$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/12701742-a7fd-3005-ad6e-4b092db0c41c.roa File: 12701742-a7fd-3005-ad6e-4b092db0c41c.roa (raw, json) Hash identifier: uJ3FOSTOQ8YeCo71pvyQnlAPB8oSPLBS/unXhtMazIE= Subject key identifier: 78:46:F4:50:4D:68:98:EF:16:2A:37:F8:F2:F6:93:4A:63:B8:3A:52 Certificate issuer: /CN=64017149-c00e-41fb-8705-6c098e85b279 Certificate serial: 010D0C9F4328584EFB4762305B948F77988E9600 Authority key identifier: E1:58:AB:1C:8B:3E:71:F6:A9:AA:2D:F0:7B:CF:B8:C7:2C:75:D6:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/12701742-a7fd-3005-ad6e-4b092db0c41c.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 17149 IP address blocks: 2604:1800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:62:30:5b:94:8f:77:98:8e:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64017149-c00e-41fb-8705-6c098e85b279 Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=3624b192-64c9-4c97-916f-e18a4a993635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:03:42:6a:b6:c6:73:ca:51:a9:c8:62:eb: 6f:f3:f4:33:7e:be:1f:ac:7e:2f:8c:57:85:4d:3a: c5:d8:47:af:f7:34:75:7a:a4:86:9a:17:3b:ea:ca: d9:13:77:7a:b5:41:5d:41:f1:41:a5:63:70:5c:db: e1:ae:06:d5:4e:d8:68:06:9c:35:08:f5:cf:84:31: e6:96:e3:73:f3:10:7b:6a:39:81:50:41:f3:00:03: 0c:01:05:a5:c3:8a:41:b0:a3:e3:ee:b9:b9:c9:20: 4d:9b:ac:d3:28:b6:b1:19:2a:20:4a:8b:aa:f5:39: 86:03:4c:30:36:65:a2:d6:37:07:be:35:0e:ff:2d: 5f:90:e7:e3:3d:5e:3a:62:05:84:53:6c:c2:30:9c: 1a:4a:0b:8f:be:6f:a1:dd:57:4d:17:a4:dc:94:ae: e2:37:66:11:ea:bf:67:f0:1f:4a:f0:3b:40:1a:f9: 4d:fa:71:00:b7:ce:61:f0:83:16:ba:c2:bc:c6:8f: 3a:61:c9:69:2a:e4:68:bd:01:a1:b3:e6:ad:dc:bb: e8:a7:98:45:02:3a:92:48:84:05:b6:1e:b6:18:6f: ed:80:89:00:2a:27:5a:47:eb:a6:d0:c9:2c:6b:74: be:f0:b7:97:d0:0a:a7:db:f3:ab:41:fe:bf:4d:b9: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:F4:50:4D:68:98:EF:16:2A:37:F8:F2:F6:93:4A:63:B8:3A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/12701742-a7fd-3005-ad6e-4b092db0c41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.crl X509v3 Authority Key Identifier: keyid:E1:58:AB:1C:8B:3E:71:F6:A9:AA:2D:F0:7B:CF:B8:C7:2C:75:D6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer sbgp-ipAddrBlock: critical IPv6: 2604:1800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:37:5e:ce:38:f2:12:ae:27:55:00:b5:0f:81:fb:e4:03:5b: 51:bc:e8:3c:5b:25:63:fa:16:1a:2e:84:a5:9e:01:0d:be:93: 88:61:5d:05:b8:9d:38:95:dc:30:79:60:bf:cb:cb:86:6d:3d: 67:a0:7a:a3:14:31:9b:d8:6f:8b:ff:0e:d5:9e:3a:9f:e6:8f: 76:9d:e2:9a:2d:69:07:75:33:e3:ef:a8:af:2d:df:dd:b1:20: 24:93:b3:1f:98:b1:c1:03:30:3d:27:17:44:e0:34:61:2f:69: d9:0c:4b:d1:5d:d3:31:2b:5f:42:64:c2:0c:55:87:02:fa:af: 3f:7f:ed:c4:32:d1:21:9d:7a:71:72:37:58:45:7a:a5:30:a5: a8:9d:4e:91:80:f1:54:09:19:a7:a9:09:74:ac:c6:76:87:ff: 01:ef:bf:20:04:4f:86:a0:59:9d:6d:4f:8c:71:80:a3:93:ce: a5:52:f9:dc:23:ff:c8:36:8e:b3:29:9c:c7:ee:d0:2d:7f:fa: 38:73:5b:be:f5:2f:c1:9d:4a:10:52:05:b8:54:ca:96:8c:ea: 0c:25:12:a1:8c:09:d6:8f:a2:50:e9:c1:ec:84:73:2a:f8:63: 36:fe:18:e5:99:d1:a3:41:dc:1c:5e:4c:5e:59:45:4d:c3:4f: 7e:f1:05:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE77R2IwW5SPd5iOlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQwMTcxNDktYzAwZS00MWZiLTg3MDUtNmMwOThlODVi Mjc5MB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk MzYyNGIxOTItNjRjOS00Yzk3LTkxNmYtZTE4YTRhOTkzNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3cDQmq2xnPKUanIYutv8/Qzfr4frH4vjFeF TTrF2Eev9zR1eqSGmhc76srZE3d6tUFdQfFBpWNwXNvhrgbVTthoBpw1CPXPhDHm luNz8xB7ajmBUEHzAAMMAQWlw4pBsKPj7rm5ySBNm6zTKLaxGSogSouq9TmGA0ww NmWi1jcHvjUO/y1fkOfjPV46YgWEU2zCMJwaSguPvm+h3VdNF6TclK7iN2YR6r9n 8B9K8DtAGvlN+nEAt85h8IMWusK8xo86YclpKuRovQGhs+at3Lvop5hFAjqSSIQF th62GG/tgIkAKidaR+um0Mksa3S+8LeX0Aqn2/OrQf6/TbmIqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHhG9FBNaJjvFio3+PL2k0pjuDpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NDAx NzE0OS1jMDBlLTQxZmItODcwNS02YzA5OGU4NWIyNzkvMTI3MDE3NDItYTdmZC0z MDA1LWFkNmUtNGIwOTJkYjBjNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjQwMTcxNDktYzAwZS00MWZiLTg3 MDUtNmMwOThlODViMjc5LzY0MDE3MTQ5LWMwMGUtNDFmYi04NzA1LTZjMDk4ZTg1 YjI3OS5jcmwwHwYDVR0jBBgwFoAU4VirHIs+cfapqi3we8+4xyx11uswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NDAxNzE0OS1jMDBlLTQxZmItODcwNS02YzA5 OGU4NWIyNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkN17OOPISridVALUPgfvkA1tRvOg8WyVj+hYaLoSlngENvpOIYV0F uJ04ldwweWC/y8uGbT1noHqjFDGb2G+L/w7Vnjqf5o92neKaLWkHdTPj76ivLd/d sSAkk7MfmLHBAzA9JxdE4DRhL2nZDEvRXdMxK19CZMIMVYcC+q8/f+3EMtEhnXpx cjdYRXqlMKWonU6RgPFUCRmnqQl0rMZ2h/8B778gBE+GoFmdbU+McYCjk86lUvnc I//INo6zKZzH7tAtf/o4c1u+9S/BnUoQUgW4VMqWjOoMJRKhjAnWj6JQ6cHshHMq +GM2/hjlmdGjQdwcXkxeWUVNw09+8QUj -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:38 2026 by rpki-client