$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa File: ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa (raw, json) Hash identifier: THKS7htDJSI1kStdXPEPjl+dM/o4K4YNqszeeaU2/Co= Subject key identifier: 92:10:4B:95:C1:4B:4F:0F:E4:0B:86:07:CE:2D:6A:69:D5:E8:04:EF Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584F20F7AAF5468FEF29AE706E00 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 62856 IP address blocks: 2620:130:f000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:aa:f5:46:8f:ef:29:ae:70:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=809cb855-c35a-4190-a636-6bc9c07e9c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:3f:34:4d:e0:ee:82:1f:b2:ed:af:87:d2: 08:c6:30:19:6e:2c:b8:6c:70:56:6a:4f:29:ad:6d: 94:a1:5c:3c:bf:7d:99:96:55:28:6a:5e:ab:93:99: 7d:e8:f7:1f:c4:60:1b:fb:fc:6a:be:21:a4:db:39: a0:66:b9:13:49:8d:2e:b0:83:ed:a8:fe:04:86:5f: 8e:b8:96:ae:71:5d:fc:f3:c1:29:6f:fe:74:b5:c5: c9:4d:54:ec:c3:e7:f7:ad:d4:76:68:a5:8d:ff:e7: d8:08:6b:2d:96:0d:bd:d9:eb:49:53:2c:f3:e2:ae: 23:8b:c7:64:0f:ae:4b:e8:27:57:5c:c8:d0:cc:c2: b1:1f:6b:3e:9d:ab:9b:ae:bb:c8:c4:12:c1:6b:12: eb:6e:e5:23:27:aa:da:f0:85:a0:08:c9:5d:22:18: 13:f0:92:29:4c:fb:55:8e:28:75:e8:0a:e7:a8:6c: f6:54:97:dc:9f:8d:31:f9:df:90:7a:8a:ca:7c:b3: ed:8d:cf:e3:51:2f:8a:e4:8d:17:33:ed:a1:a8:aa: 23:0e:79:00:3d:47:7d:ed:2c:a4:b3:5d:92:a0:6a: f3:a1:d6:b0:85:f4:dc:55:36:7e:85:80:30:7f:c9: c0:42:03:ce:2e:af:0a:9e:14:3a:6a:29:1f:d0:97: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:10:4B:95:C1:4B:4F:0F:E4:0B:86:07:CE:2D:6A:69:D5:E8:04:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ad8b40e5-f3f4-32b6-b6d9-eaf45b1370f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:30:46:d5:7d:fd:59:c2:8c:40:8d:62:02:c9:5e:80:d2:93: 4d:f9:03:8b:2d:79:6a:f2:08:43:a9:c9:a0:b5:1c:1a:d8:37: 78:6c:57:ab:81:86:c5:ea:90:85:3e:78:67:71:ca:77:02:b7: 16:e5:57:3b:eb:ce:ea:96:2f:2c:5e:e1:e0:a7:37:98:02:de: a3:1f:d7:3a:cb:2d:d3:4b:74:92:2a:dc:4c:a1:25:eb:1c:c2: 28:1b:4b:7f:93:27:1c:b4:31:51:af:18:a6:b3:18:57:3c:e0: b0:51:29:9a:92:9a:f9:c9:95:0c:ca:76:37:40:3a:15:0d:a9: f4:8c:4a:85:59:33:19:f0:1b:a0:99:53:91:69:81:c1:e6:eb: 86:6d:3d:1b:bc:84:91:15:79:12:ab:6d:51:3a:99:06:78:f3: 14:65:0e:e0:22:bb:63:07:72:32:89:9d:62:23:55:91:7b:4e: 54:b5:50:aa:5e:b3:24:7c:b1:53:2f:b6:9b:6e:9d:eb:48:6d: ee:c4:9b:73:82:9a:78:74:fa:6d:ef:87:6a:7e:13:a5:9e:ff: 96:57:7b:f2:22:e8:31:c4:5f:f0:da:21:2d:95:6f:11:13:6e: 6c:f7:8e:e2:67:4e:8a:44:43:0a:6b:9f:8e:41:5b:9c:1e:6f: 48:6b:f4:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g96r1Ro/vKa5wbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODA5Y2I4NTUtYzM1YS00MTkwLWE2MzYtNmJjOWMwN2U5YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQM/NE3g7oIfsu2vh9IIxjAZbiy4bHBWak8p rW2UoVw8v32ZllUoal6rk5l96PcfxGAb+/xqviGk2zmgZrkTSY0usIPtqP4Ehl+O uJaucV3888Epb/50tcXJTVTsw+f3rdR2aKWN/+fYCGstlg292etJUyzz4q4ji8dk D65L6CdXXMjQzMKxH2s+naubrrvIxBLBaxLrbuUjJ6ra8IWgCMldIhgT8JIpTPtV jih16ArnqGz2VJfcn40x+d+QeorKfLPtjc/jUS+K5I0XM+2hqKojDnkAPUd97Syk s12SoGrzodawhfTcVTZ+hYAwf8nAQgPOLq8KnhQ6aikf0JdWRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIQS5XBS08P5AuGB84tamnV6ATvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvYWQ4YjQwZTUtZjNmNC0z MmI2LWI2ZDktZWFmNDViMTM3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAwRtV9/VnCjECNYgLJXoDSk035A4steWryCEOpyaC1HBrYN3hs V6uBhsXqkIU+eGdxyncCtxblVzvrzuqWLyxe4eCnN5gC3qMf1zrLLdNLdJIq3Eyh JescwigbS3+TJxy0MVGvGKazGFc84LBRKZqSmvnJlQzKdjdAOhUNqfSMSoVZMxnw G6CZU5FpgcHm64ZtPRu8hJEVeRKrbVE6mQZ48xRlDuAiu2MHcjKJnWIjVZF7TlS1 UKpesyR8sVMvtptunetIbe7Em3OCmnh0+m3vh2p+E6We/5ZXe/Ii6DHEX/DaIS2V bxETbmz3juJnTopEQwprn45BW5web0hr9Oo= -----END CERTIFICATE-----Generated at Sun Sep 20 19:41:38 2026 by rpki-client