$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa File: 454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa (raw, json) Hash identifier: wChcrxVx3qnQdmL+OnWX8M5aYQIyMojQzRmjmJajCfg= Subject key identifier: 3C:48:5F:2E:CA:C3:BB:82:D2:93:1F:CF:F7:B0:61:68:64:1B:3D:93 Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584EFCACC28EF74066F16D537E80 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2606:7740:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c2:8e:f7:40:66:f1:6d:53:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=f3342963-1a5b-49b8-b549-5f400d7f9c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:8d:7c:8a:d0:c0:da:dc:e8:9b:13:5a:b6: 24:7b:48:59:cb:53:2a:3c:3a:5a:67:4f:06:69:d4: 7e:90:68:df:ca:d9:83:9b:fa:9e:d5:d6:b2:ec:12: 72:6a:1a:e8:16:45:57:86:40:53:2b:ae:81:b5:0c: cc:d7:1a:fa:6f:a0:fa:5c:dd:c7:84:9d:62:04:c0: 36:25:00:4f:05:94:ca:83:20:31:cf:e8:ba:64:fb: 42:ae:41:0b:49:73:29:91:c4:11:7c:54:24:95:72: 59:dc:49:70:93:63:88:71:51:96:80:69:5f:e0:05: 6a:71:7e:61:ba:89:56:50:96:31:6e:41:bd:38:ab: 30:f1:5c:62:83:04:da:19:b0:bf:8f:50:d8:dc:79: ec:f7:fe:e1:45:25:82:a8:dd:72:22:2a:90:4a:a1: d8:22:8f:9c:ac:6d:67:44:5f:be:b0:41:6b:c8:0e: e5:fc:c9:91:c6:73:4d:a4:7d:61:ad:93:eb:1c:d9: fe:43:bd:7d:46:df:6e:b3:ce:b8:b3:d2:03:db:47: 43:cc:14:dd:a3:43:bc:3d:de:c3:36:28:21:a9:ca: 4e:3d:0a:1f:39:23:40:88:47:21:cd:50:ef:86:30: 54:25:a1:3d:42:e0:3f:ae:6b:dd:9d:02:ec:28:07: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:5F:2E:CA:C3:BB:82:D2:93:1F:CF:F7:B0:61:68:64:1B:3D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:13:7e:c2:4b:2e:00:62:48:77:d6:30:03:47:a3:b3:ba:6d: bd:34:8e:52:57:88:d0:69:69:74:98:fe:63:72:5c:af:86:dc: 07:f9:6a:40:06:68:8c:cd:11:56:82:51:82:92:33:80:36:f1: da:2b:0f:30:1f:f8:a8:b9:6c:20:52:47:c1:1a:06:28:83:c3: 63:f8:9b:1a:52:52:1b:cd:44:32:5e:14:bd:c1:c5:c3:21:b9: 5d:88:da:57:ba:5c:f7:bd:6d:57:c3:13:90:d4:be:0d:7b:74: 56:37:84:59:36:06:ad:b5:47:ef:4d:d0:24:00:2d:bd:06:3e: 86:5b:c5:fc:f9:34:6e:9f:c6:6a:d5:4c:d0:7c:15:ce:79:e3: 0b:d5:ed:31:46:40:b4:a3:72:77:96:75:8c:cf:4b:56:d0:f5: da:d1:a8:35:a2:1d:ca:12:c4:58:93:bb:1c:21:4b:b3:99:0c: 15:22:b4:85:da:ad:54:d9:42:79:ef:9d:1e:98:29:d6:17:83: d3:cf:9a:4b:ac:04:d1:e4:07:22:80:ca:66:02:75:83:a3:a0: 3f:bd:e5:ce:c2:30:62:8f:72:68:41:32:b0:46:6b:62:98:c1: 0d:71:48:2a:68:51:43:5c:f4:0c:87:39:98:ab:0d:6c:9e:d9: d0:37:bb:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rMKO90Bm8W1TfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjMzNDI5NjMtMWE1Yi00OWI4LWI1NDktNWY0MDBkN2Y5YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54iNfIrQwNrc6JsTWrYke0hZy1MqPDpaZ08G adR+kGjfytmDm/qe1day7BJyahroFkVXhkBTK66BtQzM1xr6b6D6XN3HhJ1iBMA2 JQBPBZTKgyAxz+i6ZPtCrkELSXMpkcQRfFQklXJZ3Elwk2OIcVGWgGlf4AVqcX5h uolWUJYxbkG9OKsw8VxigwTaGbC/j1DY3Hns9/7hRSWCqN1yIiqQSqHYIo+crG1n RF++sEFryA7l/MmRxnNNpH1hrZPrHNn+Q719Rt9us864s9ID20dDzBTdo0O8Pd7D NighqcpOPQofOSNAiEchzVDvhjBUJaE9QuA/rmvdnQLsKAfGtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxIXy7Kw7uC0pMfz/ewYWhkGz2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvNDU0MDY0ZGQtOWIxZi0z ZTFiLWFiZDEtYWQ2YjRkMDIwMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAgTfsJLLgBiSHfWMANHo7O6bb00jlJXiNBpaXSY/mNyXK+G3Af5 akAGaIzNEVaCUYKSM4A28dorDzAf+Ki5bCBSR8EaBiiDw2P4mxpSUhvNRDJeFL3B xcMhuV2I2le6XPe9bVfDE5DUvg17dFY3hFk2Bq21R+9N0CQALb0GPoZbxfz5NG6f xmrVTNB8Fc554wvV7TFGQLSjcneWdYzPS1bQ9drRqDWiHcoSxFiTuxwhS7OZDBUi tIXarVTZQnnvnR6YKdYXg9PPmkusBNHkByKAymYCdYOjoD+95c7CMGKPcmhBMrBG a2KYwQ1xSCpoUUNc9AyHOZirDWye2dA3u+Q= -----END CERTIFICATE-----Generated at Sun Sep 20 14:47:15 2026 by rpki-client