$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa File: a46157e0-a7ea-356d-a381-71067022a9b8.roa (raw, json) Hash identifier: OzvyXqNFRqR9M3CyDpkERTHZVueJfosnRcZUa0Ryu8c= Subject key identifier: 5F:19:28:10:8E:A4:5E:62:CE:59:A5:4D:98:85:22:BB:2A:DF:8D:86 Certificate issuer: /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Certificate serial: 010D0C9F4328584F2D87E39D6875241900A3F400 Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 394457 IP address blocks: 2604:2960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e3:9d:68:75:24:19:00:a3:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=40c6b057-2d3c-473c-a48e-6ed338837f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:cb:ab:8f:c6:22:97:9a:d1:39:20:3c:24: 8c:d4:0a:f0:10:35:05:4f:08:5d:23:20:25:18:cc: a3:f8:d5:ba:d5:27:37:e9:21:e2:b7:8e:02:83:b1: 13:23:95:58:78:ee:b4:aa:53:12:c7:57:97:46:8e: f9:3d:51:19:3a:89:18:99:c5:66:3d:f1:36:3f:9f: 74:af:d4:e8:31:91:9b:17:01:f6:fe:e7:20:23:17: f3:d0:9f:ef:b8:91:37:ea:79:8d:6d:f8:2f:b8:7f: d7:cf:88:38:9b:b5:3a:38:8b:9f:41:95:91:22:24: e9:1f:42:c4:dc:93:77:ea:5a:40:6a:36:21:cc:28: 8e:36:55:6e:53:b0:ab:ab:42:24:fa:99:f0:40:9d: 45:28:16:66:2b:8f:02:77:96:28:3e:9f:d1:8d:62: 40:f0:42:31:59:63:5a:dd:8c:c7:6d:48:c5:cb:d4: 01:e1:17:c8:43:ff:54:36:c1:43:62:c5:d0:64:ee: ff:46:8d:ff:32:cc:93:b3:2a:b0:74:16:d8:05:45: db:13:71:85:42:50:19:f2:1d:93:88:77:bb:a5:69: 28:f0:df:3f:03:6a:2f:9f:38:58:aa:12:5c:ea:77: fb:39:81:f8:9e:9c:e4:f9:52:11:25:73:52:87:6d: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:19:28:10:8E:A4:5E:62:CE:59:A5:4D:98:85:22:BB:2A:DF:8D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/a46157e0-a7ea-356d-a381-71067022a9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl X509v3 Authority Key Identifier: keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer sbgp-ipAddrBlock: critical IPv6: 2604:2960::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5d:ec:88:37:9f:99:3f:26:f2:6c:f9:d7:ab:fd:11:bf:32: 7c:ee:26:3a:c8:20:a1:e3:8a:98:83:e2:eb:e5:53:2a:1b:0e: 5d:0c:2d:6f:c3:4e:40:8c:f3:05:6d:01:9c:79:cf:16:ac:6f: 21:75:ae:b5:d6:81:0d:f2:7d:c7:f6:d5:dc:12:e6:27:23:22: 3c:23:b3:b8:ce:d8:7a:7c:80:2b:3c:e7:51:b1:ee:bf:b5:3b: e7:bb:2c:80:77:d0:20:c1:78:c4:d1:22:ab:1d:38:bc:13:ce: 21:b3:df:48:3a:9b:f9:02:a7:ba:24:ad:ed:e7:d7:dd:ec:2b: 01:c0:f7:96:51:3e:0b:6d:06:70:88:83:f2:19:ed:36:84:88: f7:0c:fc:00:f1:67:3c:93:f0:ec:d1:11:60:ba:4a:ad:2c:c0: 1b:aa:66:69:0f:6d:60:bf:4e:7f:2b:ca:98:fb:be:7b:16:ad: fc:1b:37:32:3a:58:cd:31:90:04:8b:5f:76:44:ae:d1:e3:8c: 8e:6e:54:49:fb:a3:9f:32:46:3e:80:22:f5:c8:54:84:ed:2e: df:00:d9:9d:d3:79:4e:fa:1f:ca:ef:9b:bb:b9:4e:48:e8:3c: 0b:df:bc:a6:51:46:9e:b3:7b:ae:00:40:8f:98:cc:a0:4a:c0: 06:bf:e5:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8th+OdaHUkGQCj9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MGU5ZTYtMzU3Zi00NTNkLWIzODYtZDcxZmQ5ZDI0 Y2Y4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NDBjNmIwNTctMmQzYy00NzNjLWE0OGUtNmVkMzM4ODM3ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyTLq4/GIpea0TkgPCSM1ArwEDUFTwhdIyAl GMyj+NW61Sc36SHit44Cg7ETI5VYeO60qlMSx1eXRo75PVEZOokYmcVmPfE2P590 r9ToMZGbFwH2/ucgIxfz0J/vuJE36nmNbfgvuH/Xz4g4m7U6OIufQZWRIiTpH0LE 3JN36lpAajYhzCiONlVuU7Crq0Ik+pnwQJ1FKBZmK48Cd5YoPp/RjWJA8EIxWWNa 3YzHbUjFy9QB4RfIQ/9UNsFDYsXQZO7/Ro3/MsyTsyqwdBbYBUXbE3GFQlAZ8h2T iHe7pWko8N8/A2ovnzhYqhJc6nf7OYH4npzk+VIRJXNSh21VwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF8ZKBCOpF5izlmlTZiFIrsq342GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTQw ZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFmZDlkMjRjZjgvYTQ2MTU3ZTAtYTdlYS0z NTZkLWEzODEtNzEwNjcwMjJhOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE0MGU5ZTYtMzU3Zi00NTNkLWIz ODYtZDcxZmQ5ZDI0Y2Y4LzRhNDBlOWU2LTM1N2YtNDUzZC1iMzg2LWQ3MWZkOWQy NGNmOC5jcmwwHwYDVR0jBBgwFoAUsk8C9KxcvUCCSc6cMNBzJoyUf8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTQwZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFm ZDlkMjRjZjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQpYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgXeyIN5+ZPybybPnXq/0RvzJ87iY6yCCh44qYg+Lr5VMqGw5dDC1v w05AjPMFbQGcec8WrG8hda611oEN8n3H9tXcEuYnIyI8I7O4zth6fIArPOdRse6/ tTvnuyyAd9AgwXjE0SKrHTi8E84hs99IOpv5Aqe6JK3t59fd7CsBwPeWUT4LbQZw iIPyGe02hIj3DPwA8Wc8k/Ds0RFgukqtLMAbqmZpD21gv05/K8qY+757Fq38Gzcy OljNMZAEi192RK7R44yOblRJ+6OfMkY+gCL1yFSE7S7fANmd03lO+h/K75u7uU5I 6DwL37ymUUaes3uuAECPmMygSsAGv+V5 -----END CERTIFICATE-----Generated at Tue Sep 22 05:04:42 2026 by rpki-client