$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: XAvjAKDl2l1AhmU6Jc7i6B/YFtDBtpCbCpfmHwTgiyE= Subject key identifier: B8:63:6F:89:04:69:8A:9C:66:F9:EC:BC:17:10:3F:9F:A1:38:F6:60 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F49757FAB459634531D9EE750 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:7f:ab:45:96:34:53:1d:9e:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1650606-85aa-4513-82f1-8c371f3a341c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:f7:1a:21:e1:0c:d0:0c:8f:bf:49:30:49: 0c:e0:53:59:f4:0e:6e:86:5a:43:a5:99:6d:fd:08: 55:e1:32:f6:fe:9b:a1:62:cf:9e:59:82:b9:bb:0d: 5d:8d:ef:be:3e:3c:c2:2d:7a:05:60:61:8a:d0:af: c5:e1:e9:5e:7d:8a:60:3c:5f:3a:c9:b4:38:1b:1f: c1:50:4d:bb:0d:54:b2:c6:75:c6:8a:bf:c7:26:6a: a1:9d:e7:8f:3e:ba:1a:24:ae:2a:fc:4b:2e:af:52: 30:b4:33:6b:a9:80:bf:03:7c:1c:9e:b6:69:cd:e5: 22:d8:2b:b6:90:5c:21:11:0c:c4:55:8f:7f:02:54: 55:b8:f2:64:e0:24:7d:03:61:e5:24:60:1f:d6:31: 10:19:cf:a1:d7:6e:97:a3:82:84:fe:67:f5:3f:13: df:8b:ca:50:28:5a:97:f8:df:33:1f:2b:3e:ad:c7: a4:ea:fb:a8:07:0f:67:e1:be:e2:fe:66:80:31:49: 65:b6:64:c6:a0:48:c1:92:b6:a3:21:13:d1:40:41: 7e:8a:34:9d:9f:42:18:80:2b:b2:55:12:82:b1:df: 0c:73:ae:86:59:49:c7:dc:3e:ef:6c:21:c8:4e:cf: 59:df:7c:66:5d:b2:ad:9a:e4:ba:cd:c1:a0:39:52: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:6F:89:04:69:8A:9C:66:F9:EC:BC:17:10:3F:9F:A1:38:F6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:73:e2:28:35:e4:7b:b9:18:b0:89:45:6d:bd:96:c5:d0:75: 0a:55:5b:80:c1:0d:25:a4:4a:7a:5c:a2:af:75:f0:a4:eb:d7: ab:e2:6d:eb:33:3b:94:3c:1e:b5:73:a4:ad:53:77:d0:27:f0: ea:c8:9f:0c:e3:8d:cb:fb:09:ea:05:c1:5a:69:5a:67:8f:3b: 46:54:18:cd:b7:fe:7b:36:11:ea:7c:f3:9a:43:63:82:30:60: f3:a6:b4:f4:e5:0f:14:fd:89:06:28:16:8e:f6:90:9a:d1:be: 76:a5:85:a5:15:34:0b:97:49:31:00:aa:02:97:e0:4e:8e:79: 9f:29:72:0c:0f:9f:9d:7e:27:81:94:9a:04:58:7a:e1:26:ee: 30:d0:bb:2c:73:be:2f:30:2b:3a:d3:05:59:ab:7f:20:cd:4d: b5:88:8a:05:00:38:42:73:c9:84:a3:56:1e:2c:2a:13:a8:a6: 2a:fb:5f:fa:a5:ae:f1:3f:58:5f:54:3f:17:f5:ba:86:b2:5c: 75:f8:e0:9c:dc:a8:63:d9:e6:b6:4c:2f:cb:c8:28:34:67:9b: 36:03:75:10:92:cb:81:12:09:50:b2:aa:f4:65:b7:10:60:72: df:9c:d1:2c:d1:b8:09:f9:b2:2e:d5:bc:7f:6f:85:95:10:73: 28:5a:76:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdX+rRZY0Ux2e51AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE2NTA2MDYtODVhYS00NTEzLTgyZjEtOGMzNzFmM2EzNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+H3GiHhDNAMj79JMEkM4FNZ9A5uhlpDpZlt /QhV4TL2/puhYs+eWYK5uw1dje++PjzCLXoFYGGK0K/F4elefYpgPF86ybQ4Gx/B UE27DVSyxnXGir/HJmqhneePProaJK4q/Esur1IwtDNrqYC/A3wcnrZpzeUi2Cu2 kFwhEQzEVY9/AlRVuPJk4CR9A2HlJGAf1jEQGc+h126Xo4KE/mf1PxPfi8pQKFqX +N8zHys+rcek6vuoBw9n4b7i/maAMUlltmTGoEjBkrajIRPRQEF+ijSdn0IYgCuy VRKCsd8Mc66GWUnH3D7vbCHITs9Z33xmXbKtmuS6zcGgOVJPBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLhjb4kEaYqcZvnsvBcQP5+hOPZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoc+IoNeR7uRiwiUVtvZbF0HUKVVuAwQ0lpEp6XKKvdfCk69er4m3r MzuUPB61c6StU3fQJ/DqyJ8M443L+wnqBcFaaVpnjztGVBjNt/57NhHqfPOaQ2OC MGDzprT05Q8U/YkGKBaO9pCa0b52pYWlFTQLl0kxAKoCl+BOjnmfKXIMD5+dfieB lJoEWHrhJu4w0Lssc74vMCs60wVZq38gzU21iIoFADhCc8mEo1YeLCoTqKYq+1/6 pa7xP1hfVD8X9bqGslx1+OCc3Khj2ea2TC/LyCg0Z5s2A3UQksuBEglQsqr0ZbcQ YHLfnNEs0bgJ+bIu1bx/b4WVEHMoWnZe -----END CERTIFICATE-----Generated at Mon Sep 28 22:36:52 2026 by rpki-client