$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa File: f137003b-910b-3db6-a967-866681d68404.roa (raw, json) Hash identifier: UFwjh1BtVVwgF/sWMiZsfpE4XAFmeWixqQG7j+G4Qdo= Subject key identifier: 83:F7:F1:22:94:88:2A:DE:05:CF:03:59:CD:85:22:AB:1C:92:30:D6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C1744BA00307B3E6BE80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 2001:56b:3f20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c1:74:4b:a0:03:07:b3:e6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90a4bfdf-4e82-431c-bf62-56cae5af6221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:a8:05:72:40:a1:54:00:29:ce:5d:21:c8: 54:95:4e:fa:bb:a6:14:10:dd:0b:fa:37:ca:e5:df: 79:a2:da:a1:f3:21:db:77:d1:26:f3:35:59:14:89: 5e:16:41:49:d0:96:46:aa:f5:c3:08:ab:26:97:1d: 5c:08:52:54:e6:92:56:3d:44:7e:ca:b7:e9:e8:86: 93:14:a4:1b:b1:c6:72:4f:da:fa:c6:89:0b:6c:d0: 2a:b7:7b:00:a1:1e:d8:61:7d:2c:f0:a7:11:d8:a9: d8:d9:52:96:81:7f:ff:02:9b:db:e4:e0:13:b2:17: 9b:8d:7c:78:8f:0a:bf:3b:e9:df:77:f4:9d:a1:16: 15:e5:a2:f5:87:58:1f:8f:72:2d:b0:2a:0a:c2:b8: e5:55:6f:25:97:5a:aa:55:8a:e5:3a:f1:38:65:cd: ab:16:98:ac:2f:a4:5f:4c:8d:db:20:f7:f4:3c:6d: 28:56:41:0a:9c:0d:b2:2b:d9:ee:f7:11:d2:c1:54: 94:ce:af:77:d5:0b:f5:08:c9:f3:e4:cb:01:c0:fc: af:3c:5a:c9:31:5f:a6:ca:2b:59:5b:b9:6a:d6:8b: 17:7a:30:b9:45:cb:48:7a:55:d5:59:3d:70:05:01: fa:a7:e3:c7:e2:b8:57:d1:f2:10:fc:25:c4:fa:b2: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:F1:22:94:88:2A:DE:05:CF:03:59:CD:85:22:AB:1C:92:30:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:16:3f:04:24:3a:5d:e1:05:19:79:56:3a:60:c9:72:ac:5a: 0e:6c:cb:98:c8:e3:c5:e6:50:53:43:4d:a7:59:d2:35:9b:2a: ec:98:31:46:ed:58:59:52:e3:9f:37:1d:0c:4b:fe:ed:c2:4d: 48:54:a9:bb:9c:62:b5:3e:18:26:1c:86:4c:d7:3c:69:fd:ad: 7f:52:20:35:1f:d3:34:1e:62:42:2d:a9:71:f0:fd:d1:2f:e3: f1:89:18:0f:d3:c8:74:e9:55:22:f4:bf:ae:ba:7b:a6:8f:44: ec:df:b7:53:29:2c:93:38:09:1e:d3:c8:64:b7:2f:98:71:20: f3:b2:37:9a:8a:d8:f6:b4:eb:1f:73:41:cc:3c:6d:ee:68:3b: ea:51:9e:a7:e4:61:97:4d:a0:8e:0a:29:78:d7:70:3b:3e:d7: 8e:7d:c1:93:7a:d2:b7:74:4f:de:d2:59:9b:0f:a6:2f:d0:37: bf:75:e1:ad:9f:9f:e2:80:b7:ec:a0:97:1e:b6:46:a2:b1:fa: cd:45:03:f4:23:9f:f5:c2:96:02:a8:fc:8d:e0:aa:39:de:16: e7:46:ea:eb:77:24:b0:63:2e:09:86:2f:65:4f:06:1f:7e:d3: 00:44:84:c9:f2:da:92:11:1e:af:62:9d:08:06:94:a6:a9:d0: 64:c8:fb:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc8F0S6ADB7PmvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBhNGJmZGYtNGU4Mi00MzFjLWJmNjItNTZjYWU1YWY2MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0uoBXJAoVQAKc5dIchUlU76u6YUEN0L+jfK 5d95otqh8yHbd9Em8zVZFIleFkFJ0JZGqvXDCKsmlx1cCFJU5pJWPUR+yrfp6IaT FKQbscZyT9r6xokLbNAqt3sAoR7YYX0s8KcR2KnY2VKWgX//Apvb5OATshebjXx4 jwq/O+nfd/SdoRYV5aL1h1gfj3ItsCoKwrjlVW8ll1qqVYrlOvE4Zc2rFpisL6Rf TI3bIPf0PG0oVkEKnA2yK9nu9xHSwVSUzq931Qv1CMnz5MsBwPyvPFrJMV+myitZ W7lq1osXejC5RctIelXVWT1wBQH6p+PH4rhX0fIQ/CXE+rIaSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIP38SKUiCreBc8DWc2FIqsckjDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjEzNzAwM2ItOTEwYi0z ZGI2LWE5NjctODY2NjgxZDY4NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK8WPwQkOl3hBRl5VjpgyXKsWg5sy5jI48XmUFNDTadZ0jWbKuyY MUbtWFlS4583HQxL/u3CTUhUqbucYrU+GCYchkzXPGn9rX9SIDUf0zQeYkItqXHw /dEv4/GJGA/TyHTpVSL0v666e6aPROzft1MpLJM4CR7TyGS3L5hxIPOyN5qK2Pa0 6x9zQcw8be5oO+pRnqfkYZdNoI4KKXjXcDs+1459wZN60rd0T97SWZsPpi/QN791 4a2fn+KAt+yglx62RqKx+s1FA/Qjn/XClgKo/I3gqjneFudG6ut3JLBjLgmGL2VP Bh9+0wBEhMny2pIRHq9inQgGlKap0GTI+8Y= -----END CERTIFICATE-----Generated at Sat Oct 10 11:21:50 2026 by rpki-client