$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/e41dedf9-6f61-3f95-99a2-dcd2715d8a71.roa File: e41dedf9-6f61-3f95-99a2-dcd2715d8a71.roa (raw, json) Hash identifier: jblEy4IUV+Fui924fNbQfYJimj3UHdO8MoISz8VjTog= Subject key identifier: C1:F2:9B:19:9C:32:14:BE:74:67:3E:0A:C3:D0:78:3A:5D:54:6C:44 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584F2ABD02164E3E2F44092DB280 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/e41dedf9-6f61-3f95-99a2-dcd2715d8a71.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 7352 IP address blocks: 2604:cd00:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:02:16:4e:3e:2f:44:09:2d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=4903ce2d-58ac-45ca-a885-11fa61b0e6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:5a:9a:c7:cc:67:08:b3:f1:5e:92:fa:d3: b4:4d:4c:fc:03:60:57:f6:c6:27:4a:d3:f1:db:ce: cc:85:71:5b:8c:1e:0b:4d:3d:4b:9f:aa:44:bf:48: 54:e6:54:01:e8:76:01:26:fb:41:c2:b8:95:51:77: c5:c6:14:b4:4e:78:90:cc:da:d3:c9:56:16:e3:ef: 86:da:c8:5e:94:c4:ba:06:e1:d7:56:3f:84:be:4f: 7a:51:a1:c7:bc:55:31:25:74:46:89:28:5b:b1:15: 8a:11:ec:e7:48:d8:ea:25:65:47:43:6e:0c:84:b5: 60:44:c1:e9:48:59:58:06:5e:0a:7d:57:8c:56:7b: 7a:88:95:23:1f:5f:f9:8d:e8:c4:7a:c1:7c:0b:6b: a1:7c:7a:61:f2:0c:90:4e:d6:99:f8:e0:fc:6c:06: ca:ef:4e:55:92:92:85:c2:09:f0:ba:d5:23:04:11: ff:0d:9a:80:28:d3:d7:02:68:a9:c8:8e:b9:60:3f: 73:7d:de:47:43:c8:b5:b6:63:2f:3a:09:f0:ae:53: e3:12:6d:45:c1:06:5f:77:c8:99:6c:79:4e:63:3f: 77:02:34:40:cd:0e:0f:3a:25:8d:9f:ca:83:3b:7d: 8e:fe:82:c5:b4:8e:9a:ad:07:4c:44:08:29:e2:2a: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:9B:19:9C:32:14:BE:74:67:3E:0A:C3:D0:78:3A:5D:54:6C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/e41dedf9-6f61-3f95-99a2-dcd2715d8a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv6: 2604:cd00:4000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c3:2d:a9:ae:da:96:e8:38:f6:d0:ee:ae:db:cb:5f:c4:08: 3a:49:d7:31:d7:98:14:5b:f9:8a:15:f3:88:bf:d8:27:ff:ad: f9:28:22:dd:db:03:02:73:b7:df:72:bc:fd:eb:c0:fd:ba:f7: 5f:d4:3d:4f:fd:20:36:41:e1:f5:11:82:5f:24:d3:58:6d:da: 9c:94:2a:76:14:a3:5e:6a:5b:dd:76:5a:0b:c3:f3:a3:4f:ca: d8:bb:2d:64:88:58:e5:67:ae:82:63:64:26:c4:6b:28:10:99: 8e:85:06:2f:f6:9e:42:23:98:19:78:84:7c:cb:5c:b8:96:f2: cc:6b:40:b3:92:c2:7a:67:da:dd:9f:ab:0b:31:61:99:eb:a3: dc:e8:00:b8:47:bc:da:50:82:2c:85:a6:9a:90:85:c1:ca:57: ed:d6:eb:ba:24:04:9f:0f:1c:94:65:f0:bf:5d:7f:bd:d2:44: 29:36:21:d2:59:b5:f5:b9:1e:d5:37:78:52:0a:cf:97:49:6d: 4d:b2:a6:3a:ce:93:9c:0d:86:fc:a1:e4:d8:b2:ff:48:32:03: 77:82:9d:1b:8d:61:4d:94:b3:1b:5f:92:ed:d7:45:ca:b0:cc: 7b:1e:03:ea:f0:1e:b1:e7:75:80:70:b3:cf:a5:d3:e8:e3:4e: 5e:05:f7:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8qvQIWTj4vRAktsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDkwM2NlMmQtNThhYy00NWNhLWE4ODUtMTFmYTYxYjBlNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04tamsfMZwiz8V6S+tO0TUz8A2BX9sYnStPx 287MhXFbjB4LTT1Ln6pEv0hU5lQB6HYBJvtBwriVUXfFxhS0TniQzNrTyVYW4++G 2shelMS6BuHXVj+Evk96UaHHvFUxJXRGiShbsRWKEeznSNjqJWVHQ24MhLVgRMHp SFlYBl4KfVeMVnt6iJUjH1/5jejEesF8C2uhfHph8gyQTtaZ+OD8bAbK705VkpKF wgnwutUjBBH/DZqAKNPXAmipyI65YD9zfd5HQ8i1tmMvOgnwrlPjEm1FwQZfd8iZ bHlOYz93AjRAzQ4POiWNn8qDO32O/oLFtI6arQdMRAgp4irj1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHymxmcMhS+dGc+CsPQeDpdVGxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvZTQxZGVkZjktNmY2MS0z Zjk1LTk5YTItZGNkMjcxNWQ4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgTNAEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANsMtqa7alug49tDurtvLX8QIOknXMdeYFFv5ihXziL/YJ/+t+Sgi 3dsDAnO333K8/evA/br3X9Q9T/0gNkHh9RGCXyTTWG3anJQqdhSjXmpb3XZaC8Pz o0/K2LstZIhY5WeugmNkJsRrKBCZjoUGL/aeQiOYGXiEfMtcuJbyzGtAs5LCemfa 3Z+rCzFhmeuj3OgAuEe82lCCLIWmmpCFwcpX7dbruiQEnw8clGXwv11/vdJEKTYh 0lm19bke1Td4UgrPl0ltTbKmOs6TnA2G/KHk2LL/SDIDd4KdG41hTZSzG1+S7ddF yrDMex4D6vAesed1gHCzz6XT6ONOXgX3KA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:23:45 2026 by rpki-client