$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa File: 4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa (raw, json) Hash identifier: z5+Nyh1fiz3p9Ek+FpmAk0VdGieS+HW2HlSk9qxWK9E= Subject key identifier: 64:9D:D5:4D:C0:68:62:36:22:43:75:50:9E:E6:52:F7:5C:0D:F3:67 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F2957B8DBC508430C2C8ED480 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 198949 IP address blocks: 2620:147:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b8:db:c5:08:43:0c:2c:8e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=3082dba1-7ea3-43f1-8c11-351e3f42845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:ce:59:d4:ff:34:35:ac:73:d5:aa:38:c5: f8:cb:9b:30:5b:ed:e7:85:a7:91:7c:a6:64:3b:fc: 78:86:a6:55:33:26:a9:45:72:36:ef:db:19:6c:b3: 12:49:5c:ee:24:6b:46:e1:6c:df:e1:88:6b:41:15: 06:fd:13:61:59:7a:c0:53:8c:03:30:b0:53:76:6c: 79:18:11:4d:21:0a:df:21:da:9a:8b:fc:d5:fe:ba: cd:1f:a3:73:2e:6e:b8:f9:81:a1:74:6d:3f:f1:37: 8e:34:ea:b9:26:6a:e5:97:c2:9e:0c:4d:99:22:20: d6:ab:32:ac:5e:a4:23:7d:99:d0:50:43:92:d0:5a: 01:01:01:83:60:36:26:0d:d4:f7:8c:c6:9f:55:64: 39:03:c6:8a:aa:98:ab:ce:02:98:3b:ad:9b:f8:5f: ab:0d:43:cb:7e:f8:f9:1d:48:31:5e:10:11:d5:6f: 42:4c:af:c5:2e:81:11:a9:5c:6e:4e:7d:14:9d:79: 4c:b5:e2:d8:12:29:d2:8a:9f:76:b1:13:7e:24:68: 66:65:a6:f7:80:9d:05:df:a3:46:aa:5d:31:59:77: f4:7b:b1:46:17:2f:c3:2f:68:eb:3a:8a:b0:78:17: bc:6a:db:8b:ca:49:c2:38:ea:b6:81:c4:8a:93:2d: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9D:D5:4D:C0:68:62:36:22:43:75:50:9E:E6:52:F7:5C:0D:F3:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:800::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d6:1b:b0:e1:fb:77:7d:f1:94:ef:2b:c4:56:80:a6:d5:54: f3:28:3d:ab:64:02:5a:c1:3d:3b:b9:64:6a:62:58:4b:0e:aa: f1:86:fc:56:34:f9:e3:93:05:ac:b9:71:bc:a3:f3:96:71:6c: 98:57:45:72:34:54:54:52:b6:94:14:14:78:9f:51:90:1b:a3: b1:e5:25:ed:e0:24:30:77:f3:3e:17:3c:ba:ae:bd:0d:96:6f: 32:dc:ff:d4:5c:64:4f:d6:9e:46:04:64:08:06:9d:e6:37:f4: 34:27:20:00:49:43:d6:62:84:ab:59:b2:96:54:4e:82:cd:65: 89:15:c8:8d:7e:dd:fe:f9:48:d4:b0:8c:db:be:7d:cf:e9:cb: 76:f4:36:05:74:ce:19:63:d0:f4:a7:8d:80:d2:f9:1c:c7:bb: f1:55:06:20:25:51:15:f0:b0:ea:42:e9:56:9c:98:6d:7e:e2: f0:9c:38:f5:35:ab:4b:57:13:a6:b6:e3:a3:a5:b8:eb:b4:65: 6b:5d:b4:41:74:46:2b:e5:cb:1b:80:3b:0a:61:03:2e:1c:dc: cc:4f:b3:a4:28:a5:88:79:8d:61:a0:72:e1:19:db:7a:65:5e: ca:f3:a6:a2:49:be:5b:4c:4c:a7:1e:8c:cb:3c:5e:5c:0d:0f: cf:60:3d:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8pV7jbxQhDDCyO1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MzA4MmRiYTEtN2VhMy00M2YxLThjMTEtMzUxZTNmNDI4NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBPOWdT/NDWsc9WqOMX4y5swW+3nhaeRfKZk O/x4hqZVMyapRXI279sZbLMSSVzuJGtG4Wzf4YhrQRUG/RNhWXrAU4wDMLBTdmx5 GBFNIQrfIdqai/zV/rrNH6NzLm64+YGhdG0/8TeONOq5Jmrll8KeDE2ZIiDWqzKs XqQjfZnQUEOS0FoBAQGDYDYmDdT3jMafVWQ5A8aKqpirzgKYO62b+F+rDUPLfvj5 HUgxXhAR1W9CTK/FLoERqVxuTn0UnXlMteLYEinSip92sRN+JGhmZab3gJ0F36NG ql0xWXf0e7FGFy/DL2jrOoqweBe8atuLyknCOOq2gcSKky0RlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGSd1U3AaGI2IkN1UJ7mUvdcDfNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNGYyZWY3MmQtNWMwNS0z MWQwLTk5YTEtMTBkMDNmNTVjNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJiABRwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgtYbsOH7d33xlO8rxFaAptVU8yg9q2QCWsE9O7lkamJYSw6q8Yb8 VjT545MFrLlxvKPzlnFsmFdFcjRUVFK2lBQUeJ9RkBujseUl7eAkMHfzPhc8uq69 DZZvMtz/1FxkT9aeRgRkCAad5jf0NCcgAElD1mKEq1myllROgs1liRXIjX7d/vlI 1LCM2759z+nLdvQ2BXTOGWPQ9KeNgNL5HMe78VUGICVRFfCw6kLpVpyYbX7i8Jw4 9TWrS1cTprbjo6W467Rla120QXRGK+XLG4A7CmEDLhzczE+zpCiliHmNYaBy4Rnb emVeyvOmokm+W0xMpx6MyzxeXA0Pz2A9jQ== -----END CERTIFICATE-----Generated at Sun Oct 11 20:17:33 2026 by rpki-client