$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa File: 06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa (raw, json) Hash identifier: TjIYiKi+//wFDqzNwbT9N91nucrRrQvCPygUhtrkpb8= Subject key identifier: 06:44:69:06:C9:E8:1B:BE:A8:59:2B:AE:1C:32:62:E0:CD:2D:C1:78 Certificate issuer: /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a Certificate serial: 010D0C9F4328584F498548EBA5C1FBA1F1CFAC40 Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394725 IP address blocks: 2620:e4:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:48:eb:a5:c1:fb:a1:f1:cf:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f80850a3-e0e7-498d-8564-a088a772bc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:04:32:e1:84:d7:f4:df:8a:c5:39:f8:f7: f7:94:b3:17:7b:f4:84:64:e6:a3:cb:e1:ee:e8:49: c7:e4:96:ec:6c:c8:28:64:3a:c3:df:15:c5:1d:44: 3f:d3:59:9f:e6:73:c8:dd:73:2d:89:3f:88:67:97: 91:b6:e8:40:35:40:2a:3c:bf:28:89:71:63:de:5b: 0f:09:90:d5:11:e4:9c:e5:00:a2:f3:6a:b7:39:bb: 9e:8c:e6:75:19:e1:41:1e:d0:11:7e:38:29:c5:bb: 72:ba:e5:3e:5b:7b:d2:8e:09:a5:bb:15:11:a8:a0: c6:0e:db:b1:77:ef:b5:6d:40:96:14:61:5f:f1:e7: 9a:68:de:4b:18:c5:3e:e1:1b:fb:b1:e2:b0:5f:05: b5:c5:0f:ce:3a:4e:68:bc:17:2b:53:db:18:16:2f: 05:3d:83:47:eb:4a:a5:8d:9c:6b:95:b0:fa:ba:fd: 16:ec:d1:96:a9:6a:8b:af:3d:65:aa:51:57:3c:9a: 88:c0:38:97:cd:a2:bb:fd:44:00:bf:30:4d:3a:8e: 26:a2:c0:0f:63:ed:bd:a8:b1:75:df:77:94:8c:a9: 02:b9:02:02:4e:15:12:af:96:5a:24:c8:a0:6b:60: 48:e5:43:a3:f4:22:6c:46:1f:10:66:93:c2:68:c2: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:69:06:C9:E8:1B:BE:A8:59:2B:AE:1C:32:62:E0:CD:2D:C1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl X509v3 Authority Key Identifier: keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer sbgp-ipAddrBlock: critical IPv6: 2620:e4:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1f:9a:02:b0:09:82:9e:01:00:32:f2:58:17:39:bd:5d:9b: 28:66:a4:96:49:46:85:40:d8:0d:33:52:79:ad:5c:58:78:43: a3:98:89:7b:a2:d5:30:88:ee:19:2b:bc:03:b5:08:39:ae:c6: 90:53:d0:85:76:b8:86:2a:2c:5a:fa:43:0c:45:96:3d:3d:1b: a6:b2:28:32:ba:58:8c:8e:21:9c:0c:c3:05:9c:9a:e8:b3:7d: 7c:94:03:b0:50:15:93:a1:6a:83:8b:cc:5c:1d:57:0b:cf:a5: 1b:e3:e4:6a:c6:66:45:28:b1:57:29:59:a6:a7:fc:6f:8a:85: d9:44:b4:a6:d6:d8:1d:f6:46:74:45:ff:01:f4:5d:88:11:0d: a8:a0:8b:f1:57:6a:0b:98:16:4b:aa:dd:38:e1:d6:98:40:78: 2e:2f:b2:99:40:91:6b:fd:69:22:ad:da:23:dd:3d:4e:75:66: 3d:c1:1f:23:55:0c:91:b7:c1:7e:1d:72:c5:f3:6f:2c:ac:0a: d5:f6:63:a4:2d:61:f9:d1:d7:fd:63:bc:de:45:09:b2:44:ac: f4:97:6c:67:1b:71:07:79:d6:cc:a4:81:1e:5a:47:1b:24:74: 0f:5b:98:7d:47:d8:82:35:4e:1f:a0:12:ed:32:a2:ce:ac:55: ef:83:f7:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhUjrpcH7ofHPrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkNGI5ZGItMThmMy00MDhhLTgyODQtMWVmMGVhNWJj NjhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjgwODUwYTMtZTBlNy00OThkLTg1NjQtYTA4OGE3NzJiYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMEMuGE1/TfisU5+Pf3lLMXe/SEZOajy+Hu 6EnH5JbsbMgoZDrD3xXFHUQ/01mf5nPI3XMtiT+IZ5eRtuhANUAqPL8oiXFj3lsP CZDVEeSc5QCi82q3ObuejOZ1GeFBHtARfjgpxbtyuuU+W3vSjgmluxURqKDGDtux d++1bUCWFGFf8eeaaN5LGMU+4Rv7seKwXwW1xQ/OOk5ovBcrU9sYFi8FPYNH60ql jZxrlbD6uv0W7NGWqWqLrz1lqlFXPJqIwDiXzaK7/UQAvzBNOo4mosAPY+29qLF1 33eUjKkCuQICThUSr5ZaJMiga2BI5UOj9CJsRh8QZpPCaMLaIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZEaQbJ6Bu+qFkrrhwyYuDNLcF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNWQ0 YjlkYi0xOGYzLTQwOGEtODI4NC0xZWYwZWE1YmM2OGEvMDZmN2ZhNmEtYTE1MC0z NjI1LWI1ZTYtZTRiNmUxZmUxZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzVkNGI5ZGItMThmMy00MDhhLTgy ODQtMWVmMGVhNWJjNjhhLzM1ZDRiOWRiLTE4ZjMtNDA4YS04Mjg0LTFlZjBlYTVi YzY4YS5jcmwwHwYDVR0jBBgwFoAUoTRdUaRX00Bb5epaiU8mlMolFckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNWQ0YjlkYi0xOGYzLTQwOGEtODI4NC0xZWYw ZWE1YmM2OGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA5EAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEcfmgKwCYKeAQAy8lgXOb1dmyhmpJZJRoVA2A0zUnmtXFh4Q6OY iXui1TCI7hkrvAO1CDmuxpBT0IV2uIYqLFr6QwxFlj09G6ayKDK6WIyOIZwMwwWc muizfXyUA7BQFZOhaoOLzFwdVwvPpRvj5GrGZkUosVcpWaan/G+KhdlEtKbW2B32 RnRF/wH0XYgRDaigi/FXaguYFkuq3Tjh1phAeC4vsplAkWv9aSKt2iPdPU51Zj3B HyNVDJG3wX4dcsXzbyysCtX2Y6QtYfnR1/1jvN5FCbJErPSXbGcbcQd51sykgR5a RxskdA9bmH1H2II1Th+gEu0yos6sVe+D91I= -----END CERTIFICATE-----Generated at Wed Sep 30 07:53:51 2026 by rpki-client