$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/709142d9-08be-3049-929c-0fce49bd3849.roa File: 709142d9-08be-3049-929c-0fce49bd3849.roa (raw, json) Hash identifier: HgEJ9WkoZUq6gJY+oTLCOeNByRhtyvZGtow8ablEMqk= Subject key identifier: 7A:13:44:E1:70:0E:22:C9:30:86:53:59:88:A7:A6:25:B3:D8:61:F3 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F4C3D7518F2D2EA023A033700 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/709142d9-08be-3049-929c-0fce49bd3849.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 54282 IP address blocks: 2620:147::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:75:18:f2:d2:ea:02:3a:03:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7872b042-e059-4df5-900a-20062a03f55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:ea:b6:df:3e:aa:43:f2:f1:3d:56:c9:e9: 45:75:d2:2b:f2:b0:7b:05:db:71:a2:d6:95:b8:4e: 22:31:3b:d7:f6:af:b1:00:b0:e7:e9:90:87:e6:95: ef:fa:e0:39:b7:75:19:05:8d:36:63:48:78:a4:69: 4f:98:de:bf:d9:8a:a1:74:33:b3:93:10:23:8d:9b: d2:06:78:8b:ef:5e:1f:e3:41:85:6f:f6:57:c5:92: 24:87:28:37:07:f7:a2:ea:80:b2:92:ad:ac:9b:9a: 8b:b3:09:86:16:61:21:69:87:0a:a2:27:86:b3:5b: 91:51:c8:28:dc:be:4d:a3:8d:e5:ee:34:51:e8:e4: 87:6e:0c:52:ee:9c:1a:d7:0c:cf:ef:2e:c2:3a:12: 7a:d4:90:18:f9:10:d5:bc:10:f8:3f:5a:6a:5d:38: 97:2c:c1:41:b4:9b:5e:3d:3e:fa:47:42:92:c0:8a: e0:f3:6d:89:8e:c5:9d:e9:39:82:3b:89:22:8b:9a: 51:ad:7f:d5:eb:76:76:2d:59:56:59:77:81:b2:eb: b4:ad:4d:01:12:08:50:a7:eb:fe:fd:7d:4f:62:1b: 91:52:69:c7:57:21:5e:1a:1d:77:c5:01:2b:88:2c: 1d:c6:99:1d:61:d1:e7:be:c4:ab:b5:44:7a:4d:9b: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:44:E1:70:0E:22:C9:30:86:53:59:88:A7:A6:25:B3:D8:61:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/709142d9-08be-3049-929c-0fce49bd3849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b7:a3:58:b3:57:6f:94:09:6c:f5:dd:0f:1f:b5:cd:0b:bf: f3:98:88:03:0c:5c:17:38:d6:6e:69:f6:a0:e6:c6:c0:b5:b8: 58:75:77:e5:52:4e:d2:f3:3e:a8:cd:ad:72:20:6f:49:e7:0f: 39:39:fb:25:0c:f4:43:d8:90:79:f7:80:8e:35:0e:a3:78:2f: b1:26:d6:36:36:ad:c8:40:8e:d2:8f:e4:db:22:9b:3b:6d:7b: c6:d1:39:c8:97:35:f3:a6:51:c3:83:a3:22:1d:8d:ef:1b:b5: f4:60:9f:3f:d6:cd:de:4a:24:9e:7b:1d:07:ae:cf:ec:6a:cf: 9f:56:ec:92:8f:f2:66:60:0d:e3:ed:c9:18:aa:f4:44:cf:6f: 5d:6b:4a:79:c1:76:e7:4e:0a:f7:29:fc:08:d3:fd:86:de:f9: 1e:6b:17:16:db:5b:9d:b8:01:1b:1e:43:ab:c1:f2:93:96:b7: 2a:14:dc:03:86:97:13:6d:0d:a1:90:2e:34:6b:ad:91:b8:de: f2:89:1b:d5:cc:d9:21:87:8a:ef:2a:80:70:8d:ce:91:cc:b9: ff:bb:71:ce:9c:7b:98:43:d8:dd:1c:7e:ce:b3:59:57:67:88: d2:8d:df:bd:39:fc:40:d4:09:11:04:d1:ed:96:42:85:1c:08: e0:34:9e:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPXUY8tLqAjoDNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Nzg3MmIwNDItZTA1OS00ZGY1LTkwMGEtMjAwNjJhMDNmNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7qtt8+qkPy8T1WyelFddIr8rB7BdtxotaV uE4iMTvX9q+xALDn6ZCH5pXv+uA5t3UZBY02Y0h4pGlPmN6/2YqhdDOzkxAjjZvS BniL714f40GFb/ZXxZIkhyg3B/ei6oCykq2sm5qLswmGFmEhaYcKoieGs1uRUcgo 3L5No43l7jRR6OSHbgxS7pwa1wzP7y7COhJ61JAY+RDVvBD4P1pqXTiXLMFBtJte PT76R0KSwIrg822JjsWd6TmCO4kii5pRrX/V63Z2LVlWWXeBsuu0rU0BEghQp+v+ /X1PYhuRUmnHVyFeGh13xQEriCwdxpkdYdHnvsSrtUR6TZtl/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHoTROFwDiLJMIZTWYinpiWz2GHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNzA5MTQyZDktMDhiZS0z MDQ5LTkyOWMtMGZjZTQ5YmQzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJbejWLNXb5QJbPXdDx+1zQu/85iIAwxcFzjWbmn2oObGwLW4WHV3 5VJO0vM+qM2tciBvSecPOTn7JQz0Q9iQefeAjjUOo3gvsSbWNjatyECO0o/k2yKb O217xtE5yJc186ZRw4OjIh2N7xu19GCfP9bN3koknnsdB67P7GrPn1bsko/yZmAN 4+3JGKr0RM9vXWtKecF2504K9yn8CNP9ht75HmsXFttbnbgBGx5Dq8Hyk5a3KhTc A4aXE20NoZAuNGutkbje8okb1czZIYeK7yqAcI3Okcy5/7txzpx7mEPY3Rx+zrNZ V2eI0o3fvTn8QNQJEQTR7ZZChRwI4DSe5A== -----END CERTIFICATE-----Generated at Tue Oct 13 23:01:37 2026 by rpki-client