$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa File: 1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa (raw, json) Hash identifier: 2dJBtTYM2lIrj/BUacFnwGeWtNNwLksP05esJff7m7w= Subject key identifier: 00:56:7D:26:1F:E1:6E:EA:B4:D3:11:D3:20:CB:29:89:A3:B3:4B:1B Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584F03A791FBBCD0D66509502DC0 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 981 IP address blocks: 2605:ac40:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:91:fb:bc:d0:d6:65:09:50:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=4211a1db-42e8-44c4-86ac-f998dfcbb494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:aa:94:c4:af:2e:4b:60:7c:ba:97:66:3f: 1f:dc:0d:0f:08:78:e1:ac:e0:eb:5b:77:75:52:99: f8:53:ea:30:78:67:4b:7c:ed:1e:df:37:b7:4f:10: 66:7b:a8:d7:6e:ea:5a:9d:1c:50:42:53:f8:c3:2a: a5:1c:6b:70:0e:6d:b8:04:df:23:f6:82:10:d7:c5: ba:36:66:eb:0d:1b:db:e8:3f:cb:7b:af:60:2d:c1: 2e:36:d4:7e:39:ac:1f:35:56:57:57:e8:f2:18:3b: 72:47:bb:cc:ff:77:32:f1:f9:92:c6:1e:06:4d:9c: 5b:cf:4b:25:f2:26:ce:59:5f:7c:37:62:e7:ef:ef: dd:02:d6:8b:44:60:71:81:cc:d6:f5:f5:3d:47:c8: 32:63:81:d4:36:5a:60:72:49:3c:18:ad:56:c5:55: 01:5d:c0:3f:92:54:ca:d6:60:ca:00:8b:55:e2:c5: 7d:6e:ca:79:89:31:b8:ed:e5:d3:dd:df:60:3b:e5: bb:75:a3:f2:dc:bf:da:46:9b:84:36:3b:79:f6:81: 6e:fe:f8:1f:3d:a9:cd:73:f7:1c:32:6c:28:ad:fd: ad:25:f5:10:36:61:05:89:fe:bf:6d:eb:24:6d:66: 7b:3e:6b:27:62:83:5e:b1:d6:d1:39:f5:52:cc:75: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:7D:26:1F:E1:6E:EA:B4:D3:11:D3:20:CB:29:89:A3:B3:4B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/1d9c16d9-cfc5-37cb-b88f-b78329bd7a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9a:c9:69:ea:e2:c7:c9:7d:66:c1:39:af:7b:24:6b:4d:ae: 6a:5b:5e:81:e2:f6:a5:15:0a:f7:53:56:03:91:ed:1f:00:3c: 22:24:60:67:b6:3d:e3:59:e7:86:96:33:69:00:dc:ec:93:62: ea:ab:8b:29:95:49:f4:a1:23:12:a8:21:8c:a1:26:4c:5b:f0: 8f:15:ce:0d:2e:0e:37:a6:b5:ad:1e:5d:45:b8:24:83:9b:c9: 68:09:57:bc:45:c9:0a:73:19:75:14:be:17:f9:7f:10:d3:6a: 95:b5:7a:fc:d7:f0:df:a3:f8:96:63:58:ec:da:0a:6d:0e:75: 94:f8:c2:eb:68:44:f2:57:f4:d4:48:1d:6c:6d:8f:94:56:76: fc:47:38:78:2b:d0:c0:2e:aa:c6:ae:81:3a:5e:77:3c:e2:cc: b0:5b:88:06:87:af:d6:0f:f6:f7:1e:ab:0f:80:02:2e:f4:3f: c0:1c:94:29:f3:db:2a:f5:35:fc:e8:6e:d2:48:71:72:0e:c7: a4:36:3f:8e:f4:4b:6d:ba:42:aa:67:4a:28:50:88:60:f3:f2: 8d:8d:54:fe:61:25:54:b3:d1:82:82:57:68:4f:1e:e3:ea:13: b0:b8:f1:4c:74:50:16:0a:65:5e:91:54:65:9a:61:ac:2e:dd: 10:6d:c7:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp5H7vNDWZQlQLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDIxMWExZGItNDJlOC00NGM0LTg2YWMtZjk5OGRmY2JiNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz42qlMSvLktgfLqXZj8f3A0PCHjhrODrW3d1 Upn4U+oweGdLfO0e3ze3TxBme6jXbupanRxQQlP4wyqlHGtwDm24BN8j9oIQ18W6 NmbrDRvb6D/Le69gLcEuNtR+OawfNVZXV+jyGDtyR7vM/3cy8fmSxh4GTZxbz0sl 8ibOWV98N2Ln7+/dAtaLRGBxgczW9fU9R8gyY4HUNlpgckk8GK1WxVUBXcA/klTK 1mDKAItV4sV9bsp5iTG47eXT3d9gO+W7daPy3L/aRpuENjt59oFu/vgfPanNc/cc Mmworf2tJfUQNmEFif6/beskbWZ7PmsnYoNesdbROfVSzHVwnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABWfSYf4W7qtNMR0yDLKYmjs0sbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvMWQ5YzE2ZDktY2ZjNS0z N2NiLWI4OGYtYjc4MzI5YmQ3YTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuayWnq4sfJfWbBOa97JGtNrmpbXoHi9qUVCvdTVgOR7R8APCIk YGe2PeNZ54aWM2kA3OyTYuqriymVSfShIxKoIYyhJkxb8I8Vzg0uDjemta0eXUW4 JIObyWgJV7xFyQpzGXUUvhf5fxDTapW1evzX8N+j+JZjWOzaCm0OdZT4wutoRPJX 9NRIHWxtj5RWdvxHOHgr0MAuqsaugTpedzzizLBbiAaHr9YP9vceqw+AAi70P8Ac lCnz2yr1NfzobtJIcXIOx6Q2P470S226QqpnSihQiGDz8o2NVP5hJVSz0YKCV2hP HuPqE7C48Ux0UBYKZV6RVGWaYawu3RBtx0M= -----END CERTIFICATE-----Generated at Mon Sep 21 02:31:26 2026 by rpki-client