$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa File: 88ece442-8f41-38eb-bbac-573ccd14cd27.roa (raw, json) Hash identifier: T9NUkb2nNrLm5lbDm5lWJgbsezBVPjwOXeGBobMncXQ= Subject key identifier: 96:B3:DE:4A:DE:5A:75:45:CC:1D:DB:AF:92:D6:85:D4:A9:FC:E1:09 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F2957AAC27327477986959E00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14618 IP address blocks: 2620:147:c43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:aa:c2:73:27:47:79:86:95:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=aa5470f1-6a0a-4c0f-b4d3-24be287f0c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:d9:28:79:db:10:ab:d7:e9:4d:9e:c5:71: 63:bb:f8:be:7d:d6:f7:7c:75:98:94:59:1c:51:9b: 83:88:b2:a7:74:f6:e1:9f:67:98:74:32:bf:7e:ac: 40:43:77:cf:3a:c8:a4:21:46:e5:dc:94:3f:be:30: 84:fd:b8:04:62:f6:6e:df:ab:38:cb:e5:d0:7b:7c: 48:6a:d4:01:45:20:9b:3d:2b:f8:94:02:b1:d5:c9: 4c:5b:9e:68:3b:ce:4e:5b:dd:d0:e4:a4:7a:cf:e9: df:58:96:29:a9:e6:b0:ab:f0:0f:68:44:f9:6f:df: 6c:d7:f3:a1:7c:d6:f4:81:4a:d7:09:38:97:34:94: 07:47:2c:b2:89:e3:6c:1c:d1:e5:44:df:08:79:29: 8a:41:80:38:bb:44:67:be:23:ab:68:20:49:e0:15: da:f4:f4:87:9d:85:c3:db:a3:3d:14:f3:02:be:35: 27:58:91:3c:85:18:cb:21:aa:2f:a4:7f:3e:5e:0a: b9:11:aa:be:8b:bc:02:0f:ef:28:ac:ba:cc:44:6e: 0b:6b:fa:21:ad:87:1f:9c:d8:ba:b3:79:4b:f0:ac: 6e:47:92:a4:79:2a:43:1d:ea:22:8d:a8:78:0d:3e: a0:32:7f:df:01:50:22:b0:46:e8:4f:b2:11:ab:62: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B3:DE:4A:DE:5A:75:45:CC:1D:DB:AF:92:D6:85:D4:A9:FC:E1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/88ece442-8f41-38eb-bbac-573ccd14cd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6d:82:be:8f:97:18:43:ed:2e:4e:a8:a4:1a:44:85:cf:c3: b1:6e:68:e7:72:78:02:aa:7c:6a:6b:62:e4:e0:c4:18:e4:9a: 54:96:ad:04:b6:d0:76:16:72:51:64:5a:a9:3e:20:51:71:bc: ed:f7:05:98:f8:94:83:de:f3:80:87:67:57:7a:c1:26:2c:eb: ae:da:1e:56:7f:29:ce:aa:63:d9:f9:0f:22:74:1b:1b:e3:14: 2f:c8:ac:c0:ab:c3:6a:b2:97:4d:e3:0e:6c:61:e3:ff:e2:dc: ac:57:c1:02:51:1a:d1:82:77:14:a8:a1:46:4f:e7:5d:10:4b: bc:de:a5:30:5e:da:e2:b6:16:42:d8:aa:66:0e:7a:fc:96:25: 07:4f:8a:5c:34:98:68:05:a3:20:aa:b5:a7:87:99:af:07:56: 73:c3:cb:c1:70:67:82:26:87:76:4f:49:c1:05:09:f3:79:c2: 74:da:27:50:d4:4f:12:8b:fc:03:ee:0b:6e:27:75:ce:a9:98: cd:06:a1:10:b0:dd:eb:89:3c:f0:b7:1c:64:a5:2a:97:dc:48: bd:2f:6f:bb:5c:93:ff:ab:da:c1:ba:10:a7:1a:af:da:39:2b: fb:b8:d9:e3:2f:35:9a:16:10:4b:9d:6a:62:ef:24:34:9b:8a: 96:a9:97:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV6rCcydHeYaVngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YWE1NDcwZjEtNmEwYS00YzBmLWI0ZDMtMjRiZTI4N2YwYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FrZKHnbEKvX6U2exXFju/i+fdb3fHWYlFkc UZuDiLKndPbhn2eYdDK/fqxAQ3fPOsikIUbl3JQ/vjCE/bgEYvZu36s4y+XQe3xI atQBRSCbPSv4lAKx1clMW55oO85OW93Q5KR6z+nfWJYpqeawq/APaET5b99s1/Oh fNb0gUrXCTiXNJQHRyyyieNsHNHlRN8IeSmKQYA4u0RnviOraCBJ4BXa9PSHnYXD 26M9FPMCvjUnWJE8hRjLIaovpH8+Xgq5Eaq+i7wCD+8orLrMRG4La/ohrYcfnNi6 s3lL8KxuR5KkeSpDHeoijah4DT6gMn/fAVAisEboT7IRq2J6EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJaz3kreWnVFzB3br5LWhdSp/OEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvODhlY2U0NDItOGY0MS0z OGViLWJiYWMtNTczY2NkMTRjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFtgr6PlxhD7S5OqKQaRIXPw7FuaOdyeAKqfGprYuTgxBjkmlSW rQS20HYWclFkWqk+IFFxvO33BZj4lIPe84CHZ1d6wSYs667aHlZ/Kc6qY9n5DyJ0 GxvjFC/IrMCrw2qyl03jDmxh4//i3KxXwQJRGtGCdxSooUZP510QS7zepTBe2uK2 FkLYqmYOevyWJQdPilw0mGgFoyCqtaeHma8HVnPDy8FwZ4Imh3ZPScEFCfN5wnTa J1DUTxKL/APuC24ndc6pmM0GoRCw3euJPPC3HGSlKpfcSL0vb7tck/+r2sG6EKca r9o5K/u42eMvNZoWEEudamLvJDSbipapl2A= -----END CERTIFICATE-----Generated at Sun Oct 11 17:41:46 2026 by rpki-client