$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa File: acf36a33-67fc-3215-9ed3-788bbc338123.roa (raw, json) Hash identifier: a+49Jat9YXfZGjVSFwC9Z95bIXGypxyz+rG1beeGz4E= Subject key identifier: C4:69:23:55:D4:06:A1:2C:7F:1A:6C:A4:C8:8C:91:D8:82:A1:CA:70 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F2957B7E62C4652BF02CA3B20 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 396982 IP address blocks: 2620:147:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b7:e6:2c:46:52:bf:02:ca:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=385f1d98-5743-4308-8070-e4b799ef01cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:5c:99:6c:00:67:fd:59:2b:13:6d:bf:6e: 45:72:2c:da:6a:7a:08:91:7c:8a:29:18:e6:fb:42: 0b:77:16:f4:6a:f4:d7:22:b4:19:b2:7f:38:63:6e: 8e:ba:84:18:25:b6:5f:01:5f:44:64:6f:1f:88:33: 23:42:89:88:a9:4a:53:e8:62:cc:c3:b0:32:cf:c3: bf:f2:49:6f:99:ae:3e:97:55:59:0b:f5:ce:1b:2e: d9:4d:0a:f6:55:78:3c:e1:55:eb:4f:3f:93:8f:cd: 51:f6:a5:4c:47:10:85:b1:a3:42:ad:51:3e:b8:e8: 32:11:ee:ae:46:3d:a8:e7:8d:41:a7:02:0a:58:31: 1e:16:f5:d1:90:ae:a4:01:8e:7a:fe:f4:fe:1f:6c: 30:02:cb:54:e9:a8:a1:73:b5:c4:35:d7:08:ab:c5: dc:bd:12:d9:2b:f2:b9:89:6a:f3:e3:e8:02:39:d5: ba:00:6f:43:79:f3:fb:c3:9d:d5:30:30:69:a8:0e: cc:92:fe:6b:26:b8:5b:3f:c6:23:29:a1:a1:7e:ba: 79:90:b8:1a:44:03:ce:77:a0:47:bb:97:4b:59:f4: 31:98:52:08:59:4f:a2:19:c3:46:ca:9d:63:e6:b8: da:ce:f2:ff:ac:eb:21:b4:9f:32:2b:14:30:33:58: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:23:55:D4:06:A1:2C:7F:1A:6C:A4:C8:8C:91:D8:82:A1:CA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:23:ad:77:72:be:46:98:a8:cf:1c:bd:2a:1b:66:e1:bc:1f: 41:dd:c2:e0:e6:82:72:ce:0a:ca:18:a2:be:c4:6f:01:f0:1a: 4c:52:4c:90:42:7c:50:d2:c0:63:83:98:51:33:1b:39:de:35: 60:98:a2:75:33:ca:0c:7c:3a:44:1d:97:c9:08:53:9e:a6:1e: 21:64:1e:ce:84:e4:68:42:ac:9a:df:07:c4:fc:bf:8d:f6:0c: d9:ce:f7:5f:c8:8f:7d:8b:9e:ab:cf:b9:65:8c:67:4e:e2:67: 32:36:4a:ee:bc:14:5d:94:41:d2:9e:07:5d:da:86:37:13:eb: 27:fd:9a:66:d0:66:7f:de:9f:54:a6:bd:8e:2d:8d:2e:aa:d2: 57:fb:6f:31:4a:1f:7c:1b:02:98:db:e4:cb:f6:ce:16:26:35: 49:73:54:2f:16:a2:ca:4f:17:79:37:35:5f:2e:d4:42:ed:76: cb:73:86:ea:bd:ad:52:6e:1d:16:53:93:26:9a:2f:0e:67:21: 05:89:e6:ae:2e:e9:09:06:f2:0d:bd:ae:8a:ab:2f:9d:e3:5d: 4e:fb:fa:a7:d7:0a:dc:9d:85:fd:31:a7:29:ba:96:75:0f:f1: 61:37:93:ee:db:7a:40:bb:f7:aa:f2:a2:84:1c:65:54:2c:ae: b7:e6:45:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV7fmLEZSvwLKOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk Mzg1ZjFkOTgtNTc0My00MzA4LTgwNzAtZTRiNzk5ZWYwMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9FcmWwAZ/1ZKxNtv25FcizaanoIkXyKKRjm +0ILdxb0avTXIrQZsn84Y26OuoQYJbZfAV9EZG8fiDMjQomIqUpT6GLMw7Ayz8O/ 8klvma4+l1VZC/XOGy7ZTQr2VXg84VXrTz+Tj81R9qVMRxCFsaNCrVE+uOgyEe6u Rj2o541BpwIKWDEeFvXRkK6kAY56/vT+H2wwAstU6aihc7XENdcIq8XcvRLZK/K5 iWrz4+gCOdW6AG9DefP7w53VMDBpqA7Mkv5rJrhbP8YjKaGhfrp5kLgaRAPOd6BH u5dLWfQxmFIIWU+iGcNGyp1j5rjazvL/rOshtJ8yKxQwM1g46wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRpI1XUBqEsfxpspMiMkdiCocpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYWNmMzZhMzMtNjdmYy0z MjE1LTllZDMtNzg4YmJjMzM4MTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8jrXdyvkaYqM8cvSobZuG8H0HdwuDmgnLOCsoYor7EbwHwGkxS TJBCfFDSwGODmFEzGzneNWCYonUzygx8OkQdl8kIU56mHiFkHs6E5GhCrJrfB8T8 v432DNnO91/Ij32LnqvPuWWMZ07iZzI2Su68FF2UQdKeB13ahjcT6yf9mmbQZn/e n1SmvY4tjS6q0lf7bzFKH3wbApjb5Mv2zhYmNUlzVC8WospPF3k3NV8u1ELtdstz huq9rVJuHRZTkyaaLw5nIQWJ5q4u6QkG8g29roqrL53jXU77+qfXCtydhf0xpym6 lnUP8WE3k+7bekC796ryooQcZVQsrrfmRRw= -----END CERTIFICATE-----Generated at Mon Oct 12 16:18:47 2026 by rpki-client