$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: 1aMV4w7SGHUwseTMs7mjG0VmrVtsevaLUhMimXY8nTU= Subject key identifier: 44:65:56:6E:03:1D:65:BA:66:8D:B3:60:FF:19:E1:2B:5F:5A:F8:7C Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584F31B7BB9C9DAC93C2824C7F10 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bb:9c:9d:ac:93:c2:82:4c:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=b5b0344e-128e-49aa-9a28-bc63e8916cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:3b:10:d8:01:d7:e4:2d:ec:03:da:54:47: f1:6e:a4:01:c0:3f:aa:68:08:a1:f3:3e:32:ab:cd: 07:24:96:f7:52:27:7b:00:67:2f:ea:2e:aa:65:38: 94:6c:32:cd:54:90:e7:87:db:92:d0:52:5b:12:52: 14:27:e0:0f:f9:29:16:9a:57:22:37:0a:da:50:fa: 0f:f2:dc:fd:c0:b6:20:87:62:5c:98:2b:86:69:9a: c9:25:38:20:a9:a5:fc:05:45:12:85:da:09:fa:a2: a5:3d:5b:20:18:c2:f7:a4:0a:ca:ac:49:29:7e:87: ed:fc:17:42:a3:62:50:29:e0:bb:06:85:e2:e3:15: 75:a8:90:3b:e8:c0:8c:a8:63:d7:16:20:dd:37:41: fe:66:5b:c2:14:7c:48:b3:5d:9b:04:c3:f7:0d:85: 57:c9:eb:4e:e6:4f:52:d5:a7:0f:e3:4a:b4:18:74: e9:da:15:85:97:74:df:91:ba:ba:52:8a:ca:ca:f7: 73:eb:ba:4a:6f:b3:42:35:02:35:f5:45:fb:24:4e: 4d:0e:4d:33:2e:07:74:51:fe:a1:7d:0f:54:a3:0b: 2e:c3:99:19:66:48:3f:62:c3:26:6e:4a:a0:1b:23: cf:0c:b3:8a:4b:e9:1c:34:88:57:ff:49:eb:1d:1d: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:56:6E:03:1D:65:BA:66:8D:B3:60:FF:19:E1:2B:5F:5A:F8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:05:aa:6d:63:86:14:03:fd:10:e6:e1:88:f3:70:c9:e1:7c: 9e:c5:74:4c:52:20:e3:1c:c4:ca:08:70:9f:06:c0:1a:e4:fd: b4:7a:35:f0:f7:03:63:82:0d:dd:77:05:27:5b:4a:d3:fd:8c: 46:80:6c:8b:91:b5:98:88:42:9b:47:f1:1c:2f:6e:87:e4:60: d6:63:4d:d0:01:25:a8:24:1d:ca:89:bf:44:c2:67:d7:56:29: 2a:8a:9e:03:3c:20:b7:21:db:ad:5b:55:35:c8:55:e5:3d:50: 52:25:01:06:04:31:60:bc:29:37:42:50:f6:21:63:ca:22:6d: a7:e0:4d:b3:40:ed:57:cd:3b:14:f7:ef:44:9a:dc:53:52:53: 61:f2:39:3a:0e:d1:5f:e2:41:71:cd:b2:94:5d:85:d6:02:1d: 51:08:94:10:84:47:53:6e:00:6c:4c:be:70:72:1c:c0:a6:36: c8:26:c2:2a:90:b2:cc:6b:18:c8:86:bf:99:86:94:e7:6c:26: 39:4e:3c:b3:ee:1f:50:54:77:94:01:f5:b7:86:db:53:cc:68: be:a3:76:35:e6:a3:e1:97:95:01:b1:0c:02:56:15:3b:12:f6: 54:8f:1b:f5:05:73:f0:40:22:4e:5e:ce:64:1f:18:3f:b8:fa: f9:1c:61:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8xt7ucnayTwoJMfxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YjViMDM0NGUtMTI4ZS00OWFhLTlhMjgtYmM2M2U4OTE2Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBM7ENgB1+Qt7APaVEfxbqQBwD+qaAih8z4y q80HJJb3Uid7AGcv6i6qZTiUbDLNVJDnh9uS0FJbElIUJ+AP+SkWmlciNwraUPoP 8tz9wLYgh2JcmCuGaZrJJTggqaX8BUUShdoJ+qKlPVsgGML3pArKrEkpfoft/BdC o2JQKeC7BoXi4xV1qJA76MCMqGPXFiDdN0H+ZlvCFHxIs12bBMP3DYVXyetO5k9S 1acP40q0GHTp2hWFl3Tfkbq6UorKyvdz67pKb7NCNQI19UX7JE5NDk0zLgd0Uf6h fQ9Uowsuw5kZZkg/YsMmbkqgGyPPDLOKS+kcNIhX/0nrHR1sbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFERlVm4DHWW6Zo2zYP8Z4StfWvh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYBaptY4YUA/0Q5uGI83DJ4XyexXRMUiDjHMTKCHCfBsAa5P20ejXw 9wNjgg3ddwUnW0rT/YxGgGyLkbWYiEKbR/EcL26H5GDWY03QASWoJB3Kib9EwmfX Vikqip4DPCC3IdutW1U1yFXlPVBSJQEGBDFgvCk3QlD2IWPKIm2n4E2zQO1XzTsU 9+9EmtxTUlNh8jk6DtFf4kFxzbKUXYXWAh1RCJQQhEdTbgBsTL5wchzApjbIJsIq kLLMaxjIhr+ZhpTnbCY5Tjyz7h9QVHeUAfW3httTzGi+o3Y15qPhl5UBsQwCVhU7 EvZUjxv1BXPwQCJOXs5kHxg/uPr5HGHL -----END CERTIFICATE-----Generated at Thu Sep 24 07:18:25 2026 by rpki-client