$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/382f1a4a-a7a6-3832-909a-9cd589ca69cf.roa File: 382f1a4a-a7a6-3832-909a-9cd589ca69cf.roa (raw, json) Hash identifier: XRZKDqJYPO7WDGkoils7gZ4oOZH9sJI5CstvMeTH+wQ= Subject key identifier: EF:B4:2C:0F:DC:FF:A3:32:A1:45:78:94:77:B5:12:85:48:7F:FE:DE Certificate issuer: /CN=8380c256-af1c-4f3e-99d1-da4d22642a58 Certificate serial: 010D0C9F4328584F49886F4EFE1E4D15ACD965C0 Authority key identifier: 04:9E:8F:F6:E0:9D:BF:73:76:EF:BF:C9:88:54:04:ED:2D:98:2B:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/382f1a4a-a7a6-3832-909a-9cd589ca69cf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15248 IP address blocks: 2620:104:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/8380c256-af1c-4f3e-99d1-da4d22642a58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/8380c256-af1c-4f3e-99d1-da4d22642a58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:6f:4e:fe:1e:4d:15:ac:d9:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8380c256-af1c-4f3e-99d1-da4d22642a58 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca0906a3-54c2-459e-94c6-3c8c5082a6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:be:9e:78:2c:bd:79:c1:63:b9:ad:ba:6b: bd:52:45:47:fe:52:be:57:41:87:7e:ce:37:50:42: 7c:62:7e:97:bd:02:05:26:4d:19:a5:99:3d:d7:84: a5:7e:58:f6:3f:61:12:fd:74:16:10:d7:5d:68:9e: 50:5e:7e:bf:2c:31:f7:bf:98:3a:b0:46:1f:1d:16: 78:e2:01:01:67:c5:f0:c4:86:c9:14:02:86:21:e6: f0:fc:ee:af:f7:43:77:00:a0:7f:28:d6:18:23:a4: 38:9b:b8:57:d8:6e:df:39:22:d9:52:5b:fb:c5:f1: 9a:50:34:c5:6d:e0:17:54:13:86:44:f2:a8:ac:84: ea:b6:2f:d9:f3:d1:41:63:b2:e0:ba:ee:88:83:af: 8f:d7:06:22:3f:87:f9:b8:cf:38:fd:9b:c1:37:90: a3:40:ba:71:5a:99:22:c3:13:88:f9:33:55:c4:af: 2e:10:a0:1f:d3:b2:61:11:09:33:c9:26:cb:8d:34: bc:d3:2a:31:b8:fa:63:a7:40:a2:47:4f:d2:2e:f0: 9d:26:50:00:5b:ac:18:9e:90:c8:62:25:50:9e:d1: 75:7e:35:93:65:94:de:0b:4e:b2:5c:93:d2:c6:c4: 80:fb:1c:47:75:8e:4d:70:34:ab:37:34:1b:da:02: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:2C:0F:DC:FF:A3:32:A1:45:78:94:77:B5:12:85:48:7F:FE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/382f1a4a-a7a6-3832-909a-9cd589ca69cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58/8380c256-af1c-4f3e-99d1-da4d22642a58.crl X509v3 Authority Key Identifier: keyid:04:9E:8F:F6:E0:9D:BF:73:76:EF:BF:C9:88:54:04:ED:2D:98:2B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8380c256-af1c-4f3e-99d1-da4d22642a58.cer sbgp-ipAddrBlock: critical IPv6: 2620:104:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2b:27:20:04:1c:34:2c:14:df:87:ec:4c:0e:2b:2a:61:df: a1:6f:3d:05:74:d4:fc:29:bb:97:01:1f:6e:9b:b7:9f:10:d9: 6c:83:bf:97:d9:97:89:2a:1d:c4:f4:55:71:61:0c:b2:dc:c4: 00:8f:6e:85:f5:52:52:be:8c:ec:8d:1c:65:db:82:90:72:10: 26:9e:10:09:27:28:8c:53:f5:88:40:aa:62:04:81:79:4b:ce: 3a:ca:81:de:82:09:58:b8:fa:65:1e:bf:17:d2:01:ab:9f:b4: 41:60:66:8a:66:0b:fa:74:49:5c:26:25:61:e7:07:05:74:c3: 3a:ee:0f:dd:76:73:9e:c3:16:86:2f:a0:e7:f6:cf:a5:df:be: ac:e6:ac:62:0e:50:1c:c6:23:0e:e7:ad:d9:ec:c2:b1:c4:df: 6b:21:5a:43:c5:2c:8b:98:5d:64:ef:3e:24:26:36:45:a5:1a: c1:e1:c1:9e:bb:a3:06:c0:0c:17:ea:62:25:eb:28:da:43:13: d1:26:bf:38:c1:64:11:3a:4c:10:6e:b4:df:a4:b1:42:6d:b6: b3:be:b2:3e:df:39:5f:e0:9f:cc:cc:67:17:e9:16:d9:37:b0: 4c:1c:56:10:91:dd:0e:e5:e3:3d:00:25:de:f2:75:bf:17:c8: 14:dc:8e:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiG9O/h5NFazZZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4MGMyNTYtYWYxYy00ZjNlLTk5ZDEtZGE0ZDIyNjQy YTU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2EwOTA2YTMtNTRjMi00NTllLTk0YzYtM2M4YzUwODJhNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDa+nngsvXnBY7mtumu9UkVH/lK+V0GHfs43 UEJ8Yn6XvQIFJk0ZpZk914Slflj2P2ES/XQWENddaJ5QXn6/LDH3v5g6sEYfHRZ4 4gEBZ8XwxIbJFAKGIebw/O6v90N3AKB/KNYYI6Q4m7hX2G7fOSLZUlv7xfGaUDTF beAXVBOGRPKorITqti/Z89FBY7Lguu6Ig6+P1wYiP4f5uM84/ZvBN5CjQLpxWpki wxOI+TNVxK8uEKAf07JhEQkzySbLjTS80yoxuPpjp0CiR0/SLvCdJlAAW6wYnpDI YiVQntF1fjWTZZTeC06yXJPSxsSA+xxHdY5NcDSrNzQb2gJrnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO+0LA/c/6MyoUV4lHe1EoVIf/7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzgw YzI1Ni1hZjFjLTRmM2UtOTlkMS1kYTRkMjI2NDJhNTgvMzgyZjFhNGEtYTdhNi0z ODMyLTkwOWEtOWNkNTg5Y2E2OWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4MGMyNTYtYWYxYy00ZjNlLTk5 ZDEtZGE0ZDIyNjQyYTU4LzgzODBjMjU2LWFmMWMtNGYzZS05OWQxLWRhNGQyMjY0 MmE1OC5jcmwwHwYDVR0jBBgwFoAUBJ6P9uCdv3N277/JiFQE7S2YKwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzgwYzI1Ni1hZjFjLTRmM2UtOTlkMS1kYTRk MjI2NDJhNTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABBEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkrJyAEHDQsFN+H7EwOKyph36FvPQV01Pwpu5cBH26bt58Q2WyD v5fZl4kqHcT0VXFhDLLcxACPboX1UlK+jOyNHGXbgpByECaeEAknKIxT9YhAqmIE gXlLzjrKgd6CCVi4+mUevxfSAauftEFgZopmC/p0SVwmJWHnBwV0wzruD912c57D FoYvoOf2z6XfvqzmrGIOUBzGIw7nrdnswrHE32shWkPFLIuYXWTvPiQmNkWlGsHh wZ67owbADBfqYiXrKNpDE9EmvzjBZBE6TBButN+ksUJttrO+sj7fOV/gn8zMZxfp Ftk3sEwcVhCR3Q7l4z0AJd7ydb8XyBTcjqA= -----END CERTIFICATE-----Generated at Mon Sep 28 23:29:59 2026 by rpki-client