$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: LY+7ZxDRm6/bpBqadTG6/PaigIwV5N5jjO7BYjWmQrc= Subject key identifier: 0E:37:3F:A9:B5:34:F8:04:A0:5D:D5:45:88:33:33:96:DC:28:B6:4B Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584F49767E8CC5F7AB39CB618680 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7e:8c:c5:f7:ab:39:cb:61:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66dd5d8c-00d8-43ce-84fb-7e321bca7b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:e6:79:ba:01:77:d8:13:e9:88:bb:cb:6d: 1c:a0:b1:e2:25:ef:ef:1a:e3:09:41:9e:c0:fd:96: 8c:1b:cc:0e:6d:4e:ba:fb:2f:09:d8:1b:57:1f:48: 31:81:48:3c:1f:bc:74:5a:c2:6e:f9:52:10:f2:fd: 56:94:a6:4b:dd:1e:10:8b:9c:bd:61:d8:65:2b:1b: ec:70:c1:bb:44:13:df:4b:56:7b:90:3c:ff:7a:ea: c4:7a:08:ce:c9:57:20:e5:4d:40:34:b1:6b:90:72: fa:66:b2:10:aa:f0:3b:62:f1:c1:65:59:5f:29:ad: 3d:ea:d2:e6:1e:aa:00:3f:b3:d3:48:79:a1:9a:8d: ba:47:b4:14:a6:8e:2d:4d:b8:75:a0:f5:8b:6f:51: ea:cc:e7:d3:ee:2c:86:a4:db:77:2a:5a:5f:11:a5: cd:77:79:10:29:07:0d:62:1d:6f:76:4b:ba:c8:90: fc:86:6f:d1:3e:a0:49:79:0f:bc:0b:79:2e:ff:d1: 4f:ae:b3:ef:74:60:5c:54:7c:72:7d:40:41:5b:6e: 80:ca:fe:b9:3e:58:c1:b0:ff:21:e6:a8:53:70:88: 30:ef:49:fd:44:78:60:c3:ef:46:02:33:98:be:07: 22:37:5a:d2:9c:12:cf:33:8f:ab:cb:35:65:08:b2: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:3F:A9:B5:34:F8:04:A0:5D:D5:45:88:33:33:96:DC:28:B6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:36:e8:80:92:5d:c1:72:ed:c3:a5:9e:03:47:2e:ae:70:51: d1:21:91:ab:90:28:d4:0c:f9:5d:5a:64:b5:ac:0a:60:2a:c6: e8:b1:50:4c:12:d2:1b:90:d1:04:65:ab:e7:fd:f3:cc:58:20: c5:35:b6:9d:61:04:2f:a4:69:3f:da:2e:06:a7:90:31:16:34: 24:ec:a1:9e:e5:a5:9f:e9:00:d5:4b:ea:3e:d0:07:3d:97:09: f5:fc:8b:a6:ac:f2:16:bb:ff:0f:b9:c9:3b:ba:ec:03:96:80: 35:e9:24:21:59:47:b9:b1:9f:83:14:0d:98:2f:6e:49:2b:4b: c5:19:ea:c9:db:ea:78:d3:63:3a:96:4f:dc:0a:61:b5:9d:d1: 80:88:0b:48:ef:e4:c3:76:7d:29:b5:c7:e9:32:e4:24:ca:49: 00:6a:1c:38:ff:16:16:5a:9f:39:a8:83:ca:af:6a:f3:ea:87: 3b:1c:3e:e0:01:fa:05:cc:3d:d3:b7:6a:76:0b:8a:60:62:7a: 51:af:a9:7e:9a:1e:11:83:44:04:d3:b4:9b:25:19:78:30:60: 57:56:20:ff:16:43:ec:ab:00:e6:b1:1e:06:09:11:f3:4a:4c: 37:6d:67:da:e5:3c:37:c6:4c:71:31:f4:0c:79:c8:c8:a3:e9: ed:4f:2e:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jdn6MxferOcthhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjZkZDVkOGMtMDBkOC00M2NlLTg0ZmItN2UzMjFiY2E3YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN/meboBd9gT6Yi7y20coLHiJe/vGuMJQZ7A /ZaMG8wObU66+y8J2BtXH0gxgUg8H7x0WsJu+VIQ8v1WlKZL3R4Qi5y9YdhlKxvs cMG7RBPfS1Z7kDz/eurEegjOyVcg5U1ANLFrkHL6ZrIQqvA7YvHBZVlfKa096tLm HqoAP7PTSHmhmo26R7QUpo4tTbh1oPWLb1HqzOfT7iyGpNt3KlpfEaXNd3kQKQcN Yh1vdku6yJD8hm/RPqBJeQ+8C3ku/9FPrrPvdGBcVHxyfUBBW26Ayv65PljBsP8h 5qhTcIgw70n9RHhgw+9GAjOYvgciN1rSnBLPM4+ryzVlCLLsywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA43P6m1NPgEoF3VRYgzM5bcKLZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM826ICSXcFy7cOlngNHLq5wUdEhkauQKNQM+V1aZLWsCmAqxuix UEwS0huQ0QRlq+f988xYIMU1tp1hBC+kaT/aLgankDEWNCTsoZ7lpZ/pANVL6j7Q Bz2XCfX8i6as8ha7/w+5yTu67AOWgDXpJCFZR7mxn4MUDZgvbkkrS8UZ6snb6njT YzqWT9wKYbWd0YCIC0jv5MN2fSm1x+ky5CTKSQBqHDj/FhZanzmog8qvavPqhzsc PuAB+gXMPdO3anYLimBielGvqX6aHhGDRATTtJslGXgwYFdWIP8WQ+yrAOaxHgYJ EfNKTDdtZ9rlPDfGTHEx9Ax5yMij6e1PLro= -----END CERTIFICATE-----Generated at Fri Oct 9 21:11:58 2026 by rpki-client