$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa File: 17bad0c7-a26c-3870-80ff-59ab73a873f8.roa (raw, json) Hash identifier: kAt8PalSGRuQrz8mr8zFGQu7dqRVoV6dY5FZTCMaVXk= Subject key identifier: 59:B0:19:F9:28:F7:99:B0:BD:34:14:D8:6B:F5:1B:88:0D:CB:9A:39 Certificate issuer: /CN=4fba60d2-29a5-492e-80a8-8126449210aa Certificate serial: 010D0C9F4328584F4973536DD4B9CBAAF1E20680 Authority key identifier: B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27578 IP address blocks: 2605:dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:53:6d:d4:b9:cb:aa:f1:e2:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba60d2-29a5-492e-80a8-8126449210aa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27ca7b23-fb87-4ef5-a287-631ab64c619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:98:0e:db:25:d8:f1:c0:bd:cc:ee:0f:7c: 61:20:66:47:da:b9:1f:0e:e0:33:b4:45:d2:91:8a: af:77:15:f9:78:32:c4:35:15:4f:34:68:63:6b:1d: 94:bd:8a:b2:2e:bd:71:d4:24:de:3c:87:27:9b:e9: 88:c9:1b:f7:88:fb:13:22:4c:b3:fc:fe:e4:67:10: e4:38:35:dd:61:ce:33:00:aa:30:78:16:01:82:bd: 93:94:c7:07:4d:01:e3:26:e8:4c:21:59:fe:fd:3e: 6d:94:ed:a1:3b:4f:81:a7:02:d7:eb:dd:fd:1b:df: 46:51:7e:e4:3d:78:ac:33:cc:3f:ba:c3:f7:15:df: 08:e2:b0:fd:9e:ee:2c:b6:e9:c8:31:51:95:9a:61: 2a:f8:61:55:34:0d:88:1c:b0:e8:ad:3f:23:16:cb: 2d:eb:98:c4:c2:98:cc:3f:32:e0:b4:71:27:b3:c4: ca:1e:c2:c5:1f:87:b8:40:d7:e5:99:54:d3:ea:12: f5:2f:62:09:e8:58:f7:00:5b:73:11:d7:f8:fa:0a: 07:37:18:99:d6:40:83:ef:1d:44:aa:25:ce:e1:14: e5:f7:ef:ca:5d:5d:c4:a2:48:9e:43:7f:0e:6b:32: 8d:de:71:ca:ba:8a:c7:50:ad:04:e4:22:67:66:87: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B0:19:F9:28:F7:99:B0:BD:34:14:D8:6B:F5:1B:88:0D:CB:9A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl X509v3 Authority Key Identifier: keyid:B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer sbgp-ipAddrBlock: critical IPv6: 2605:dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:79:47:8b:98:4f:27:a5:6c:bb:17:2b:22:e4:98:9e:3d:62: 71:7b:ff:f9:00:4d:5a:57:67:0f:97:3d:2d:99:51:ad:5d:36: 3c:57:cf:78:8b:57:d3:f4:f9:06:f9:ce:04:a0:a4:d1:6c:a3: a8:75:ab:83:dc:9f:b8:e9:06:c1:44:a0:ef:de:cd:ee:70:15: 2a:4f:fe:06:d1:53:7e:ad:9e:24:29:58:4b:f6:4a:4a:e4:19: da:46:92:f0:c4:85:81:60:fe:13:ab:a0:e0:80:30:8f:b5:3b: e0:51:3b:75:ca:11:16:f8:c3:20:46:61:04:86:19:1f:dd:de: b6:ef:a6:82:39:b1:8a:08:31:f2:3a:d5:c8:a8:cc:53:ec:d0: 25:6a:d1:61:87:6d:95:87:9c:3b:fe:a0:d8:9c:f4:91:0e:3e: d3:fb:cb:00:b4:85:4c:10:07:9d:2c:3c:e4:fe:f2:12:3e:cf: 94:0a:53:e2:b8:6d:2e:6c:b5:b9:03:a4:5c:5a:d5:2a:53:c6: 64:77:d3:89:a9:9c:91:7c:14:d3:9c:b7:9e:e4:5d:75:a2:40: 38:8f:75:11:d6:69:dd:79:3d:06:51:bb:4f:14:3e:b4:48:0e: dd:f5:ad:9b:41:8d:79:72:83:37:42:ce:0d:bf:79:cc:7f:55: 35:a1:54:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc1Nt1LnLqvHiBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTYwZDItMjlhNS00OTJlLTgwYTgtODEyNjQ0OTIx MGFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdjYTdiMjMtZmI4Ny00ZWY1LWEyODctNjMxYWI2NGM2MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKiYDtsl2PHAvczuD3xhIGZH2rkfDuAztEXS kYqvdxX5eDLENRVPNGhjax2UvYqyLr1x1CTePIcnm+mIyRv3iPsTIkyz/P7kZxDk ODXdYc4zAKoweBYBgr2TlMcHTQHjJuhMIVn+/T5tlO2hO0+BpwLX6939G99GUX7k PXisM8w/usP3Fd8I4rD9nu4stunIMVGVmmEq+GFVNA2IHLDorT8jFsst65jEwpjM PzLgtHEns8TKHsLFH4e4QNflmVTT6hL1L2IJ6Fj3AFtzEdf4+goHNxiZ1kCD7x1E qiXO4RTl9+/KXV3EokieQ38OazKN3nHKuorHUK0E5CJnZode9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmwGfko95mwvTQU2Gv1G4gNy5o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZmJh NjBkMi0yOWE1LTQ5MmUtODBhOC04MTI2NDQ5MjEwYWEvMTdiYWQwYzctYTI2Yy0z ODcwLTgwZmYtNTlhYjczYTg3M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGZiYTYwZDItMjlhNS00OTJlLTgw YTgtODEyNjQ0OTIxMGFhLzRmYmE2MGQyLTI5YTUtNDkyZS04MGE4LTgxMjY0NDky MTBhYS5jcmwwHwYDVR0jBBgwFoAUsnYWR7zd8tNQEnY0LGU5taoiWogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZmJhNjBkMi0yOWE1LTQ5MmUtODBhOC04MTI2 NDQ5MjEwYWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUNwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAceUeLmE8npWy7Fysi5JiePWJxe//5AE1aV2cPlz0tmVGtXTY8V894 i1fT9PkG+c4EoKTRbKOodauD3J+46QbBRKDv3s3ucBUqT/4G0VN+rZ4kKVhL9kpK 5BnaRpLwxIWBYP4Tq6DggDCPtTvgUTt1yhEW+MMgRmEEhhkf3d6276aCObGKCDHy OtXIqMxT7NAlatFhh22Vh5w7/qDYnPSRDj7T+8sAtIVMEAedLDzk/vISPs+UClPi uG0ubLW5A6RcWtUqU8Zkd9OJqZyRfBTTnLee5F11okA4j3UR1mndeT0GUbtPFD60 SA7d9a2bQY15coM3Qs4Nv3nMf1U1oVR/ -----END CERTIFICATE-----Generated at Thu Oct 8 13:15:45 2026 by rpki-client