$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa File: 913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa (raw, json) Hash identifier: seJokiZzet/qprNIVD6g9nZPBb+NKdXbEEtDDi4TQEE= Subject key identifier: 52:E6:13:CC:C9:82:4B:5E:97:66:B6:5C:B9:4E:68:51:F9:42:61:70 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584F1CC79C298C5B5E9135217E80 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 2620:133:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9c:29:8c:5b:5e:91:35:21:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=4ce2eade-9a70-4414-8e14-19cfa3c932ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:d1:7b:c9:64:94:d5:56:af:2a:0b:61:a2: a9:f5:06:e3:8d:7c:ac:e2:51:0d:81:b3:42:ef:c5: 50:35:05:4d:6c:c7:43:a5:99:98:3a:1c:8a:ba:3e: 53:31:74:fb:eb:b0:ea:09:a7:04:75:5c:b8:b5:a6: 41:1d:da:55:d3:9c:88:e3:bf:53:be:d9:42:99:c7: 84:7d:14:68:c4:54:06:c5:1c:d7:cf:43:d3:a4:a2: 91:55:95:76:ab:8f:5e:36:14:23:25:eb:63:d6:bf: 33:4f:93:03:80:30:0f:56:60:4e:01:00:14:a8:70: 55:b7:5f:f6:e6:c6:ab:54:d8:9c:11:50:38:c0:ba: f0:27:6b:9e:02:97:e8:bf:38:e5:b3:66:4c:56:36: cc:dc:12:4b:90:1c:76:aa:53:cf:2d:39:e1:a8:a1: ef:df:57:22:be:c4:7c:bc:fb:01:8b:d5:12:29:dc: 76:fa:90:44:d4:28:d4:a6:cf:60:df:b9:5c:57:2e: e6:82:c4:da:56:6b:90:60:0c:ee:c8:8a:d0:3e:d6: bd:36:52:5c:57:6c:4e:30:a0:04:04:0e:00:ca:5c: 39:c3:09:a2:00:e0:1c:bb:b0:4d:23:ea:02:0a:b5: 2e:b6:49:6c:bc:71:52:4e:87:ba:e6:45:b6:94:5f: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:13:CC:C9:82:4B:5E:97:66:B6:5C:B9:4E:68:51:F9:42:61:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/913cdb3c-a3f4-3d25-bbae-ece8256d01d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:3c:5a:79:20:ae:a4:e6:6d:d3:d9:69:6d:65:4e:81:65:0b: 22:fe:9e:20:01:1e:3b:78:f7:8b:2e:77:31:92:27:3a:a5:7b: c5:25:18:03:90:72:32:62:2d:6a:7a:17:ee:29:e0:81:3f:cc: e4:05:15:51:b7:e7:3c:0c:bb:a6:04:f6:47:1b:f9:c1:ca:ae: 46:43:5c:f1:d6:90:7f:bb:3f:c9:0a:09:f4:04:e8:42:fa:38: 3d:9b:c4:6d:88:15:1d:6a:84:21:8b:54:17:a8:20:11:14:de: 99:3c:b3:f5:01:a9:43:ec:3e:b8:68:cf:46:6a:ad:5f:af:be: 79:5e:35:fc:7e:c8:b4:c7:00:b0:15:a0:91:9b:cb:19:43:f0: b1:c0:d5:ae:83:84:d5:cc:2d:f5:5e:82:d0:b1:cf:82:85:65: c8:ea:d6:3e:4b:b3:7e:73:6d:0d:91:17:2c:ba:9c:1b:ee:64: a8:fc:b8:c8:aa:3f:36:e5:56:c2:5e:c6:58:6d:66:d4:b9:e6: 04:65:75:04:89:fb:61:84:f1:bf:81:78:00:b2:82:d7:e3:48: 52:39:56:4b:5a:e9:94:4e:d6:76:a0:d5:74:7b:d7:6e:0f:15: b7:77:49:b5:5b:3b:f1:60:c2:f6:37:cc:83:73:1a:f0:f8:11: 69:7e:57:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8cx5wpjFtekTUhfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NGNlMmVhZGUtOWE3MC00NDE0LThlMTQtMTljZmEzYzkzMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzRe8lklNVWryoLYaKp9QbjjXys4lENgbNC 78VQNQVNbMdDpZmYOhyKuj5TMXT767DqCacEdVy4taZBHdpV05yI479TvtlCmceE fRRoxFQGxRzXz0PTpKKRVZV2q49eNhQjJetj1r8zT5MDgDAPVmBOAQAUqHBVt1/2 5sarVNicEVA4wLrwJ2ueApfovzjls2ZMVjbM3BJLkBx2qlPPLTnhqKHv31civsR8 vPsBi9USKdx2+pBE1CjUps9g37lcVy7mgsTaVmuQYAzuyIrQPta9NlJcV2xOMKAE BA4Aylw5wwmiAOAcu7BNI+oCCrUutklsvHFSToe65kW2lF+DQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLmE8zJgktel2a2XLlOaFH5QmFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvOTEzY2RiM2MtYTNmNC0z ZDI1LWJiYWUtZWNlODI1NmQwMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABM8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAs8WnkgrqTmbdPZaW1lToFlCyL+niABHjt494sudzGSJzqle8Ul GAOQcjJiLWp6F+4p4IE/zOQFFVG35zwMu6YE9kcb+cHKrkZDXPHWkH+7P8kKCfQE 6EL6OD2bxG2IFR1qhCGLVBeoIBEU3pk8s/UBqUPsPrhoz0ZqrV+vvnleNfx+yLTH ALAVoJGbyxlD8LHA1a6DhNXMLfVegtCxz4KFZcjq1j5Ls35zbQ2RFyy6nBvuZKj8 uMiqPzblVsJexlhtZtS55gRldQSJ+2GE8b+BeACygtfjSFI5Vkta6ZRO1nag1XR7 124PFbd3SbVbO/FgwvY3zINzGvD4EWl+V70= -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:44 2026 by rpki-client