$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa File: 0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa (raw, json) Hash identifier: lkR/6/DtM1VcYQg7FPO6Ia2EinHI14l+MlImu6Z3LQo= Subject key identifier: 97:2F:E4:DF:22:0A:21:8B:E4:0A:66:35:5C:29:41:1C:13:9F:DA:1E Certificate issuer: /CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6 Certificate serial: 010D0C9F4328584F42781E2D0E99F39C89F32B00 Authority key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 19568 IP address blocks: 2604:92c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1e:2d:0e:99:f3:9c:89:f3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=d8685338-31a7-46a0-a4e4-9cbedb1017e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:62:d1:2f:a7:1b:10:ff:27:46:37:4e:7e: 83:7d:b6:b1:8a:2b:61:2b:4f:65:25:40:9d:be:99: 72:1c:4d:a2:b4:b9:da:47:54:e2:28:0f:01:ef:c8: d7:2e:e3:a4:f5:1d:5a:11:71:c4:d0:d1:ec:ad:fe: f8:99:b6:01:f2:00:e6:e8:60:14:4c:a2:6f:52:9a: 72:0a:54:f2:7d:f2:40:87:77:96:5d:b2:06:ec:c1: 66:4e:ab:cd:67:05:5e:4f:d8:fc:5b:29:b2:d0:23: d3:f3:89:8e:2a:37:cf:fc:d3:e9:a9:60:05:11:48: c5:c0:0d:8e:de:c5:03:85:48:df:01:97:a0:6a:bd: 12:47:73:56:1b:0b:a0:9c:65:55:4d:3b:1c:45:9f: 2c:bd:ac:2e:d4:b7:17:d9:aa:f5:3d:82:ea:9f:b4: fe:b8:66:45:35:69:e2:64:c9:5c:87:0e:6f:7a:dc: 92:01:8b:12:f0:3c:2a:ab:45:04:7d:c3:88:cd:c5: 9b:3b:05:85:5d:7c:7a:c5:ba:6c:8e:7a:ca:a3:67: bf:ae:bc:29:c5:91:11:d2:a1:25:fa:91:99:a6:d3: a9:a3:01:3f:6f:7e:bf:db:cc:67:dc:c9:84:07:c0: c1:36:af:c3:dd:14:fe:2b:16:86:b6:ad:f8:5d:b5: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2F:E4:DF:22:0A:21:8B:E4:0A:66:35:5C:29:41:1C:13:9F:DA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/0f0d3032-365f-3c7a-aea2-8dc8596d08b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl X509v3 Authority Key Identifier: keyid:22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer sbgp-ipAddrBlock: critical IPv6: 2604:92c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e7:f3:dc:2b:c5:b2:c8:d8:1d:9a:14:50:9d:0e:f7:24:9b: 6f:c4:e1:88:dd:ee:52:08:7e:de:b7:39:c4:48:82:a1:69:79: 81:d9:24:e9:51:17:b9:33:8f:d4:85:58:89:2c:2d:fe:6d:70: f6:fc:e5:4f:9e:70:18:a5:90:58:6b:3f:b2:88:64:99:65:73: 85:99:16:1c:84:1a:81:51:16:e5:62:7e:9e:f8:da:e0:6e:ba: dc:8d:32:85:02:db:79:a7:20:71:0e:dd:02:c1:15:89:84:45: 37:65:35:2b:01:e8:93:96:56:c5:8b:0c:01:f4:a9:90:c9:ab: a7:7b:9e:6f:1e:25:ec:e6:c7:71:5e:7f:af:03:be:c9:7b:df: 99:a3:9f:ac:5f:49:42:1e:bb:22:b0:ea:43:3a:5a:5b:91:44: 26:41:62:73:e6:95:3e:d3:36:99:d2:17:64:04:fd:41:a4:f4: 27:6d:a5:e7:b1:3d:68:ca:0d:0d:f1:2d:72:14:f8:97:2a:e6: 97:ff:3f:26:75:cf:20:05:a4:48:a2:98:4f:dd:42:58:66:61: 25:29:f2:cf:66:a3:88:75:d1:bb:9d:df:50:29:2c:e8:ad:a4: 1a:a8:e5:1d:d4:06:3b:f3:a2:ca:3b:f8:c3:08:cc:ff:3d:76: 38:e0:98:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9CeB4tDpnznInzKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZhNzE1MzItZWExYi00ZTI3LWEyYTctYzkwYjlkYjEx OWI2MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDg2ODUzMzgtMzFhNy00NmEwLWE0ZTQtOWNiZWRiMTAxN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qBi0S+nGxD/J0Y3Tn6DfbaxiithK09lJUCd vplyHE2itLnaR1TiKA8B78jXLuOk9R1aEXHE0NHsrf74mbYB8gDm6GAUTKJvUppy ClTyffJAh3eWXbIG7MFmTqvNZwVeT9j8Wymy0CPT84mOKjfP/NPpqWAFEUjFwA2O 3sUDhUjfAZegar0SR3NWGwugnGVVTTscRZ8svawu1LcX2ar1PYLqn7T+uGZFNWni ZMlchw5vetySAYsS8Dwqq0UEfcOIzcWbOwWFXXx6xbpsjnrKo2e/rrwpxZER0qEl +pGZptOpowE/b36/28xn3MmEB8DBNq/D3RT+KxaGtq34XbWmqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJcv5N8iCiGL5ApmNVwpQRwTn9oeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmE3 MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBiOWRiMTE5YjYvMGYwZDMwMzItMzY1Zi0z YzdhLWFlYTItOGRjODU5NmQwOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZhNzE1MzItZWExYi00ZTI3LWEy YTctYzkwYjlkYjExOWI2L2VmYTcxNTMyLWVhMWItNGUyNy1hMmE3LWM5MGI5ZGIx MTliNi5jcmwwHwYDVR0jBBgwFoAUIv1HcFYH7lAkyWZbFcmDwyI94T4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmE3MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBi OWRiMTE5YjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSSwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC35/PcK8WyyNgdmhRQnQ73JJtvxOGI3e5SCH7etznESIKhaXmB2STp URe5M4/UhViJLC3+bXD2/OVPnnAYpZBYaz+yiGSZZXOFmRYchBqBURblYn6e+Nrg brrcjTKFAtt5pyBxDt0CwRWJhEU3ZTUrAeiTllbFiwwB9KmQyaune55vHiXs5sdx Xn+vA77Je9+Zo5+sX0lCHrsisOpDOlpbkUQmQWJz5pU+0zaZ0hdkBP1BpPQnbaXn sT1oyg0N8S1yFPiXKuaX/z8mdc8gBaRIophP3UJYZmElKfLPZqOIddG7nd9QKSzo raQaqOUd1AY786LKO/jDCMz/PXY44JiT -----END CERTIFICATE-----Generated at Wed Sep 23 13:24:24 2026 by rpki-client