$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa File: 25f78cd6-2361-34d7-bc58-29a86b5c8031.roa (raw, json) Hash identifier: tF9ZfyLHKfX7wK6768CDl3lRwTlueb5kPtzEuvPoJFE= Subject key identifier: AF:E4:8B:AB:6E:0A:6A:79:7D:22:8A:CD:DD:AF:25:82:8E:F2:D7:20 Certificate issuer: /CN=0acd930f-69db-4fad-a737-b4b3b2f142c6 Certificate serial: 010D0C9F4328584F19FCFD442FB0CDC596ECE900 Authority key identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 396836 IP address blocks: 2604:24e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fd:44:2f:b0:cd:c5:96:ec:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0acd930f-69db-4fad-a737-b4b3b2f142c6 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=590aa744-0585-44e7-9b1e-5de629480f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:92:65:cd:99:d1:dd:2a:5e:b3:f5:5e:be: ce:4b:7e:f1:a2:49:af:7d:a4:c9:04:5f:c7:9f:c8: 60:95:e4:4a:ba:a7:ad:41:b0:05:3e:19:b5:8d:18: 1e:79:a4:cd:e5:cf:87:52:5b:5d:a2:2e:89:e5:a8: 51:85:fb:4d:87:1b:14:9f:a1:8e:91:b7:d5:ea:55: cc:62:25:a8:c3:5b:af:a1:ea:4d:52:a1:b3:9d:98: e8:d8:bd:85:c5:80:71:da:d5:de:9f:44:93:92:eb: c7:29:92:62:ba:eb:af:12:0b:f3:31:60:dc:66:30: 3d:67:5b:16:fe:d3:05:56:a2:52:99:23:3d:34:01: dd:44:8e:8a:6a:53:23:2c:43:76:9a:83:90:d7:7f: 35:c0:dd:59:db:ec:4c:38:bd:79:86:a7:c7:ce:dd: 28:d0:e6:68:1c:36:70:01:e6:5e:9a:1a:e5:30:27: 23:23:3d:e5:97:86:ac:2f:7a:eb:ff:f9:41:b3:00: da:7c:02:94:cc:bd:93:8f:5f:cf:90:37:a5:9a:f6: ed:77:42:14:bf:9f:63:d6:87:21:39:7c:ea:44:26: 74:61:06:4d:10:50:f8:6a:c9:5d:a8:fd:66:97:7f: fe:63:4e:ca:ec:05:4e:d6:b8:28:bb:b1:be:48:98: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:8B:AB:6E:0A:6A:79:7D:22:8A:CD:DD:AF:25:82:8E:F2:D7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl X509v3 Authority Key Identifier: keyid:12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer sbgp-ipAddrBlock: critical IPv6: 2604:24e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:78:90:be:cc:27:70:22:2c:40:9b:4c:6e:62:73:e4:dc:fa: 17:c4:1b:0e:72:83:6e:fa:19:c4:f5:c1:d8:59:97:c9:03:35: 29:90:7c:0c:70:06:42:f1:e7:0f:94:b5:44:d9:2c:af:58:48: d8:97:52:0c:4a:06:c2:81:84:3d:df:c3:e2:8f:a5:64:b9:02: f5:29:bf:f5:b2:9d:17:2c:b5:f0:9e:cb:df:db:d3:a9:b8:cb: ea:a9:2a:3f:a5:35:b5:06:35:e1:bb:d3:6e:a7:93:0b:9d:16: 3a:14:4b:25:0d:86:34:4b:52:4f:6d:ee:b4:53:58:c6:d3:36: ab:39:19:37:ea:a0:46:02:0d:d1:7a:86:0b:2d:8e:e2:28:96: 4b:81:09:e2:1c:07:76:df:ed:8d:87:36:57:77:b8:6f:6a:07: 5f:c4:5a:f8:c6:26:dd:e3:4b:b0:d4:8e:6f:5f:f5:0b:fc:e4: b1:e9:f4:65:25:b1:f4:88:03:3f:5a:c8:dd:3e:9b:20:81:ce: 1b:65:13:0a:76:b2:35:99:92:55:cd:fe:b2:64:30:37:b3:0b: cc:29:d8:ed:86:f8:23:ec:55:38:91:e1:d4:3f:3e:f2:f9:56: 49:28:75:42:27:37:31:f3:9d:93:72:c0:95:88:ff:ed:75:c7: a2:75:89:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Z/P1EL7DNxZbs6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFjZDkzMGYtNjlkYi00ZmFkLWE3MzctYjRiM2IyZjE0 MmM2MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NTkwYWE3NDQtMDU4NS00NGU3LTliMWUtNWRlNjI5NDgwZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU6SZc2Z0d0qXrP1Xr7OS37xokmvfaTJBF/H n8hgleRKuqetQbAFPhm1jRgeeaTN5c+HUltdoi6J5ahRhftNhxsUn6GOkbfV6lXM YiWow1uvoepNUqGznZjo2L2FxYBx2tXen0STkuvHKZJiuuuvEgvzMWDcZjA9Z1sW /tMFVqJSmSM9NAHdRI6KalMjLEN2moOQ1381wN1Z2+xMOL15hqfHzt0o0OZoHDZw AeZemhrlMCcjIz3ll4asL3rr//lBswDafAKUzL2Tj1/PkDelmvbtd0IUv59j1och OXzqRCZ0YQZNEFD4asldqP1ml3/+Y07K7AVO1rgou7G+SJhC5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/ki6tuCmp5fSKKzd2vJYKO8tcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYWNk OTMwZi02OWRiLTRmYWQtYTczNy1iNGIzYjJmMTQyYzYvMjVmNzhjZDYtMjM2MS0z NGQ3LWJjNTgtMjlhODZiNWM4MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGFjZDkzMGYtNjlkYi00ZmFkLWE3 MzctYjRiM2IyZjE0MmM2LzBhY2Q5MzBmLTY5ZGItNGZhZC1hNzM3LWI0YjNiMmYx NDJjNi5jcmwwHwYDVR0jBBgwFoAUEnzpB2drgeJ3n5xiN123GV/jZEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wYWNkOTMwZi02OWRiLTRmYWQtYTczNy1iNGIz YjJmMTQyYzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQk4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXeJC+zCdwIixAm0xuYnPk3PoXxBsOcoNu+hnE9cHYWZfJAzUpkHwM cAZC8ecPlLVE2SyvWEjYl1IMSgbCgYQ938Pij6VkuQL1Kb/1sp0XLLXwnsvf29Op uMvqqSo/pTW1BjXhu9Nup5MLnRY6FEslDYY0S1JPbe60U1jG0zarORk36qBGAg3R eoYLLY7iKJZLgQniHAd23+2NhzZXd7hvagdfxFr4xibd40uw1I5vX/UL/OSx6fRl JbH0iAM/WsjdPpsggc4bZRMKdrI1mZJVzf6yZDA3swvMKdjthvgj7FU4keHUPz7y +VZJKHVCJzcx852TcsCViP/tdceidYnh -----END CERTIFICATE-----Generated at Mon Sep 28 18:29:53 2026 by rpki-client