$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/216db411-cff3-31f5-a747-3e9610844151.roa File: 216db411-cff3-31f5-a747-3e9610844151.roa (raw, json) Hash identifier: DjpFaEQkrFwg9mJa671PfHCjdXFYrC7VAzPUvteMoa4= Subject key identifier: D6:D7:DB:04:13:C3:D6:D4:BD:72:74:93:D4:D0:1D:2A:8B:6D:A2:03 Certificate issuer: /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Certificate serial: 010D0C9F4328584F4972D2EACC528CC4DE0E4F00 Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/216db411-cff3-31f5-a747-3e9610844151.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20012 IP address blocks: 2605:4b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d2:ea:cc:52:8c:c4:de:0e:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3fac0032-fc12-47e3-8d35-c32297798a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:98:0d:ab:40:c4:11:bb:e8:94:97:b3:9e: 2a:7c:c3:0b:17:e0:1e:b8:c3:2a:77:c9:f6:a5:2c: 2a:b5:74:82:f6:4c:2f:49:30:86:a2:87:29:46:41: f2:89:10:ca:6f:c7:90:73:79:5e:98:73:22:96:37: ec:14:fd:6e:6c:79:cd:ae:9e:8e:49:92:d7:78:80: 08:51:d4:0d:49:47:e9:05:39:2c:ea:4d:cb:55:86: 94:15:cc:4a:bf:19:b8:fa:9e:a1:5b:a5:0e:1d:c0: cc:3f:96:ae:dc:16:f5:6f:22:8f:64:58:65:06:3a: 22:89:75:c5:27:7c:1e:39:0f:17:ef:98:0a:90:32: b1:8a:19:28:22:15:65:63:54:42:23:07:84:54:6b: fc:73:7f:f0:ab:94:4a:12:ad:79:d6:07:e9:6c:12: 59:4e:d1:c0:db:bd:f7:55:58:b0:98:3f:1b:3e:89: ac:26:3f:55:46:cc:ec:c6:76:ff:9b:e7:77:7a:1e: 39:27:24:de:8f:58:1a:99:02:60:a7:01:b9:7b:f1: b5:9d:c7:e3:c0:3a:5f:b4:94:54:16:09:96:42:81: ff:6d:fa:3f:bc:3b:fd:f3:b8:80:c7:fc:7e:58:93: 44:1a:cd:b2:09:f9:16:24:64:10:f7:fc:ec:49:b7: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D7:DB:04:13:C3:D6:D4:BD:72:74:93:D4:D0:1D:2A:8B:6D:A2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/216db411-cff3-31f5-a747-3e9610844151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl X509v3 Authority Key Identifier: keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer sbgp-ipAddrBlock: critical IPv6: 2605:4b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0c:51:e1:f3:d9:86:68:28:2b:e4:a3:25:ed:a6:c2:79:87: 38:2d:f9:0c:4b:9e:78:44:27:ea:20:e1:9d:e1:c5:9b:70:c9: 70:15:79:f6:12:a6:de:8f:7e:1d:de:9f:91:b4:53:82:6d:1a: b5:e1:7d:20:56:57:c9:b8:9e:de:f6:50:6f:83:2c:20:ca:a7: 51:fe:c1:d2:39:dc:ba:d3:c7:5b:e9:7d:d0:f7:e2:41:4b:0f: 79:7e:69:33:5d:fe:30:de:2e:1a:40:79:a9:a8:54:33:2f:ce: d3:1b:f4:27:2e:50:0e:64:b1:10:21:0d:22:7e:f1:e5:ec:18: f1:56:85:e6:c8:29:b3:f7:f8:9c:8c:18:91:bf:05:11:7c:d2: 90:63:ad:1e:d9:7b:2f:cb:48:2e:b0:f0:f6:94:cf:fe:e3:0c: 6f:c2:81:06:3c:10:06:28:45:b8:bb:2b:6a:0c:a3:66:7c:63: bf:36:2b:2a:5d:e4:73:22:77:1b:12:3d:3d:b2:8f:30:91:fe: 5d:00:40:65:cc:fc:fc:27:75:bf:7f:6b:b0:da:7e:e1:a6:53: 6c:85:5a:ae:ac:7a:e0:8d:03:b8:66:85:5f:29:90:97:42:df: 23:0e:0e:fa:6a:22:6f:fa:8d:51:89:73:5f:30:b8:3d:29:bc: 56:e1:76:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JctLqzFKMxN4OTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3YjZlMTgtMDBkYS00ZGExLTlmMmMtMTk0MjFmYTZh NTc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZhYzAwMzItZmMxMi00N2UzLThkMzUtYzMyMjk3Nzk4YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVaYDatAxBG76JSXs54qfMMLF+AeuMMqd8n2 pSwqtXSC9kwvSTCGoocpRkHyiRDKb8eQc3lemHMiljfsFP1ubHnNrp6OSZLXeIAI UdQNSUfpBTks6k3LVYaUFcxKvxm4+p6hW6UOHcDMP5au3Bb1byKPZFhlBjoiiXXF J3weOQ8X75gKkDKxihkoIhVlY1RCIweEVGv8c3/wq5RKEq151gfpbBJZTtHA2733 VViwmD8bPomsJj9VRszsxnb/m+d3eh45JyTej1gamQJgpwG5e/G1ncfjwDpftJRU FgmWQoH/bfo/vDv987iAx/x+WJNEGs2yCfkWJGQQ9/zsSbfzJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNbX2wQTw9bUvXJ0k9TQHSqLbaIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdi NmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQyMWZhNmE1NzUvMjE2ZGI0MTEtY2ZmMy0z MWY1LWE3NDctM2U5NjEwODQ0MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2M3YjZlMTgtMDBkYS00ZGExLTlm MmMtMTk0MjFmYTZhNTc1LzNjN2I2ZTE4LTAwZGEtNGRhMS05ZjJjLTE5NDIxZmE2 YTU3NS5jcmwwHwYDVR0jBBgwFoAU33tUYE204MqoRsJS1Ku1IiuPKeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zYzdiNmUxOC0wMGRhLTRkYTEtOWYyYy0xOTQy MWZhNmE1NzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVDFHh89mGaCgr5KMl7abCeYc4LfkMS554RCfqIOGd4cWbcMlwFXn2 Eqbej34d3p+RtFOCbRq14X0gVlfJuJ7e9lBvgywgyqdR/sHSOdy608db6X3Q9+JB Sw95fmkzXf4w3i4aQHmpqFQzL87TG/QnLlAOZLEQIQ0ifvHl7BjxVoXmyCmz9/ic jBiRvwURfNKQY60e2Xsvy0gusPD2lM/+4wxvwoEGPBAGKEW4uytqDKNmfGO/Nisq XeRzIncbEj09so8wkf5dAEBlzPz8J3W/f2uw2n7hplNshVqurHrgjQO4ZoVfKZCX Qt8jDg76aiJv+o1RiXNfMLg9KbxW4XYg -----END CERTIFICATE-----Generated at Sat Sep 26 03:48:16 2026 by rpki-client