2b:8d:c5:25:47:4d:10:32:7f:89:ae:01:3f:64:02:0b:e4:7c: 6d:85:d9:84:ee:9d:d5:e2:9d:61:72:a2:b0:36:5c:32:35:9d: 14:71:f9:74:3a:4b:27:2f:9d:1e:64:cb:7f:56:b5:de:d2:40: 38:66:24:0d:46:1e:fd:c7:dd:12:8e:b3:bd:9b:6a:7b:ba:9b: 80:ba:0a:9c:74:33:20:84:33:8e:25:01:ac:13:43:91:24:4b: 4a:35:2c:d9:f7:2d:88:88:8b:2f:7c:e3:45:db:bc:8b:93:54: cc:26:5c:94:bc:59:5b:4f:7e:f6:49:17:fd:97:54:33:31:68: f5:bf:3d:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Gp9pbwZAqB5EklgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Zjg1M2FhMDctZDI2My00NGY1LWFjOTQtYTRjOWYyY2VmMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJTgw9154H/PsaFJV97rmnFCX9G29Z1I72Nk yCqjX0PwI7uI+mFsyGACiAE6ENlqyMFBr2L6JtAbJxObhNzTfDZcvkmDFNy97GkX tiN0TGf2mZ2ty4OR2if4NZJkf6M2tArmoHmczxol+gfFZCDzvuitP/HUDY3WDD2q ReMG0olkNF+1igM3lx8h7LgBSH674AqbVbJvNXWhZnydpYZ2wJ4gwOeefey/C/FX 4jTf7ivd3HvIe8gbLhENfLinRfTFFAi5LkKS7aWAWLzvAPQf/BeCNB7RmSV54chf O6d0ispn104GxMd7G2zRXU4cA6xRSU5IqlJROP+xcy11DLMxhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC+jHlW6yAExSFx0jgbGPiOcKeHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvNzE2ZGMzNTgtN2YyNi0z YzM1LWI4NzItNDNiODExMjU2NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDN5OKOOUjNzpDxK4KON2wYgSZvp8A/qk2qOGLqYoYiK5yHY8/vAI3r 5mvOzNaHuGr427/0rQsjfbtDF4Gu6xqgq292N/TqFBDGlvNX2qo7qP7c2HET360y Goq3HkFK+LIxHYF/53GH4ArQnBQtjVbbCx77zDMLJGJnA5CJ7bkrjcUlR00QMn+J rgE/ZAIL5HxthdmE7p3V4p1hcqKwNlwyNZ0Ucfl0OksnL50eZMt/VrXe0kA4ZiQN Rh79x90SjrO9m2p7upuAugqcdDMghDOOJQGsE0ORJEtKNSzZ9y2IiIsvfONF27yL k1TMJlyUvFlbT372SRf9l1QzMWj1vz35 -----END CERTIFICATE-----Generated at Mon Sep 28 22:06:18 2026 by rpki-client