$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa File: 3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa (raw, json) Hash identifier: pecakgpl57wyRVyYmroW8MCr0lAVLFY2dCCWaRYVsVw= Subject key identifier: 25:71:94:B6:9A:C3:58:CE:A2:35:F8:4B:19:3D:37:B7:3E:7E:56:29 Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Certificate serial: 010D0C9F4328584F2EED27C9F20D83DA956AA800 Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 30361 IP address blocks: 2001:18b8:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:27:c9:f2:0d:83:da:95:6a:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=ec821aa0-4340-4ee0-b135-869af1ad8cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:65:07:00:d5:1f:2e:ea:d1:ad:d8:19:2a: 2c:1d:53:56:35:0b:5a:59:d2:9c:95:8d:39:db:54: 33:ee:38:a4:4d:48:67:64:e6:29:f4:ae:ad:39:55: 53:ae:ac:b9:e0:a4:eb:ea:c5:ae:5c:d3:6e:f8:bd: ee:f6:3c:1c:c6:16:9c:fb:1d:bb:39:ee:6b:bf:94: be:db:d1:7a:ed:aa:2e:c1:ae:82:39:c2:13:f2:df: ba:90:25:ab:ff:30:ca:29:28:cb:40:1a:e2:25:c7: 0f:34:fb:d6:14:fd:4c:ff:9a:68:a2:b1:66:1a:2f: 07:5e:86:8e:ec:8d:98:ec:25:a3:52:fb:3e:40:88: 86:5e:6c:41:5d:2e:3d:25:e5:94:85:2a:3c:9a:68: b9:2a:93:e4:dd:f1:bb:91:c7:2b:aa:35:60:a0:57: a0:b4:b8:b1:0e:4e:7d:d4:6f:8d:69:38:df:0c:ce: ef:5d:b4:b9:0f:76:51:72:8e:75:a3:57:a9:cb:02: 25:df:84:95:4d:1b:2a:cc:dd:02:54:e2:46:f3:42: 15:49:a3:50:5e:1e:23:72:ac:4d:e1:8f:7a:b2:89: 5d:a8:9b:97:02:e7:ad:17:6d:fc:19:fe:ac:46:a3: 28:ab:98:d7:1a:2b:7d:6a:5f:93:fc:1f:9d:12:27: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:71:94:B6:9A:C3:58:CE:A2:35:F8:4B:19:3D:37:B7:3E:7E:56:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/3ab5d40f-57de-3e70-bd0f-f66a8dc5ee20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl X509v3 Authority Key Identifier: keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer sbgp-ipAddrBlock: critical IPv6: 2001:18b8:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e8:91:5e:af:7d:a2:27:3d:9c:b2:e0:07:7e:76:47:6b:44: e8:2e:f5:c6:92:ae:40:db:46:b5:69:1a:0a:5c:48:ce:76:81: 4a:2e:60:7c:dd:4b:21:2f:fb:59:ad:86:93:32:aa:ec:d7:a2: b3:82:f5:97:a5:12:ba:73:1d:4b:6d:d2:d5:22:84:fd:ee:99: 15:c4:09:c2:b7:e6:23:66:f9:cf:02:e2:8e:2f:bd:e9:6a:ff: 34:d1:80:94:01:0b:c6:e0:d1:15:56:d5:ba:8b:f9:76:37:4a: 41:3b:82:43:10:89:57:ea:6d:90:02:14:1e:db:f3:aa:89:4f: f4:3f:e3:7c:96:ab:5b:4f:36:22:e5:13:db:ca:93:57:b5:01: 0a:72:b8:16:73:fb:33:80:7f:97:d7:52:bb:6a:b9:b1:e0:17: de:75:a4:f3:5e:18:2d:03:98:4c:1b:a8:27:47:ac:e0:71:54: 49:0f:34:7d:19:6e:0c:be:19:3f:85:e5:ca:8f:48:da:68:d5: 41:91:d4:e9:bf:c3:92:04:7b:6c:00:95:ae:c0:b2:f5:fc:8e: f0:ea:cb:20:a3:13:6c:a9:b6:26:33:02:19:49:eb:f5:ed:ee: 29:93:f3:67:4c:79:28:7e:6f:21:f7:c9:ae:97:ef:c8:66:85: 1f:07:e4:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8u7SfJ8g2D2pVqqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2 YTljMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZWM4MjFhYTAtNDM0MC00ZWUwLWIxMzUtODY5YWYxYWQ4Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntJlBwDVHy7q0a3YGSosHVNWNQtaWdKclY05 21Qz7jikTUhnZOYp9K6tOVVTrqy54KTr6sWuXNNu+L3u9jwcxhac+x27Oe5rv5S+ 29F67aouwa6COcIT8t+6kCWr/zDKKSjLQBriJccPNPvWFP1M/5poorFmGi8HXoaO 7I2Y7CWjUvs+QIiGXmxBXS49JeWUhSo8mmi5KpPk3fG7kccrqjVgoFegtLixDk59 1G+NaTjfDM7vXbS5D3ZRco51o1epywIl34SVTRsqzN0CVOJG80IVSaNQXh4jcqxN 4Y96soldqJuXAuetF238Gf6sRqMoq5jXGit9al+T/B+dEieJ4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVxlLaaw1jOojX4Sxk9N7c+flYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvM2FiNWQ0MGYtNTdkZS0z ZTcwLWJkMGYtZjY2YThkYzVlZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh MDdjZTZhOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEYuAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPokV6vfaInPZyy4Ad+dkdrROgu9caSrkDbRrVpGgpcSM52gUou YHzdSyEv+1mthpMyquzXorOC9ZelErpzHUtt0tUihP3umRXECcK35iNm+c8C4o4v velq/zTRgJQBC8bg0RVW1bqL+XY3SkE7gkMQiVfqbZACFB7b86qJT/Q/43yWq1tP NiLlE9vKk1e1AQpyuBZz+zOAf5fXUrtqubHgF951pPNeGC0DmEwbqCdHrOBxVEkP NH0Zbgy+GT+F5cqPSNpo1UGR1Om/w5IEe2wAla7AsvX8jvDqyyCjE2yptiYzAhlJ 6/Xt7imT82dMeSh+byH3ya6X78hmhR8H5A8= -----END CERTIFICATE-----Generated at Thu Sep 24 19:20:45 2026 by rpki-client