$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1eaeb533-2ab5-3ea0-b120-2c1e125b1484.roa File: 1eaeb533-2ab5-3ea0-b120-2c1e125b1484.roa (raw, json) Hash identifier: jFgHp/k+hTYj7fYXp3cnBOC4Y2eX7S05l9Drwe8ymIQ= Subject key identifier: 41:DF:C9:A2:39:17:40:CF:94:83:E5:0E:D9:BE:13:EA:1A:93:43:28 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F2957D1718E6ACE807769AC00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1eaeb533-2ab5-3ea0-b120-2c1e125b1484.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 198949 IP address blocks: 2620:147:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d1:71:8e:6a:ce:80:77:69:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=c7c818d6-f4b4-49b7-be0e-ba14ca9dcc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d3:e7:60:88:64:89:fd:c7:bd:26:01:77:a7: 96:29:56:1d:47:f5:01:96:bb:ea:8d:e4:01:e8:c3: 75:d7:2e:22:ae:74:d1:54:f8:15:43:1a:9b:48:6a: 2e:51:cd:aa:6e:cf:db:29:e2:a3:59:2c:64:4f:60: ed:35:4c:65:14:55:0f:08:95:0e:81:35:7d:1b:e7: 5c:a9:1c:d3:33:a3:64:1c:e2:62:bb:14:cc:61:15: a2:b3:ca:63:d5:9c:11:f7:9e:3c:b6:2e:b3:dc:3a: a2:ac:fb:02:4b:8d:b4:4e:57:77:a8:e7:b3:43:96: 9d:2a:71:55:e4:a2:a3:30:cb:71:a6:fe:3c:7f:27: 62:4c:8c:90:25:f9:fe:1d:63:10:b3:a7:54:74:47: 0c:ec:4b:ce:21:07:0d:39:ac:f1:e5:a9:41:98:60: 4d:31:e8:ac:bf:e5:8a:aa:16:84:84:d9:89:cd:f8: ad:79:a8:cd:ac:12:37:1c:1c:57:30:2a:6d:63:b7: fe:94:c6:b7:9d:db:b9:1b:e8:ee:2d:0c:31:a7:92: aa:72:a3:cd:14:93:3b:28:bf:87:00:64:84:b6:2b: 31:26:60:e9:19:16:7c:37:87:b4:3e:d5:49:f4:5e: 47:c5:34:5d:f1:bf:79:6d:d3:c9:16:f5:69:a8:26: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DF:C9:A2:39:17:40:CF:94:83:E5:0E:D9:BE:13:EA:1A:93:43:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1eaeb533-2ab5-3ea0-b120-2c1e125b1484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:63:86:02:a9:84:9e:74:92:0a:ac:85:54:e9:16:e6:ec:cb: 71:49:02:7e:ae:73:f5:42:77:4c:37:d3:f6:81:8a:ad:f7:33: c0:66:3d:94:ed:ed:de:64:e6:b3:c3:0e:c7:60:da:5a:94:aa: f0:ad:70:ca:e4:37:4a:a9:66:72:c6:50:f8:d3:d2:77:fe:ae: 24:fe:cb:56:8c:83:ee:e1:86:ee:e4:fb:af:b3:44:59:7f:f7: 16:a4:6c:fc:34:96:5a:63:17:42:c7:b3:e4:be:4d:c8:eb:92: 2b:04:32:79:bb:2d:f0:a5:81:9a:02:32:e0:91:73:07:0c:3b: d3:b8:04:de:e6:90:44:af:33:47:f6:f3:01:f4:35:69:34:0e: ce:45:1c:f4:97:8a:32:35:d4:23:3b:76:60:30:f8:16:e3:03: 05:2c:69:3d:9f:b5:74:cf:23:23:8a:59:42:97:d3:1a:88:d3: 85:fc:55:9a:c8:c4:bb:7a:b3:0c:14:02:fb:53:88:98:bb:98: ad:40:55:41:bb:b5:67:e1:7e:16:c6:4b:84:4a:05:71:d3:19: 6c:50:2b:69:76:f2:3d:32:57:7a:57:c6:b5:b0:c4:cd:9d:cf: 21:67:92:07:74:b0:07:eb:60:f6:24:07:1f:07:97:86:65:46: 70:67:6f:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV9FxjmrOgHdprAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YzdjODE4ZDYtZjRiNC00OWI3LWJlMGUtYmExNGNhOWRjYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dPnYIhkif3HvSYBd6eWKVYdR/UBlrvqjeQB 6MN11y4irnTRVPgVQxqbSGouUc2qbs/bKeKjWSxkT2DtNUxlFFUPCJUOgTV9G+dc qRzTM6NkHOJiuxTMYRWis8pj1ZwR9548ti6z3DqirPsCS420Tld3qOezQ5adKnFV 5KKjMMtxpv48fydiTIyQJfn+HWMQs6dUdEcM7EvOIQcNOazx5alBmGBNMeisv+WK qhaEhNmJzfiteajNrBI3HBxXMCptY7f+lMa3ndu5G+juLQwxp5KqcqPNFJM7KL+H AGSEtisxJmDpGRZ8N4e0PtVJ9F5HxTRd8b95bdPJFvVpqCaUuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHfyaI5F0DPlIPlDtm+E+oak0MoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMWVhZWI1MzMtMmFiNS0z ZWEwLWIxMjAtMmMxZTEyNWIxNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtjhgKphJ50kgqshVTpFubsy3FJAn6uc/VCd0w30/aBiq33M8Bm PZTt7d5k5rPDDsdg2lqUqvCtcMrkN0qpZnLGUPjT0nf+riT+y1aMg+7hhu7k+6+z RFl/9xakbPw0llpjF0LHs+S+TcjrkisEMnm7LfClgZoCMuCRcwcMO9O4BN7mkESv M0f28wH0NWk0Ds5FHPSXijI11CM7dmAw+BbjAwUsaT2ftXTPIyOKWUKX0xqI04X8 VZrIxLt6swwUAvtTiJi7mK1AVUG7tWfhfhbGS4RKBXHTGWxQK2l28j0yV3pXxrWw xM2dzyFnkgd0sAfrYPYkBx8Hl4ZlRnBnbxs= -----END CERTIFICATE-----Generated at Sun Oct 11 18:39:58 2026 by rpki-client