$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa File: acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa (raw, json) Hash identifier: iTsCPFTcgs5PqewC12B9qVP9BLADB0t/EYjALQ28n7A= Subject key identifier: A3:85:ED:A0:09:0F:3F:27:8F:87:D8:57:B5:4C:F1:D0:B9:F4:29:12 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F4975DE1706EE39C29B4937C0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394002 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:de:17:06:ee:39:c2:9b:49:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9851e0ad-4700-4477-aa5b-7e3f08b9a408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:0f:8c:84:f1:84:9a:7d:1f:32:07:6b:a8: b8:5f:b0:80:28:2b:29:ef:f4:f6:0a:eb:c8:3d:17: 0f:74:38:ce:4c:b7:40:27:70:de:f3:da:9e:02:54: 47:0b:c1:28:ef:cb:ba:12:f6:55:11:b6:41:e9:fb: c1:cd:4c:bc:0d:29:21:19:67:d1:10:4a:98:ee:81: 03:b9:d1:6f:14:de:75:60:ef:e1:5a:a6:2b:74:06: 53:d9:97:cc:82:60:3f:53:8b:bc:6c:03:a4:6d:e9: f2:52:7d:e8:2d:17:2d:7f:00:10:e1:38:41:3f:ed: b0:42:79:1e:79:8a:49:dd:29:e0:84:ef:9c:a9:96: be:0d:89:d2:6c:af:2c:24:8a:01:da:8c:62:af:cb: 1f:6c:c5:92:af:36:50:22:4c:c6:a5:7c:b6:80:fa: af:f3:f6:0b:9e:68:c7:43:3d:95:d4:7c:a0:8e:2a: 2c:47:3b:e5:da:51:2e:28:d6:f4:b3:7b:d5:d1:a1: 83:30:7d:96:95:bd:51:53:a6:3d:7e:87:62:d7:2d: 3c:50:2d:7b:5d:b2:ba:ac:0e:ea:4a:ac:0d:4c:bd: 8b:fc:c0:78:b9:1e:4f:05:d1:5d:5d:db:16:c0:43: 88:7e:5c:b4:63:12:16:61:6f:2b:96:83:ba:d1:e8: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:ED:A0:09:0F:3F:27:8F:87:D8:57:B5:4C:F1:D0:B9:F4:29:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:77:7b:ad:ce:f4:20:90:f2:53:35:88:0c:a5:48:4c:32:77: 6a:3a:5e:c5:4c:48:ee:25:5c:1d:04:00:25:aa:24:2b:d0:6b: 8b:eb:68:fb:a8:56:55:3c:48:98:3d:e1:8f:91:ff:28:a2:9b: 7e:57:c4:75:a0:3c:28:62:35:c3:4c:f0:ec:f4:1e:e1:7c:c6: 72:d6:60:51:60:8f:e5:97:17:37:90:23:73:18:e7:20:1c:58: 2a:65:4c:20:34:fc:0c:a8:f1:c2:f4:08:80:ff:06:33:50:87: 3f:cf:b2:6a:76:38:57:0d:9f:94:25:e1:a5:46:ab:8c:70:4f: 42:1e:9a:b8:a5:b6:8c:f2:b1:c2:e5:8f:71:b8:95:7b:89:93: 47:17:67:ca:bf:83:07:d2:f4:d5:2d:9d:b9:31:85:ce:65:ba: 78:72:ab:9c:84:1e:54:cb:6d:70:9c:f4:c7:f0:77:81:38:f4: 88:a4:67:3b:41:6f:19:ac:d6:7e:9c:bd:a3:11:6a:02:72:04: 9a:d8:11:4b:82:4a:0f:64:c0:43:64:5e:2a:31:22:8d:7e:b5: af:dd:26:0b:4c:02:02:68:a4:40:7b:b4:2e:f1:07:0e:29:b1: 58:5f:96:72:fc:80:5d:9b:de:b2:a4:dd:be:ac:aa:77:65:c7: d8:3b:c6:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jdd4XBu45wptJN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg1MWUwYWQtNDcwMC00NDc3LWFhNWItN2UzZjA4YjlhNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYPjITxhJp9HzIHa6i4X7CAKCsp7/T2CuvI PRcPdDjOTLdAJ3De89qeAlRHC8Eo78u6EvZVEbZB6fvBzUy8DSkhGWfREEqY7oED udFvFN51YO/hWqYrdAZT2ZfMgmA/U4u8bAOkbenyUn3oLRctfwAQ4ThBP+2wQnke eYpJ3SnghO+cqZa+DYnSbK8sJIoB2oxir8sfbMWSrzZQIkzGpXy2gPqv8/YLnmjH Qz2V1HygjiosRzvl2lEuKNb0s3vV0aGDMH2Wlb1RU6Y9fodi1y08UC17XbK6rA7q SqwNTL2L/MB4uR5PBdFdXdsWwEOIfly0YxIWYW8rloO60ejCKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOF7aAJDz8nj4fYV7VM8dC59CkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYWNjOTVmMGYtYzliMi0z NmYxLTlmZDEtZDI4YTZjYjkyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYd3utzvQgkPJTNYgMpUhMMndqOl7FTEjuJVwdBAAlqiQr0GuL62j7 qFZVPEiYPeGPkf8oopt+V8R1oDwoYjXDTPDs9B7hfMZy1mBRYI/llxc3kCNzGOcg HFgqZUwgNPwMqPHC9AiA/wYzUIc/z7JqdjhXDZ+UJeGlRquMcE9CHpq4pbaM8rHC 5Y9xuJV7iZNHF2fKv4MH0vTVLZ25MYXOZbp4cquchB5Uy21wnPTH8HeBOPSIpGc7 QW8ZrNZ+nL2jEWoCcgSa2BFLgkoPZMBDZF4qMSKNfrWv3SYLTAICaKRAe7Qu8QcO KbFYX5Zy/IBdm96ypN2+rKp3ZcfYO8aT -----END CERTIFICATE-----Generated at Sun Sep 27 03:41:10 2026 by rpki-client