$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa File: 20864f6f-43bf-35e8-8286-a62e02cad118.roa (raw, json) Hash identifier: PgNbXkeGC7EZTOCxSjiPnSiOB6vFW5ZCk7jGnancbh8= Subject key identifier: 98:92:38:23:5C:60:42:16:23:8A:CF:CD:CE:86:C1:FD:27:D6:22:60 Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Certificate serial: 010D0C9F4328584F1CC7A86174D08834B518E780 Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 53587 IP address blocks: 2607:5d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a8:61:74:d0:88:34:b5:18:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=9c648698-44c0-4250-9515-ad562eade367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:9f:be:0d:a1:bf:5c:9e:0c:1d:ec:08:3e: d3:e3:08:7e:b2:04:c4:c8:00:77:1c:94:05:8f:fb: ec:48:88:85:1a:bb:59:cf:17:26:70:be:26:7b:42: 38:0d:87:8e:26:1e:85:34:2b:e3:d4:1e:da:c1:bc: aa:cf:a6:f3:8c:e2:2c:4e:c9:f9:75:11:40:ec:a3: d5:f6:d9:f8:0d:24:7c:f4:3c:4c:36:ec:66:7d:cf: 40:8e:da:47:6b:99:fd:79:c4:22:dc:3f:47:ef:4b: 21:04:3a:07:ed:0a:f4:c7:6e:33:26:52:f1:81:4c: 12:95:65:7f:ed:7e:01:a9:93:89:a5:33:56:f2:28: a2:1f:7a:43:ce:e0:27:0f:75:6f:21:27:17:b8:f2: ac:36:d5:69:b0:28:d3:e7:ba:59:f9:4b:e0:de:de: 45:5b:d5:5b:bb:6c:20:c4:5f:e9:a7:60:3b:57:1e: 42:1c:56:3b:62:3e:1c:98:fa:4e:ef:bf:3f:83:e8: 67:9a:c0:29:9a:24:7f:40:da:87:27:7f:e2:f1:3c: 11:4a:0a:48:42:22:53:62:74:a2:fe:e1:e4:f8:ac: 93:55:f4:af:85:9c:c2:84:ad:be:ca:ac:19:9b:6b: 06:56:a1:81:7f:94:c8:34:e8:27:6c:01:be:12:69: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:92:38:23:5C:60:42:16:23:8A:CF:CD:CE:86:C1:FD:27:D6:22:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl X509v3 Authority Key Identifier: keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer sbgp-ipAddrBlock: critical IPv6: 2607:5d00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:44:92:5f:d9:38:ce:62:80:e1:c8:5a:1a:0d:b5:ed:06:81: 4e:3d:2f:e9:1d:74:23:a0:c4:79:0b:8a:3b:c8:c1:d4:b4:bb: a8:5c:8b:f2:db:fb:e4:e5:b6:1f:73:9c:67:6d:62:1f:e7:80: aa:9c:06:2c:0c:53:ce:b1:76:d3:05:67:cd:7b:b0:47:c4:8d: c2:99:29:87:42:98:62:8f:ed:b5:2e:ec:d3:ca:8b:91:f6:b9: ef:45:fa:85:17:ae:09:19:fc:0e:21:b5:fa:9d:96:52:fa:d2: 75:a6:4f:bb:1d:62:04:4c:8c:84:7e:10:b4:98:d5:35:a3:98: db:55:84:e9:b7:f7:46:ba:4e:b3:87:31:d9:eb:99:27:bd:8d: 13:39:3e:75:8b:35:77:24:b6:9d:c8:0a:e5:79:83:48:96:6a: d4:0a:64:da:9c:ee:41:55:12:ae:c2:c7:24:f5:88:27:54:c2: bd:23:6e:01:9a:5f:63:51:cd:45:3f:90:fc:b6:3e:57:66:f6: 39:ee:82:0f:19:c2:93:a8:fa:bb:85:98:6f:4e:2a:c0:8c:df: 7c:77:38:68:69:74:b3:29:41:28:7c:27:96:32:de:22:4f:7c: 72:37:42:1c:49:e4:50:f5:1b:d2:8a:cc:6b:b3:24:f3:cf:60: 78:df:3a:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8cx6hhdNCINLUY54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj ZmM4MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk OWM2NDg2OTgtNDRjMC00MjUwLTk1MTUtYWQ1NjJlYWRlMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib2fvg2hv1yeDB3sCD7T4wh+sgTEyAB3HJQF j/vsSIiFGrtZzxcmcL4me0I4DYeOJh6FNCvj1B7awbyqz6bzjOIsTsn5dRFA7KPV 9tn4DSR89DxMNuxmfc9AjtpHa5n9ecQi3D9H70shBDoH7Qr0x24zJlLxgUwSlWV/ 7X4BqZOJpTNW8iiiH3pDzuAnD3VvIScXuPKsNtVpsCjT57pZ+Uvg3t5FW9Vbu2wg xF/pp2A7Vx5CHFY7Yj4cmPpO778/g+hnmsApmiR/QNqHJ3/i8TwRSgpIQiJTYnSi /uHk+KyTVfSvhZzChK2+yqwZm2sGVqGBf5TINOgnbAG+EmnHrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJiSOCNcYEIWI4rPzc6Gwf0n1iJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1 MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvMjA4NjRmNmYtNDNiZi0z NWU4LTgyODYtYTYyZTAyY2FkMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2 MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk ZmJlZGNmYzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgddADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfRJJf2TjOYoDhyFoaDbXtBoFOPS/pHXQjoMR5C4o7yMHUtLuoXIvy 2/vk5bYfc5xnbWIf54CqnAYsDFPOsXbTBWfNe7BHxI3CmSmHQphij+21LuzTyouR 9rnvRfqFF64JGfwOIbX6nZZS+tJ1pk+7HWIETIyEfhC0mNU1o5jbVYTpt/dGuk6z hzHZ65knvY0TOT51izV3JLadyArleYNIlmrUCmTanO5BVRKuwsck9YgnVMK9I24B ml9jUc1FP5D8tj5XZvY57oIPGcKTqPq7hZhvTirAjN98dzhoaXSzKUEofCeWMt4i T3xyN0IcSeRQ9RvSisxrsyTzz2B43zog -----END CERTIFICATE-----Generated at Fri Sep 25 20:45:34 2026 by rpki-client