$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa File: 9fa98f84-5902-38d4-b16f-becadb732860.roa (raw, json) Hash identifier: MR9C1lm6g9ZIbnl9pwqDCDy7TZ1ocgBxURKl3qsFLvs= Subject key identifier: B0:FD:0E:BC:0C:F4:8B:29:3F:04:7D:12:9B:8B:3E:B8:54:7E:22:25 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F4328584F2EED1C3B22A338EA3F3E3100 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 14866 IP address blocks: 2604:4280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1c:3b:22:a3:38:ea:3f:3e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=f687149a-7717-486a-935d-a956b4161151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:12:2d:36:fb:30:f6:fd:37:46:1b:ad:9a: 0b:8b:8f:a7:c4:a0:04:66:e7:44:59:8e:cc:aa:cb: f8:10:68:bc:78:ab:4e:39:7e:91:71:36:a0:75:1d: 94:8a:58:78:9d:f7:fe:85:6d:de:f8:fc:1a:1d:e4: 80:64:a2:48:47:8a:d8:1b:20:ff:eb:12:16:cd:06: 8f:5d:0f:0f:f4:58:a5:78:7f:56:d7:5a:c4:2c:10: 4d:2b:54:82:54:dd:b2:29:9a:b3:91:3a:39:1a:22: cf:ff:1b:0b:96:61:ec:5b:9b:7f:9f:d7:d4:56:fb: db:b7:d6:fc:ca:68:6c:67:b1:a7:47:c8:85:d0:55: 50:fb:62:a0:d9:c8:9e:ba:c1:a7:f0:69:b3:af:20: e7:11:11:73:8a:39:55:b5:39:59:a0:13:7e:c1:cf: a4:10:ec:0e:66:cb:6e:ac:60:78:91:16:26:1e:0b: 59:34:31:0f:f7:62:ef:ac:d3:d1:71:8c:67:3a:14: 3a:14:27:de:96:75:4c:b9:0d:e3:50:dc:1e:88:81: f8:8d:f3:2b:b9:da:09:72:8e:bd:1b:cc:64:46:62: ac:58:36:11:1a:ef:9f:d4:88:57:86:ee:45:f7:dd: 2d:26:8c:5f:c4:f8:46:fa:63:80:96:fd:54:80:02: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:0E:BC:0C:F4:8B:29:3F:04:7D:12:9B:8B:3E:B8:54:7E:22:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/9fa98f84-5902-38d4-b16f-becadb732860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv6: 2604:4280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:1e:5c:5f:80:1d:73:20:6c:af:6f:38:e0:13:e5:42:bf:0d: b5:14:fe:de:9c:2b:f4:a2:9d:0f:b6:59:8d:e2:1d:d2:a6:f1: ef:7e:b1:a2:a7:94:58:ec:da:a1:3e:3d:2b:c8:4f:c1:93:97: 8f:a8:7c:dd:04:a2:13:d1:1b:d8:4c:53:2e:ba:ff:9a:18:b5: 55:f6:b7:fb:75:4d:30:87:7c:c5:b0:48:f1:12:9a:9c:c8:aa: 8c:54:e3:a3:a1:a7:fc:53:7d:af:07:da:a2:a4:18:c2:ca:b3: 2e:da:63:56:ad:8c:c2:11:b1:18:7a:71:f6:24:69:4a:90:57: 8b:2a:14:5e:43:86:21:a2:30:d0:44:d4:b4:fd:8a:42:46:dc: c2:29:eb:11:13:16:bf:34:25:57:49:b0:11:52:9b:08:17:aa: 93:cd:66:5f:88:ef:d9:1f:74:34:c0:ff:71:37:96:d7:3a:83: 86:b2:c7:64:b5:34:11:2d:12:e3:40:a0:e0:7d:ad:58:e1:f6: 2c:9b:bf:fd:ce:f4:fc:38:bf:b1:11:db:d4:88:5f:09:7d:f9: e7:8b:52:4d:11:ff:17:09:5d:b1:d9:af:ad:c1:b3:a1:e4:5a: e1:b3:47:f7:35:01:b3:8b:fc:c7:89:8e:12:3b:c0:43:87:44: 20:97:a9:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7Rw7IqM46j8+MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjY4NzE0OWEtNzcxNy00ODZhLTkzNWQtYTk1NmI0MTYxMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncISLTb7MPb9N0YbrZoLi4+nxKAEZudEWY7M qsv4EGi8eKtOOX6RcTagdR2Uilh4nff+hW3e+PwaHeSAZKJIR4rYGyD/6xIWzQaP XQ8P9FileH9W11rELBBNK1SCVN2yKZqzkTo5GiLP/xsLlmHsW5t/n9fUVvvbt9b8 ymhsZ7GnR8iF0FVQ+2Kg2cieusGn8GmzryDnERFzijlVtTlZoBN+wc+kEOwOZstu rGB4kRYmHgtZNDEP92LvrNPRcYxnOhQ6FCfelnVMuQ3jUNweiIH4jfMrudoJco69 G8xkRmKsWDYRGu+f1IhXhu5F990tJoxfxPhG+mOAlv1UgAKTrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLD9DrwM9IspPwR9EpuLPrhUfiIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvOWZhOThmODQtNTkwMi0z OGQ0LWIxNmYtYmVjYWRiNzMyODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCxHlxfgB1zIGyvbzjgE+VCvw21FP7enCv0op0PtlmN4h3SpvHvfrGi p5RY7NqhPj0ryE/Bk5ePqHzdBKIT0RvYTFMuuv+aGLVV9rf7dU0wh3zFsEjxEpqc yKqMVOOjoaf8U32vB9qipBjCyrMu2mNWrYzCEbEYenH2JGlKkFeLKhReQ4YhojDQ RNS0/YpCRtzCKesRExa/NCVXSbARUpsIF6qTzWZfiO/ZH3Q0wP9xN5bXOoOGssdk tTQRLRLjQKDgfa1Y4fYsm7/9zvT8OL+xEdvUiF8Jffnni1JNEf8XCV2x2a+twbOh 5Frhs0f3NQGzi/zHiY4SO8BDh0Qgl6mA -----END CERTIFICATE-----Generated at Mon Sep 21 23:35:16 2026 by rpki-client