$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa File: d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa (raw, json) Hash identifier: c7/9UVAK4dM2rwb6gdBN4urxkXxmFdIMYEZKW8jjRjk= Subject key identifier: 39:FC:AA:BA:B4:0A:44:A3:74:0B:C9:75:47:CE:B5:FE:E9:B2:79:76 Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9 Certificate serial: 010D0C9F4328584F497354261A0D6072F2EBA7E0 Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401671 IP address blocks: 2604:c20:8030::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:54:26:1a:0d:60:72:f2:eb:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6c713f92-a561-421d-b50d-660739eae97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:24:de:7c:39:5d:3c:04:54:f3:7d:29:81: a7:4b:02:d7:3d:31:16:50:c5:9d:c2:a0:25:81:79: 2e:ef:28:2f:e1:96:c8:65:9b:4f:9f:f6:7b:ad:48: fb:78:bd:6f:20:41:e7:06:52:de:37:76:1a:c6:87: df:71:bf:10:53:0a:44:94:e2:03:75:f1:c3:09:2e: 7f:ef:24:a2:1b:8e:e2:12:91:71:24:0d:ed:7b:6a: fa:32:c1:04:54:fe:dc:37:3f:9f:69:46:a1:77:8a: e8:b6:60:cc:87:84:1f:1e:57:0a:97:62:48:82:21: e4:48:eb:91:29:11:55:7e:c5:95:ad:0a:8b:90:32: d0:12:c7:69:42:2d:b6:d4:b5:8e:42:68:88:28:a3: a0:c0:0b:f2:97:4e:42:c3:66:25:98:56:3e:db:cb: ed:b6:f5:6d:43:b2:58:c2:ec:d2:c9:75:bd:1a:e4: 31:dd:52:a1:c4:36:a7:bd:44:82:b3:ba:19:6c:58: e0:0a:87:a8:69:86:1f:ad:70:d3:6d:99:71:17:16: 33:33:9a:7b:ee:94:03:71:ed:51:e0:47:49:20:b1: be:3b:44:c3:62:77:18:71:a4:b5:90:17:d7:41:b1: d8:86:d0:d2:14:7f:e6:c6:8c:04:bf:6a:c0:31:7c: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FC:AA:BA:B4:0A:44:A3:74:0B:C9:75:47:CE:B5:FE:E9:B2:79:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/d6ba9e07-b145-30de-a0ce-a0d6282edc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl X509v3 Authority Key Identifier: keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer sbgp-ipAddrBlock: critical IPv6: 2604:c20:8030::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:23:45:d5:62:3d:7f:f0:de:65:cf:43:35:83:d9:5d:db:9e: 50:11:5e:c8:7e:63:4f:91:45:fe:ce:2d:a1:30:21:8e:bd:7c: 35:ac:19:bd:7d:55:ff:35:bd:56:1d:7f:23:58:71:f0:12:93: 80:3a:35:45:1d:b2:cc:0e:b9:83:9b:bf:77:73:ce:f8:de:7d: cc:68:43:01:1d:fb:ad:8e:57:c1:78:57:04:9a:87:89:14:95: 44:9c:2d:2c:7e:70:45:4c:9a:f0:d8:0e:61:7d:31:c0:ce:34: ab:69:81:53:dd:0f:11:8e:b2:da:b4:50:65:df:e2:77:9c:5d: a2:00:cf:58:96:2e:6f:dd:c3:33:f0:02:7b:f6:d6:52:a9:db: 53:7b:66:d4:e6:5d:b5:32:d5:47:0b:be:9a:d2:0c:28:cb:be: a5:4e:6d:f8:b3:69:22:01:0a:4b:6c:59:e8:0b:6a:5f:fd:ee: 90:04:9e:96:0c:30:66:53:fa:98:e8:d3:fe:31:26:9e:12:a2: ac:86:39:70:75:24:97:8b:9c:dc:1f:bb:3f:8d:95:8e:87:bc: 60:88:47:4b:62:47:66:bb:6a:e4:1d:eb:5d:ca:24:0a:ad:75: e6:f6:73:14:c0:20:f1:7e:59:a1:79:d5:86:a1:b6:18:44:fb: 2e:f3:5e:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc1QmGg1gcvLrp+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2 YmQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmM3MTNmOTItYTU2MS00MjFkLWI1MGQtNjYwNzM5ZWFlOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Uk3nw5XTwEVPN9KYGnSwLXPTEWUMWdwqAl gXku7ygv4ZbIZZtPn/Z7rUj7eL1vIEHnBlLeN3Yaxoffcb8QUwpElOIDdfHDCS5/ 7ySiG47iEpFxJA3te2r6MsEEVP7cNz+faUahd4rotmDMh4QfHlcKl2JIgiHkSOuR KRFVfsWVrQqLkDLQEsdpQi221LWOQmiIKKOgwAvyl05Cw2YlmFY+28vttvVtQ7JY wuzSyXW9GuQx3VKhxDanvUSCs7oZbFjgCoeoaYYfrXDTbZlxFxYzM5p77pQDce1R 4EdJILG+O0TDYncYcaS1kBfXQbHYhtDSFH/mxowEv2rAMXzZ9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDn8qrq0CkSjdAvJdUfOtf7psnl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvZDZiYTllMDctYjE0NS0z MGRlLWEwY2UtYTBkNjI4MmVkYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1 NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIIAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwjRdViPX/w3mXPQzWD2V3bnlARXsh+Y0+RRf7OLaEwIY69fDWs Gb19Vf81vVYdfyNYcfASk4A6NUUdsswOuYObv3dzzvjefcxoQwEd+62OV8F4VwSa h4kUlUScLSx+cEVMmvDYDmF9McDONKtpgVPdDxGOstq0UGXf4necXaIAz1iWLm/d wzPwAnv21lKp21N7ZtTmXbUy1UcLvprSDCjLvqVObfizaSIBCktsWegLal/97pAE npYMMGZT+pjo0/4xJp4SoqyGOXB1JJeLnNwfuz+NlY6HvGCIR0tiR2a7auQd613K JAqtdeb2cxTAIPF+WaF51YahthhE+y7zXlY= -----END CERTIFICATE-----Generated at Sat Sep 26 05:43:22 2026 by rpki-client