$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa File: 553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json) Hash identifier: yWnI1ulw1uyBme6WsZiv8VwmlSbzPMXKAiClX9mawE8= Subject key identifier: 22:2B:E6:DA:D5:50:A4:CE:5A:49:55:76:92:F0:B6:33:A8:99:B2:2D Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584EED520C688E802E8F43056146 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3663 IP address blocks: 2604:aa00::/32 maxlen: 56 2607:f430::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0c:68:8e:80:2e:8f:43:05:61:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=1c4a261b-a557-47e3-866e-6aa0bb24d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:98:3f:eb:5e:5b:bc:f6:bc:90:82:c2:f3: 7f:ce:8b:5e:e8:35:f3:11:0f:c9:ac:95:d7:64:f5: 74:97:99:82:b8:c1:0d:3b:b7:4f:9a:94:4c:5e:a8: 7e:c5:6c:3a:41:7a:6d:b1:84:a3:cd:ca:0a:43:be: b2:27:10:71:0c:62:ef:6b:16:f9:6a:f9:3d:b7:21: ac:60:01:9e:51:b8:35:50:e1:95:b3:41:06:53:13: e9:24:4f:89:a2:94:f4:72:56:d3:dc:e9:0b:ed:41: 56:21:c4:ba:ab:fe:22:94:fd:35:a0:84:5e:c4:80: ce:1d:56:20:58:ba:dd:9d:8e:bb:5e:14:0b:4a:a1: ee:27:33:da:4e:1e:28:bc:27:16:56:b6:35:cc:5e: ec:37:ff:3f:01:2d:63:89:42:b5:32:c3:ed:81:47: 61:e6:97:c6:99:e8:7b:58:77:54:09:2c:16:8f:c0: 37:7f:fe:ce:1a:3b:86:32:b9:6e:b4:df:ca:19:b4: 4c:02:21:a7:88:04:a5:93:e4:8a:b5:7c:b7:cd:b3: b8:db:ed:c9:8d:6b:ff:86:8e:4f:11:88:4a:87:33: 5e:6d:16:ff:ba:95:2b:62:10:8c:ac:5c:55:01:b0: 28:34:94:b6:3e:ff:82:7a:c9:09:1c:5c:b6:e7:ba: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:E6:DA:D5:50:A4:CE:5A:49:55:76:92:F0:B6:33:A8:99:B2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 2607:f430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1f:09:d7:db:a2:d1:0b:5f:c6:6a:88:9d:c0:b3:e0:d5:01: 59:d7:7f:06:ad:f3:a7:9e:91:b2:8d:3e:74:21:7d:35:a8:47: 33:de:72:ac:99:43:87:1c:87:84:ec:fd:39:77:76:ad:6d:39: 15:89:6c:ce:d6:23:6f:6b:c7:1d:c6:96:0d:96:4d:cb:6c:38: 03:1c:03:3b:0c:fd:8b:ed:ea:d8:da:53:55:2e:bb:7e:04:51: 22:c8:17:d8:bf:8e:43:bc:b0:0b:e1:ae:f9:69:7e:54:66:00: 7d:0a:84:a7:59:9f:bf:9c:93:48:8a:b5:03:46:41:d9:4e:c0: d8:a5:a4:b0:a0:8d:00:99:40:ad:47:db:ac:b4:df:5f:a5:66: e9:53:9d:52:2e:2c:f8:af:78:69:36:67:53:95:7b:2e:a3:2b: 18:66:a3:67:cf:3f:e3:28:9f:10:7a:10:58:3d:55:8a:11:61: 82:8d:a3:f4:83:aa:f7:7a:41:e0:94:42:88:0c:08:99:60:81: a1:3d:15:17:30:d5:82:c8:b2:36:ee:78:50:44:5a:11:9c:32: a2:f5:24:c2:ce:f3:b6:7d:40:6e:96:71:e0:12:fb:a0:a3:5c: 3f:85:1d:f4:33:a6:fb:cb:23:9a:b4:72:be:98:c1:38:11:b4: 33:ae:66:e9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7tUgxojoAuj0MFYUYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWM0YTI2MWItYTU1Ny00N2UzLTg2NmUtNmFhMGJiMjRkOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZSYP+teW7z2vJCCwvN/zote6DXzEQ/JrJXX ZPV0l5mCuMENO7dPmpRMXqh+xWw6QXptsYSjzcoKQ76yJxBxDGLvaxb5avk9tyGs YAGeUbg1UOGVs0EGUxPpJE+JopT0clbT3OkL7UFWIcS6q/4ilP01oIRexIDOHVYg WLrdnY67XhQLSqHuJzPaTh4ovCcWVrY1zF7sN/8/AS1jiUK1MsPtgUdh5pfGmeh7 WHdUCSwWj8A3f/7OGjuGMrlutN/KGbRMAiGniASlk+SKtXy3zbO42+3JjWv/ho5P EYhKhzNebRb/upUrYhCMrFxVAbAoNJS2Pv+CeskJHFy257pqnwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCIr5trVUKTOWklVdpLwtjOombItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNTUzYWRmNGMtOTRmYS0z OGZiLWJjZTYtMjFhZGJiYzJiZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgSqAAMF ACYH9DAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARh8J19ui0QtfxmqIncCz4NUBWdd/Bq3zp56Rso0+dCF9 NahHM95yrJlDhxyHhOz9OXd2rW05FYlsztYjb2vHHcaWDZZNy2w4AxwDOwz9i+3q 2NpTVS67fgRRIsgX2L+OQ7ywC+Gu+Wl+VGYAfQqEp1mfv5yTSIq1A0ZB2U7A2KWk sKCNAJlArUfbrLTfX6Vm6VOdUi4s+K94aTZnU5V7LqMrGGajZ88/4yifEHoQWD1V ihFhgo2j9IOq93pB4JRCiAwImWCBoT0VFzDVgsiyNu54UERaEZwyovUkws7ztn1A bpZx4BL7oKNcP4Ud9DOm+8sjmrRyvpjBOBG0M65m6Q== -----END CERTIFICATE-----Generated at Tue Sep 29 13:26:35 2026 by rpki-client