$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa File: 397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa (raw, json) Hash identifier: NfNEyvkdCkLqvynlMUnLlP+gZEZbIxsROLpz01GjrQQ= Subject key identifier: 32:11:EA:05:5E:C0:5A:EB:2E:19:E1:BA:2F:20:2A:CE:41:1A:04:0B Certificate issuer: /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Certificate serial: 010D0C9F4328584F23C2574F1960F4D3E28EE11C Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396982 IP address blocks: 2601:1708::/32 maxlen: 32 2601:1708:100::/40 maxlen: 40 2601:1708:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:57:4f:19:60:f4:d3:e2:8e:e1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=622135d4-72fc-4a22-b839-5b0c0c8f7b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:48:38:3d:42:f2:d5:87:66:4c:f4:67:ab: ee:1f:06:d3:b8:58:2e:df:28:0b:78:4f:e6:cf:4f: b1:24:50:2b:66:52:17:c1:47:72:97:ca:ae:56:db: 9c:8e:9d:30:cf:e4:c3:45:f1:61:e2:71:eb:2c:e9: 03:14:8a:86:9e:e2:56:35:f8:45:e4:78:9d:a1:09: 48:0c:aa:78:39:a1:52:38:36:76:05:e8:12:cc:ac: 7c:5c:21:b2:74:f0:4b:16:16:1a:c5:15:ed:e1:eb: 41:f3:2d:02:0c:6b:ba:84:9d:13:bd:89:53:7d:ea: 77:e8:a6:e7:f2:89:09:a9:79:62:4b:c0:30:dc:1e: 89:87:3b:7b:5f:44:fb:fb:b4:c9:1c:c1:3d:e6:4d: e5:8f:58:eb:01:8d:a9:4c:d7:dc:1e:14:f8:13:68: bd:1a:dd:10:e6:35:54:7d:f2:d6:fb:4c:76:be:14: b1:42:48:19:a1:56:3e:7a:fd:a7:39:02:5f:3b:d1: fd:4b:be:6a:87:e0:85:14:8d:04:e1:9b:df:ca:4e: fc:d9:08:44:e7:ae:84:73:f3:cc:f7:0e:2f:5c:4a: 63:2a:fe:db:06:f0:41:92:ba:6c:3e:2a:a4:02:f1: 0c:b3:95:bf:d6:12:44:f2:d1:f5:21:d8:ee:f7:6b: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:11:EA:05:5E:C0:5A:EB:2E:19:E1:BA:2F:20:2A:CE:41:1A:04:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/397fc92f-aab3-36ef-b1ea-7231ca8de11f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl X509v3 Authority Key Identifier: keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer sbgp-ipAddrBlock: critical IPv6: 2601:1708::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:04:94:ae:af:7f:fd:be:0e:f3:fe:bd:de:d7:00:2b:b0:d1: 75:eb:c9:84:38:ee:75:96:b2:d0:3b:9d:05:e9:cb:f9:0b:36: 7b:05:47:65:4c:61:03:09:b3:ae:3d:5e:a4:f2:93:71:7c:12: b9:d3:0a:ce:c2:9d:bb:5b:e8:3e:bc:e5:7e:e5:73:f0:a7:23: be:f2:71:b1:80:50:75:8d:42:cc:7c:a4:59:1e:d5:c3:f9:0b: d0:61:d2:3d:ff:b6:68:db:d3:f8:b7:49:4e:e9:d5:60:77:c3: 70:e2:c2:97:53:ad:d7:2c:43:b9:13:4d:24:b0:ec:6d:fa:62: 9c:2b:47:e8:5e:e7:78:76:ba:39:c1:f5:b2:d0:32:08:b7:e4: 4f:ab:d9:b6:95:44:16:c7:30:eb:25:a2:f9:24:0a:08:3b:b4: 86:a9:ac:50:81:92:1e:d8:3e:5d:7c:d6:42:ac:99:05:11:80: 42:b4:0f:60:53:80:81:2d:87:0f:71:bb:db:dc:d3:44:e2:7a: e5:0a:be:5c:7f:3b:b9:1a:87:9d:d4:5a:7b:9d:c9:b6:ae:81: 95:85:c1:33:29:94:24:d6:95:51:e6:11:4f:cf:84:be:d2:49: 74:c7:65:78:53:ce:ab:89:a2:48:fc:4d:29:d2:9e:38:8b:5b: 7b:aa:a5:6a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8jwldPGWD00+KO4RwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZmYjBkNDctNzEyNS00YjkxLTliMDEtMmUzMDhkYWQw ZDI1MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NjIyMTM1ZDQtNzJmYy00YTIyLWI4MzktNWIwYzBjOGY3YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31tIOD1C8tWHZkz0Z6vuHwbTuFgu3ygLeE/m z0+xJFArZlIXwUdyl8quVtucjp0wz+TDRfFh4nHrLOkDFIqGnuJWNfhF5HidoQlI DKp4OaFSODZ2BegSzKx8XCGydPBLFhYaxRXt4etB8y0CDGu6hJ0TvYlTfep36Kbn 8okJqXliS8Aw3B6Jhzt7X0T7+7TJHME95k3lj1jrAY2pTNfcHhT4E2i9Gt0Q5jVU ffLW+0x2vhSxQkgZoVY+ev2nOQJfO9H9S75qh+CFFI0E4Zvfyk782QhE566Ec/PM 9w4vXEpjKv7bBvBBkrpsPiqkAvEMs5W/1hJE8tH1Idju92s7RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIR6gVewFrrLhnhui8gKs5BGgQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZi MGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMwOGRhZDBkMjUvMzk3ZmM5MmYtYWFiMy0z NmVmLWIxZWEtNzIzMWNhOGRlMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDZmYjBkNDctNzEyNS00YjkxLTli MDEtMmUzMDhkYWQwZDI1L2Q2ZmIwZDQ3LTcxMjUtNGI5MS05YjAxLTJlMzA4ZGFk MGQyNS5jcmwwHwYDVR0jBBgwFoAU8VFcEnThgAs8+O04pgkEawxrjv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZiMGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMw OGRhZDBkMjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgEXCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIBJSur3/9vg7z/r3e1wArsNF168mEOO51lrLQO50F6cv5CzZ7BUdl TGEDCbOuPV6k8pNxfBK50wrOwp27W+g+vOV+5XPwpyO+8nGxgFB1jULMfKRZHtXD +QvQYdI9/7Zo29P4t0lO6dVgd8Nw4sKXU63XLEO5E00ksOxt+mKcK0foXud4dro5 wfWy0DIIt+RPq9m2lUQWxzDrJaL5JAoIO7SGqaxQgZIe2D5dfNZCrJkFEYBCtA9g U4CBLYcPcbvb3NNE4nrlCr5cfzu5Goed1Fp7ncm2roGVhcEzKZQk1pVR5hFPz4S+ 0kl0x2V4U86riaJI/E0p0p44i1t7qqVq -----END CERTIFICATE-----Generated at Tue Sep 22 05:59:04 2026 by rpki-client