$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa File: fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa (raw, json) Hash identifier: MpCbfdgVnrFYggLdpRWXqGS43O8qrvLM5sIxNZUXn/0= Subject key identifier: 60:25:3D:61:C1:52:16:C1:6C:53:A4:93:5B:62:8F:4B:41:2C:E5:70 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584F20F7AEE8429B41DA39F65360 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 62856 IP address blocks: 2620:130:f001::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ae:e8:42:9b:41:da:39:f6:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=120e3e2b-38d3-44ee-a2e1-da0dee4e9a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:e1:04:4e:4a:e5:88:4e:cb:13:c0:42:70: a7:47:2b:e5:df:8d:89:fb:d9:f9:a6:05:68:b5:5d: f2:50:31:de:6b:02:0c:10:68:25:07:5a:ae:e0:d7: 70:2c:ad:bc:ba:59:41:07:f8:85:be:63:97:48:73: a2:ab:c9:21:55:bc:8f:42:fe:0f:3c:5c:58:13:81: f7:5a:17:07:ee:c2:1b:f4:1b:33:08:78:2e:f3:43: 3f:3a:f9:35:1c:ae:0f:5d:70:79:08:ab:4f:e2:e2: cc:fe:f9:c8:e9:53:ad:24:e9:9d:99:86:55:34:c6: 11:63:73:22:65:3a:a3:b5:98:d3:c1:07:f0:ba:a1: d4:0d:c4:d2:ca:bb:51:95:13:58:55:59:16:62:c8: 2b:60:07:2f:e9:a1:46:cf:8f:01:8b:7b:73:4b:ab: 28:ce:24:25:4b:f4:2d:d7:01:c5:35:81:1a:59:66: 96:a7:cd:85:53:77:36:74:11:80:12:31:a5:37:cc: 33:88:8f:0f:50:2f:41:d2:d3:63:08:12:06:2b:74: 5e:36:22:95:27:d7:c3:41:06:d2:80:8e:87:2e:ac: f9:ac:7c:85:0a:47:74:f2:af:03:90:dc:45:3e:39: 8d:e8:af:a8:e4:40:48:a3:7f:d4:5e:16:31:17:5c: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:25:3D:61:C1:52:16:C1:6C:53:A4:93:5B:62:8F:4B:41:2C:E5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/fb4fa6ad-6a59-35fc-ae9f-11e188719cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv6: 2620:130:f001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5b:7a:1a:94:e5:5d:87:41:9e:50:92:e5:90:4b:01:1f:cb: f7:21:c5:d8:47:07:ca:29:0e:6e:13:5e:cb:b5:f0:f1:ed:77: ac:c8:88:fa:34:25:bf:2b:68:9d:6b:fd:cd:fa:44:49:0b:0e: 40:7b:83:dd:f8:e1:ee:6b:67:10:4f:37:34:b4:a8:c2:61:81: eb:ac:bb:63:26:d2:26:0b:2a:c1:49:10:80:d7:6a:ab:35:47: 76:dd:34:09:9f:bd:93:a4:e9:5b:b0:0b:be:5e:b6:fb:ab:0b: 54:50:f6:f2:74:2b:61:2c:70:92:65:81:58:60:e1:59:63:ad: 18:78:07:4e:43:4d:cf:fe:28:42:2f:92:41:1d:07:09:ce:a0: 45:dd:8a:d2:4b:bc:d0:10:ec:e4:cc:ee:6d:6b:c6:f1:a8:e2: c1:fe:e2:e6:ab:47:6b:b2:83:ed:c8:50:18:ee:27:07:9e:f4: c3:67:de:16:8e:50:64:df:41:97:f4:56:21:8a:32:5f:5c:c7: 0a:2e:bd:66:dd:31:4f:59:33:e8:29:fc:27:13:0d:bc:41:ec: 5c:5d:33:8f:0d:71:e1:64:5d:dc:85:7b:b9:fd:8a:44:77:12: 43:3c:99:1e:ad:b2:8b:cf:99:41:9e:f9:c5:06:eb:a3:e7:3e: 56:a2:2c:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g967oQptB2jn2U2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTIwZTNlMmItMzhkMy00NGVlLWEyZTEtZGEwZGVlNGU5YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFXhBE5K5YhOyxPAQnCnRyvl342J+9n5pgVo tV3yUDHeawIMEGglB1qu4NdwLK28ullBB/iFvmOXSHOiq8khVbyPQv4PPFxYE4H3 WhcH7sIb9BszCHgu80M/Ovk1HK4PXXB5CKtP4uLM/vnI6VOtJOmdmYZVNMYRY3Mi ZTqjtZjTwQfwuqHUDcTSyrtRlRNYVVkWYsgrYAcv6aFGz48Bi3tzS6soziQlS/Qt 1wHFNYEaWWaWp82FU3c2dBGAEjGlN8wziI8PUC9B0tNjCBIGK3ReNiKVJ9fDQQbS gI6HLqz5rHyFCkd08q8DkNxFPjmN6K+o5EBIo3/UXhYxF1yLoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAlPWHBUhbBbFOkk1tij0tBLOVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZmI0ZmE2YWQtNmE1OS0z NWZjLWFlOWYtMTFlMTg4NzE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABMPAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVbehqU5V2HQZ5QkuWQSwEfy/chxdhHB8opDm4TXsu18PHtd6zI iPo0Jb8raJ1r/c36REkLDkB7g9344e5rZxBPNzS0qMJhgeusu2Mm0iYLKsFJEIDX aqs1R3bdNAmfvZOk6VuwC75etvurC1RQ9vJ0K2EscJJlgVhg4VljrRh4B05DTc/+ KEIvkkEdBwnOoEXditJLvNAQ7OTM7m1rxvGo4sH+4uarR2uyg+3IUBjuJwee9MNn 3haOUGTfQZf0ViGKMl9cxwouvWbdMU9ZM+gp/CcTDbxB7FxdM48NceFkXdyFe7n9 ikR3EkM8mR6tsovPmUGe+cUG66PnPlaiLFg= -----END CERTIFICATE-----Generated at Sun Sep 20 20:33:28 2026 by rpki-client