$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa File: 1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa (raw, json) Hash identifier: S0viVOcPa5GV9DRaJegaHdn+TiJtJwSogdG1ayEJ+Uc= Subject key identifier: 5B:F6:4D:75:47:26:B3:17:BD:38:B2:D7:6B:4F:88:76:5F:C9:2C:7C Certificate issuer: /CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Certificate serial: 010D0C9F4328584F498B67CD5FB9332CBCD0B740 Authority key identifier: BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401908 IP address blocks: 2620:da:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:67:cd:5f:b9:33:2c:bc:d0:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9a65e21a-dbae-456b-8273-d5f3a3dfdc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:9a:d7:87:57:5b:c3:ec:75:91:38:15:02: f6:cf:6a:2e:62:7a:39:6f:c6:5b:90:52:3e:02:af: 8d:b2:69:4b:e6:a4:14:38:5d:2e:b1:1f:bd:70:fb: 44:fb:0b:d2:82:e6:5c:f3:a9:1e:f6:a5:ed:30:f0: 51:cc:63:48:ab:f6:c8:fa:f8:36:8c:ed:b6:94:a9: 8f:ac:32:b1:48:eb:8a:04:3a:05:83:b9:33:0f:34: d6:b0:d9:e6:b0:70:0a:b7:63:80:a8:bb:b2:85:c5: 3b:6e:b4:ca:e4:ed:c2:0d:5c:fe:fa:60:ce:ce:e8: a4:dc:f0:f0:0c:bf:82:b2:67:73:e5:59:f9:c4:aa: 8e:6b:79:e4:f0:a8:45:71:4d:d3:9d:17:b6:0f:42: 31:ae:dd:94:9a:6d:1c:b5:b0:a7:01:54:fd:bb:18: 52:6b:f4:9d:ff:ec:41:ed:48:28:86:a2:db:bd:4c: 25:85:a2:16:1b:8e:51:97:f6:57:92:57:f6:4e:a2: 2a:37:b6:0d:27:58:4b:31:5d:50:f7:40:e8:b1:8f: 2f:3d:1d:51:90:28:25:f8:05:1f:c2:f4:ab:57:78: 3a:57:89:e9:db:5f:18:a8:a0:9c:26:c8:dc:c5:fe: bb:92:f9:37:8d:03:0d:13:b5:10:9b:42:66:50:5a: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:4D:75:47:26:B3:17:BD:38:B2:D7:6B:4F:88:76:5F:C9:2C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl X509v3 Authority Key Identifier: keyid:BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer sbgp-ipAddrBlock: critical IPv6: 2620:da:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:97:1b:20:c2:61:0d:3e:8c:6a:16:de:11:71:24:04:35:5c: 54:ea:87:e2:5f:f3:2b:e8:89:42:9b:01:88:ea:c2:0f:99:bb: 1e:31:9c:a5:13:e2:e8:04:62:03:0b:5d:d2:32:31:95:39:9f: e4:f0:52:b2:d1:c3:92:e9:c4:aa:50:22:1e:d2:95:7e:a4:20: 80:d3:a3:45:20:0e:81:d7:19:e0:f3:bb:c8:58:98:19:43:b3: 1d:68:8d:3c:08:67:e7:77:5a:7d:d0:ec:66:e7:74:6e:8e:a7: 46:a7:b7:85:fb:9c:3f:4c:d5:53:8b:a1:d5:48:d7:68:32:43: bd:91:59:5b:d3:f4:6a:05:dc:b3:42:cd:cd:32:68:6e:85:21: 9c:2d:6f:81:d8:28:f2:7f:de:f7:cd:8d:54:68:61:aa:a0:30: 76:95:bf:9e:5f:25:55:f5:ea:a8:3f:00:f5:d8:75:b7:0f:51: 7d:9b:4b:b8:77:58:fa:ba:33:98:41:75:25:21:78:3e:74:df: 44:bc:3c:77:ff:13:90:ef:61:32:b3:7a:e7:64:28:8b:de:0e: bc:af:3f:25:99:78:79:02:76:02:3e:aa:22:63:13:90:12:5f: 55:fd:ad:6e:9e:fa:b4:01:99:a1:90:97:e7:19:4f:3f:af:bc: 25:a3:cd:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji2fNX7kzLLzQt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRjZmIyNDQtMzRmMS00Yzc0LTkxOWItNDc4NGYwMzQ4 ZGQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE2NWUyMWEtZGJhZS00NTZiLTgyNzMtZDVmM2EzZGZkYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrKa14dXW8PsdZE4FQL2z2ouYno5b8ZbkFI+ Aq+NsmlL5qQUOF0usR+9cPtE+wvSguZc86ke9qXtMPBRzGNIq/bI+vg2jO22lKmP rDKxSOuKBDoFg7kzDzTWsNnmsHAKt2OAqLuyhcU7brTK5O3CDVz++mDOzuik3PDw DL+Csmdz5Vn5xKqOa3nk8KhFcU3TnRe2D0Ixrt2Umm0ctbCnAVT9uxhSa/Sd/+xB 7UgohqLbvUwlhaIWG45Rl/ZXklf2TqIqN7YNJ1hLMV1Q90DosY8vPR1RkCgl+AUf wvSrV3g6V4np218YqKCcJsjcxf67kvk3jQMNE7UQm0JmUFpBdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFv2TXVHJrMXvTiy12tPiHZfySx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNm YjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0ZjAzNDhkZDEvMWRmMWMzMmQtM2Q3OC0z ZjNhLTg5MTEtM2MwYWUzMGRlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTRjZmIyNDQtMzRmMS00Yzc0LTkx OWItNDc4NGYwMzQ4ZGQxLzk0Y2ZiMjQ0LTM0ZjEtNGM3NC05MTliLTQ3ODRmMDM0 OGRkMS5jcmwwHwYDVR0jBBgwFoAUuoEqqMrhoE89gBon88sFak8jStAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNmYjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0 ZjAzNDhkZDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2qAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEeXGyDCYQ0+jGoW3hFxJAQ1XFTqh+Jf8yvoiUKbAYjqwg+Zux4x nKUT4ugEYgMLXdIyMZU5n+TwUrLRw5LpxKpQIh7SlX6kIIDTo0UgDoHXGeDzu8hY mBlDsx1ojTwIZ+d3Wn3Q7GbndG6Op0ant4X7nD9M1VOLodVI12gyQ72RWVvT9GoF 3LNCzc0yaG6FIZwtb4HYKPJ/3vfNjVRoYaqgMHaVv55fJVX16qg/APXYdbcPUX2b S7h3WPq6M5hBdSUheD5030S8PHf/E5DvYTKzeudkKIveDryvPyWZeHkCdgI+qiJj E5ASX1X9rW6e+rQBmaGQl+cZTz+vvCWjzQo= -----END CERTIFICATE-----Generated at Fri Sep 25 12:49:48 2026 by rpki-client