$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json) Hash identifier: N8Wqds2ToPqsbXcADiE9JOsbaDJ5TuUjNVgaXtprR1o= Subject key identifier: 03:9D:AD:7C:D7:2B:CC:F8:29:EA:4A:96:F1:5D:89:19:32:9F:5D:8F Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584F1467948FC55EA3580A56E500 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36236 IP address blocks: 2620:49:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:94:8f:c5:5e:a3:58:0a:56:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=4a096f5c-189b-4baf-b594-bf9c303c8b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:50:50:a9:07:96:5f:91:ab:7f:1b:33:40: a7:b1:b2:3e:df:75:fb:75:38:30:f7:07:f4:97:7b: 3e:16:a3:c8:81:e0:8d:d6:70:ed:13:79:40:4f:c6: bf:fc:34:16:de:ae:3d:aa:10:ed:55:40:ba:bc:67: 73:43:1a:c9:78:2b:07:48:0d:8e:1e:b2:73:7e:aa: f7:b6:ef:f1:72:42:a3:9c:4e:db:dd:66:2a:a8:04: 38:7c:8f:61:14:f6:ec:73:d3:2b:55:ed:b5:df:72: 89:2a:d1:d5:51:d5:58:97:66:f5:7d:05:31:19:d1: 17:16:e2:38:42:a6:45:c9:75:43:47:1b:a8:a6:4b: e6:18:8c:07:3d:fb:b5:59:f4:72:97:d6:96:21:40: 5a:66:65:ab:f6:37:ee:49:16:3b:e3:d1:86:db:61: d3:f1:6b:0d:c6:05:01:ab:14:71:b8:f6:49:7a:d0: f2:77:29:8a:de:f6:53:40:85:fe:8b:4e:43:72:99: 51:29:14:f8:7d:ab:21:5a:ae:58:b2:d9:14:02:3c: 3d:57:b2:6a:3f:9b:72:7d:1d:2f:93:55:27:34:7b: a6:a8:6c:9b:fd:5f:1f:54:35:83:92:38:77:54:be: 8f:63:68:f2:c9:e2:51:99:c8:e8:47:62:b1:0d:94: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9D:AD:7C:D7:2B:CC:F8:29:EA:4A:96:F1:5D:89:19:32:9F:5D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ad:e6:3e:0f:cf:b1:94:ca:2f:d4:7a:2a:32:de:5e:e6:2d: af:da:b4:80:00:3f:f5:e2:04:7e:3b:86:1d:c9:b4:02:f2:84: a2:45:9d:75:48:8c:e8:b3:3f:3d:46:83:17:a1:84:29:1a:13: 48:8d:91:7f:8b:61:47:d7:a8:fe:09:82:ba:a5:86:00:e5:2c: ed:05:f8:90:ae:01:d4:de:4a:90:8e:00:4d:95:13:07:dd:aa: 2a:41:2d:d4:24:b9:98:6f:22:5c:d4:c2:fe:3b:d6:1f:3c:36: 38:78:8e:5c:52:fc:6a:7e:80:fd:bc:ec:ff:3f:ad:7f:ca:70: 74:6b:f8:6c:7e:da:3d:0a:71:c3:3d:9b:cb:2d:0a:ff:c1:bf: 37:fc:dd:25:41:1b:95:1a:e4:0e:57:dc:8c:2c:f5:6b:f6:24: 5f:f2:65:67:fa:ec:f8:a6:ff:9f:13:42:6e:27:de:e8:2e:7a: 06:2e:d3:0f:a4:0e:13:97:1c:c1:bc:23:62:f9:69:0a:9c:e3: 9c:cc:a6:34:fa:60:bf:d1:91:5c:3d:31:f6:96:f0:2b:51:96: 55:f2:87:b4:11:2b:24:17:fe:e0:11:48:9e:90:a8:60:76:c7: 3a:b9:a6:d9:53:ed:93:10:5c:ec:70:a0:64:ab:6f:9b:88:45: ba:34:6f:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5SPxV6jWApW5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NGEwOTZmNWMtMTg5Yi00YmFmLWI1OTQtYmY5YzMwM2M4YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2lQUKkHll+Rq38bM0CnsbI+33X7dTgw9wf0 l3s+FqPIgeCN1nDtE3lAT8a//DQW3q49qhDtVUC6vGdzQxrJeCsHSA2OHrJzfqr3 tu/xckKjnE7b3WYqqAQ4fI9hFPbsc9MrVe2133KJKtHVUdVYl2b1fQUxGdEXFuI4 QqZFyXVDRxuopkvmGIwHPfu1WfRyl9aWIUBaZmWr9jfuSRY749GG22HT8WsNxgUB qxRxuPZJetDydymK3vZTQIX+i05DcplRKRT4fashWq5YstkUAjw9V7JqP5tyfR0v k1UnNHumqGyb/V8fVDWDkjh3VL6PY2jyyeJRmcjoR2KxDZTljwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAOdrXzXK8z4KepKlvFdiRkyn12PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZGY4N2JiNzItZGM1Mi0z NjM5LWEwYWYtZGNiYTM1MDliZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHit5j4Pz7GUyi/Ueioy3l7mLa/atIAAP/XiBH47hh3JtALyhKJF nXVIjOizPz1GgxehhCkaE0iNkX+LYUfXqP4JgrqlhgDlLO0F+JCuAdTeSpCOAE2V EwfdqipBLdQkuZhvIlzUwv471h88Njh4jlxS/Gp+gP287P8/rX/KcHRr+Gx+2j0K ccM9m8stCv/Bvzf83SVBG5Ua5A5X3Iws9Wv2JF/yZWf67Pim/58TQm4n3uguegYu 0w+kDhOXHMG8I2L5aQqc45zMpjT6YL/RkVw9MfaW8CtRllXyh7QRKyQX/uARSJ6Q qGB2xzq5ptlT7ZMQXOxwoGSrb5uIRbo0b3I= -----END CERTIFICATE-----Generated at Tue Sep 22 05:15:21 2026 by rpki-client