$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/fc72a438-b932-3f02-882e-32b5ba1fb069.roa File: fc72a438-b932-3f02-882e-32b5ba1fb069.roa (raw, json) Hash identifier: 4NII1T0aUBZ/eQaQdUVLY/mzIAk2V9p5YWCWy6vNrJk= Subject key identifier: DA:7B:B5:3C:E0:7B:65:5B:21:80:2D:0A:12:E1:38:E8:FD:D5:7B:0E Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584F4986CBF1DBD7A0E6224E8C80 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/fc72a438-b932-3f02-882e-32b5ba1fb069.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395403 IP address blocks: 2620:4d:400a::/48 maxlen: 48 2620:4d:4021::/48 maxlen: 48 2620:4d:402f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:cb:f1:db:d7:a0:e6:22:4e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=540b5c17-bb42-4692-a7d5-486f6bb8bad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:1c:58:46:0e:c6:ab:f2:f7:5b:cf:5e:8d: 93:b1:47:10:97:0a:8a:ca:a5:34:0d:e1:61:ef:f0: 26:7a:58:82:80:6d:f6:10:01:85:55:15:07:54:e3: 7d:c4:ee:0d:09:4f:47:a6:1a:93:87:e2:24:c3:84: 35:b9:77:f2:54:9e:a9:ae:b6:a8:91:b6:e3:91:ca: 20:a3:75:8d:ed:84:03:37:0a:e3:40:cd:60:7c:e8: fd:51:db:12:dd:82:3f:8f:c1:09:b4:67:81:b2:a6: 02:87:73:ed:cb:1b:4f:b3:0c:b2:7c:d4:77:b2:c4: 90:e0:f5:4a:d9:0d:e1:b7:cf:18:02:65:dd:5d:68: 2b:22:9c:1b:f8:b0:5a:7a:5d:d3:30:9a:27:c3:80: f2:9d:b4:0a:90:58:77:dd:69:87:ce:47:bc:a3:7b: 50:a0:fc:72:ff:6c:12:05:34:ef:fa:84:31:23:9e: e9:34:16:62:c4:d6:6b:ba:39:b2:7e:25:27:fd:57: aa:43:4d:2f:ff:00:66:8f:f9:14:51:08:b2:0a:4b: 9e:3c:85:cd:1d:db:87:c1:c7:7d:35:93:90:07:03: 52:db:5d:88:02:fd:cc:01:ae:ad:b9:25:bd:44:5a: 8a:2c:79:f3:4f:88:00:11:cf:44:dd:e7:70:83:96: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:B5:3C:E0:7B:65:5B:21:80:2D:0A:12:E1:38:E8:FD:D5:7B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/fc72a438-b932-3f02-882e-32b5ba1fb069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:400a::/48 2620:4d:4021::/48 2620:4d:402f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3d:6b:cd:d3:7e:be:00:74:7f:bf:17:a5:1c:e3:91:01:09: 8e:01:5e:38:d3:84:c7:99:2e:4b:80:13:3d:ad:81:2b:55:09: 93:32:3d:87:85:b8:49:38:0c:62:6e:87:1e:30:4d:b2:dd:77: d9:4d:9c:db:84:54:8b:8b:e8:38:f3:14:aa:f9:a7:67:c3:3e: d0:0a:84:12:b5:0c:22:70:e5:3f:3b:9f:68:75:6b:a4:2b:a3: 46:28:b6:e8:92:d0:71:28:91:96:2f:3a:2b:86:79:83:e3:d8: 34:ff:fa:a0:b4:5a:83:b2:6a:80:cf:65:84:4d:35:5a:6b:b0: a3:95:73:27:fe:a5:c4:0c:8f:aa:e5:57:4c:dc:cd:1e:74:a3: 8c:d9:67:76:d2:7a:e0:29:f4:b4:b3:c7:0b:4a:a0:f8:d6:18: 70:f6:1e:3d:90:d5:5d:f1:8a:da:a6:8e:33:d6:57:d2:53:4c: 2b:05:ac:c4:20:2f:e9:43:7c:af:af:98:c5:55:35:67:c1:0e: e1:4e:61:53:a6:31:29:bd:93:b8:f2:84:0e:4b:a1:e9:14:3b: 45:9e:56:57:09:a9:0b:68:5a:6a:a8:ec:88:0b:99:18:46:92: 36:25:5e:da:93:e9:08:6e:7e:6e:d6:c8:1e:7b:ef:d5:4a:b4: 45:be:ef:cf -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9Jhsvx29eg5iJOjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTQwYjVjMTctYmI0Mi00NjkyLWE3ZDUtNDg2ZjZiYjhiYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeccWEYOxqvy91vPXo2TsUcQlwqKyqU0DeFh 7/AmeliCgG32EAGFVRUHVON9xO4NCU9HphqTh+Ikw4Q1uXfyVJ6prraokbbjkcog o3WN7YQDNwrjQM1gfOj9UdsS3YI/j8EJtGeBsqYCh3PtyxtPswyyfNR3ssSQ4PVK 2Q3ht88YAmXdXWgrIpwb+LBael3TMJonw4DynbQKkFh33WmHzke8o3tQoPxy/2wS BTTv+oQxI57pNBZixNZrujmyfiUn/VeqQ00v/wBmj/kUUQiyCkuePIXNHduHwcd9 NZOQBwNS212IAv3MAa6tuSW9RFqKLHnzT4gAEc9E3edwg5abZQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNp7tTzge2VbIYAtChLhOOj91XsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvZmM3MmE0MzgtYjkzMi0z ZjAyLTg4MmUtMzJiNWJhMWZiMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAJiAATUAK AwcAJiAATUAhAwcAJiAATUAvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACw9a83Tfr4AdH+/F6Uc45EBCY4B XjjThMeZLkuAEz2tgStVCZMyPYeFuEk4DGJuhx4wTbLdd9lNnNuEVIuL6DjzFKr5 p2fDPtAKhBK1DCJw5T87n2h1a6Qro0YotuiS0HEokZYvOiuGeYPj2DT/+qC0WoOy aoDPZYRNNVprsKOVcyf+pcQMj6rlV0zczR50o4zZZ3bSeuAp9LSzxwtKoPjWGHD2 Hj2Q1V3xitqmjjPWV9JTTCsFrMQgL+lDfK+vmMVVNWfBDuFOYVOmMSm9k7jyhA5L oekUO0WeVlcJqQtoWmqo7IgLmRhGkjYlXtqT6Qhufm7WyB5779VKtEW+788= -----END CERTIFICATE-----Generated at Wed Sep 30 09:53:11 2026 by rpki-client