$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/4d1ad3a8-5338-382b-a687-5bd3280cf5bb.roa File: 4d1ad3a8-5338-382b-a687-5bd3280cf5bb.roa (raw, json) Hash identifier: AQsVAqZBp5x1yZQG/Z77Iq/x9YT/8TFVx/NOzZ14+WU= Subject key identifier: 24:32:07:E1:6E:2E:75:23:0D:BE:5C:4F:92:CB:A2:D5:C8:BA:56:2C Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584F4987A76BE841127128794D80 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/4d1ad3a8-5338-382b-a687-5bd3280cf5bb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395403 IP address blocks: 2620:4d:4030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:a7:6b:e8:41:12:71:28:79:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b01f297-50c2-4b06-b2a3-6ff3e1dfc6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:d9:f9:38:a3:84:5d:83:83:d4:80:48:40: 08:dc:05:e3:9c:37:52:f4:0a:8a:c0:81:12:c1:18: f5:32:61:d0:82:da:fd:0b:34:e2:e3:45:18:d2:ef: 2b:ae:0d:18:e8:66:ac:30:05:f1:63:91:52:fb:2b: 62:1b:e7:36:d9:d0:42:97:7a:0f:e4:06:05:cb:e8: 6f:bd:21:7d:73:76:41:07:2c:1c:39:09:70:c9:e7: 8b:f6:40:fb:1f:b2:b9:b9:48:b2:5e:cd:88:70:ee: 16:52:01:8f:25:bd:ca:13:a3:75:f4:d0:27:ee:58: 04:0b:54:10:08:52:f8:3a:63:17:3a:0e:80:5c:e8: d3:a1:2b:a1:3b:76:0d:f5:b2:30:c5:88:a7:e5:01: e3:90:27:fa:38:02:a7:99:a7:bf:1a:01:dc:00:50: d4:b2:74:71:7d:4c:ea:b7:3b:d8:67:44:d0:06:88: fd:62:31:dd:f3:21:d6:1f:c9:ac:85:94:2b:3c:2b: 45:15:2a:29:cc:90:59:01:5c:15:1e:20:49:ba:f1: 28:16:61:21:cf:b7:de:09:44:dc:a5:4e:56:b3:eb: 86:c0:ab:f2:f3:0a:ec:bf:a5:a6:17:0c:75:24:78: ef:77:fc:2d:d5:57:84:f2:21:75:6c:cf:9c:5b:6b: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:32:07:E1:6E:2E:75:23:0D:BE:5C:4F:92:CB:A2:D5:C8:BA:56:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/4d1ad3a8-5338-382b-a687-5bd3280cf5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4030::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b7:e8:f3:28:5b:e1:c6:05:45:37:91:41:8c:d3:7b:e2:4d: 67:b1:26:84:ed:8e:ec:91:fe:60:32:70:cb:e8:37:3b:bd:76: a8:ca:11:1d:09:77:4f:87:c6:c6:87:57:00:1c:f5:0c:55:e7: 39:9f:46:c4:06:80:95:93:34:3f:62:cb:63:d0:22:00:46:47: ab:a1:ba:9c:6b:2f:8d:a8:45:1a:16:b8:94:7d:38:73:7a:a6: 39:39:7b:b8:e1:65:a4:f0:b7:97:a8:2a:2c:1c:37:0e:57:ff: a0:3f:43:ac:28:8f:68:a3:62:e4:7f:15:b0:12:55:8c:d0:95: 43:6e:b5:23:34:bd:e1:56:99:6f:c7:8c:d8:c1:c9:12:98:0d: 88:4d:e9:24:7c:cd:23:6a:05:8a:0d:08:d9:5d:cc:5d:d2:cf: 74:72:93:e4:bd:4c:6a:2c:e7:df:b2:67:af:26:f9:2b:eb:9b: 71:a1:b5:2f:44:d8:6a:83:bb:b8:55:cc:5c:38:a8:56:d6:0b: 72:5c:77:76:1d:49:28:ec:a9:1f:6e:75:69:11:6d:a2:56:c2: eb:3a:88:76:54:e7:3d:6d:43:7a:12:44:03:f8:47:b8:d2:45: 54:84:e2:e2:4f:6a:93:4c:c4:8d:5d:80:da:9a:d6:42:af:f7: c0:59:d6:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh6dr6EEScSh5TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWIwMWYyOTctNTBjMi00YjA2LWIyYTMtNmZmM2UxZGZjNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndTZ+TijhF2Dg9SASEAI3AXjnDdS9AqKwIES wRj1MmHQgtr9CzTi40UY0u8rrg0Y6GasMAXxY5FS+ytiG+c22dBCl3oP5AYFy+hv vSF9c3ZBBywcOQlwyeeL9kD7H7K5uUiyXs2IcO4WUgGPJb3KE6N19NAn7lgEC1QQ CFL4OmMXOg6AXOjToSuhO3YN9bIwxYin5QHjkCf6OAKnmae/GgHcAFDUsnRxfUzq tzvYZ0TQBoj9YjHd8yHWH8mshZQrPCtFFSopzJBZAVwVHiBJuvEoFmEhz7feCUTc pU5Ws+uGwKvy8wrsv6WmFwx1JHjvd/wt1VeE8iF1bM+cW2s7NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQyB+FuLnUjDb5cT5LLotXIulYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNGQxYWQzYTgtNTMzOC0z ODJiLWE2ODctNWJkMzI4MGNmNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAATUAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAK36PMoW+HGBUU3kUGM03viTWexJoTtjuyR/mAycMvoNzu9dqjK ER0Jd0+HxsaHVwAc9QxV5zmfRsQGgJWTND9iy2PQIgBGR6uhupxrL42oRRoWuJR9 OHN6pjk5e7jhZaTwt5eoKiwcNw5X/6A/Q6woj2ijYuR/FbASVYzQlUNutSM0veFW mW/HjNjByRKYDYhN6SR8zSNqBYoNCNldzF3Sz3Ryk+S9TGos59+yZ68m+Svrm3Gh tS9E2GqDu7hVzFw4qFbWC3Jcd3YdSSjsqR9udWkRbaJWwus6iHZU5z1tQ3oSRAP4 R7jSRVSE4uJPapNMxI1dgNqa1kKv98BZ1rY= -----END CERTIFICATE-----Generated at Tue Sep 29 13:08:58 2026 by rpki-client