$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa File: 4ccfab0d-d202-306d-b39e-190330fdd285.roa (raw, json) Hash identifier: IevavKW5WAmssvIDepj85EN00wvqle4rxkiiv5k15kw= Subject key identifier: 51:D4:2F:B8:76:A7:61:61:6F:EE:40:E8:AA:B5:51:86:64:17:C1:5B Certificate issuer: /CN=3752157d-7469-4299-be2c-f236b195fc08 Certificate serial: 010D0C9F4328584F46A7D8E52B3C07350F7CE380 Authority key identifier: 60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 40592 IP address blocks: 2001:505:148::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:d8:e5:2b:3c:07:35:0f:7c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3752157d-7469-4299-be2c-f236b195fc08 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=31f642f6-7414-43cd-9b70-5600f442b6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:b6:fc:f4:02:06:b0:53:bb:dd:f7:5b:59: c0:bf:0c:4e:da:50:30:74:bc:00:38:d8:e2:66:84: 8b:f9:f6:76:12:ef:a6:30:e6:28:db:94:6d:9c:0b: 51:e9:45:1a:64:41:71:76:a0:5d:d8:e9:bd:00:c0: 47:fd:33:c1:2a:68:42:44:3b:81:96:cf:90:18:54: 13:d4:3a:f3:62:8f:f1:f2:c6:66:71:85:e8:16:28: e5:10:15:5e:33:db:ed:05:78:93:ff:8b:40:07:de: 92:4f:94:df:78:09:ae:77:1c:45:20:66:2e:dc:36: 53:39:61:00:d2:39:9c:fb:83:fe:4b:26:c1:bf:5d: cd:ca:e5:f1:22:7e:58:f3:5b:12:4e:fe:94:88:4f: d4:74:f9:49:7b:11:b6:4e:09:f2:d5:36:07:2a:0f: bb:9e:2c:aa:79:6f:05:3b:bd:fb:68:af:07:c9:7c: 7e:db:ef:d7:a0:38:63:77:b1:1e:ca:ff:ba:92:c7: e9:95:e6:31:b2:1f:1b:80:b1:54:cb:07:29:c8:43: 6a:a3:7a:6d:65:62:ad:46:e5:e8:e9:c5:89:93:ad: 31:5d:e8:60:c6:1a:3e:da:2b:bd:24:10:d3:19:fe: b7:b4:cc:2c:45:05:ed:d5:84:02:50:e3:66:a5:9b: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D4:2F:B8:76:A7:61:61:6F:EE:40:E8:AA:B5:51:86:64:17:C1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl X509v3 Authority Key Identifier: keyid:60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer sbgp-ipAddrBlock: critical IPv6: 2001:505:148::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:86:28:91:e1:1a:bd:df:b8:02:96:f1:8d:45:5f:7f:96:67: 54:49:1e:93:35:61:0f:42:2f:75:0e:3d:2f:a4:58:0a:09:0d: 3e:65:27:0c:86:9c:46:46:24:49:a5:ab:dc:37:20:ce:41:ad: 5b:1c:f5:50:53:c6:58:8d:2f:0f:12:7e:eb:8a:da:ef:7b:76: f6:54:b2:e9:dd:70:9a:bc:d3:44:a5:84:58:82:80:79:88:64: 84:ff:5f:da:d3:a3:71:54:10:28:86:5f:03:dc:3e:42:09:ac: 4b:65:35:2d:d6:9c:99:84:a1:f2:cd:88:67:e2:01:e1:c2:84: 0d:c7:26:de:52:4c:29:86:63:da:7e:c1:cf:03:c7:1d:ca:f1: 2e:ec:98:50:6c:e1:f3:6d:2d:48:9c:1b:49:cd:e1:f2:64:1c: 62:8d:53:58:5d:c9:96:b9:08:45:bf:8c:72:6e:14:a4:6a:1c: 0d:51:2d:09:8e:78:4a:da:e9:b3:64:52:13:cd:73:e5:39:eb: 13:bd:c5:ba:3d:25:fa:ea:37:22:bd:e6:c5:72:ca:b5:77:fe: 00:87:27:2a:43:c9:dd:e7:97:ce:a1:8d:2d:6e:b8:49:af:61: 77:da:b9:3d:ca:34:c0:49:c3:6b:2a:d1:b0:cc:f0:36:18:35: ff:ea:09:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Gp9jlKzwHNQ9844AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc1MjE1N2QtNzQ2OS00Mjk5LWJlMmMtZjIzNmIxOTVm YzA4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzFmNjQyZjYtNzQxNC00M2NkLTliNzAtNTYwMGY0NDJiNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPG2/PQCBrBTu933W1nAvwxO2lAwdLwAONji ZoSL+fZ2Eu+mMOYo25RtnAtR6UUaZEFxdqBd2Om9AMBH/TPBKmhCRDuBls+QGFQT 1DrzYo/x8sZmcYXoFijlEBVeM9vtBXiT/4tAB96ST5TfeAmudxxFIGYu3DZTOWEA 0jmc+4P+SybBv13NyuXxIn5Y81sSTv6UiE/UdPlJexG2Tgny1TYHKg+7niyqeW8F O737aK8HyXx+2+/XoDhjd7Eeyv+6ksfpleYxsh8bgLFUywcpyENqo3ptZWKtRuXo 6cWJk60xXehgxho+2iu9JBDTGf63tMwsRQXt1YQCUONmpZsRFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFHUL7h2p2Fhb+5A6Kq1UYZkF8FbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNzUy MTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2YjE5NWZjMDgvNGNjZmFiMGQtZDIwMi0z MDZkLWIzOWUtMTkwMzMwZmRkMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzc1MjE1N2QtNzQ2OS00Mjk5LWJl MmMtZjIzNmIxOTVmYzA4LzM3NTIxNTdkLTc0NjktNDI5OS1iZTJjLWYyMzZiMTk1 ZmMwOC5jcmwwHwYDVR0jBBgwFoAUYNHunP8yrpjkFzlO8NkSD3CeRp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNzUyMTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2 YjE5NWZjMDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBQFI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyGKJHhGr3fuAKW8Y1FX3+WZ1RJHpM1YQ9CL3UOPS+kWAoJDT5l JwyGnEZGJEmlq9w3IM5BrVsc9VBTxliNLw8SfuuK2u97dvZUsundcJq800SlhFiC gHmIZIT/X9rTo3FUECiGXwPcPkIJrEtlNS3WnJmEofLNiGfiAeHChA3HJt5STCmG Y9p+wc8Dxx3K8S7smFBs4fNtLUicG0nN4fJkHGKNU1hdyZa5CEW/jHJuFKRqHA1R LQmOeEra6bNkUhPNc+U56xO9xbo9JfrqNyK95sVyyrV3/gCHJypDyd3nl86hjS1u uEmvYXfauT3KNMBJw2sq0bDM8DYYNf/qCd0= -----END CERTIFICATE-----Generated at Sun Sep 27 05:10:00 2026 by rpki-client