$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa File: d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa (raw, json) Hash identifier: xEMH+F2uNgeygFTiGoSS/PsvAf/xrC7FMcWDefi7Wx4= Subject key identifier: 3B:96:5B:32:41:16:07:2C:BA:07:AC:AA:45:95:53:CE:EE:B4:22:59 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584F3CE285BF531465B4D9112380 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 397085 IP address blocks: 2620:13c:1000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:85:bf:53:14:65:b4:d9:11:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=5e2a3869-12c1-480b-8dd5-8e7229a0bb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:09:67:6a:e0:49:6b:44:34:45:cb:eb:10: 67:03:45:44:32:d9:df:dd:34:02:52:5e:bd:a5:a1: 6e:38:b4:5f:ba:80:fa:3d:67:15:f1:87:80:33:9a: af:d7:2b:35:68:a5:9c:74:5b:f5:52:2b:75:76:0e: 6f:35:e1:ca:a2:51:e1:ea:b7:08:7a:5d:e5:be:4a: 52:38:c6:7d:eb:33:c1:94:0e:74:58:20:d9:3b:35: a8:4d:a8:23:54:44:d0:75:8e:c1:67:90:ce:a7:9d: 9b:da:8f:27:4f:38:42:c9:2a:04:14:1f:01:f9:8b: 38:77:dd:49:c2:e1:2d:29:00:e2:b6:d8:82:71:bc: bb:b3:53:3d:ff:1f:d7:77:34:90:2f:63:ab:e8:b4: c7:db:e6:e6:1c:ee:f3:75:86:d6:a8:5c:98:c8:7b: 3b:52:38:ad:50:ad:43:7a:78:cd:02:71:6b:31:91: a8:f5:a2:b2:59:92:f1:bc:1d:9d:e1:5c:04:2f:59: b0:07:c4:5e:15:4b:81:1e:cd:df:d0:79:f5:37:f0: 51:9f:f7:61:e3:03:d7:26:8f:50:cf:a0:3a:5a:ef: 0f:05:62:bd:69:a4:e0:ad:dd:c5:39:f4:b1:82:34: f6:dd:ce:6c:bf:0b:21:bc:f2:47:31:23:a6:5a:22: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:5B:32:41:16:07:2C:BA:07:AC:AA:45:95:53:CE:EE:B4:22:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:de:3b:67:07:e4:86:f8:f1:4f:a8:c7:a9:ef:45:81:42:03: 53:e4:dd:ef:4b:e6:ec:e1:26:6a:7e:4c:f2:41:66:e8:2a:ef: 1d:2f:da:6d:3e:49:35:28:73:06:3e:1d:2d:e7:3f:d5:0a:89: 5c:22:a5:db:4f:71:c2:f5:3e:e1:28:d0:63:f3:77:b1:5c:33: 02:30:1a:ba:70:3a:10:9c:b6:15:30:ef:20:45:b2:dc:a6:1f: af:a9:48:18:1b:13:f2:32:7e:2a:67:e1:96:81:76:1f:43:69: 54:b6:33:0e:ca:e3:1a:8f:85:21:76:ed:76:99:fb:63:a7:e9: 36:62:6f:01:68:c9:2a:11:46:d8:f3:83:02:37:ca:1b:a1:24: 38:40:b5:0d:29:84:6c:7d:cc:5c:d6:7f:16:bf:24:84:c7:9b: 52:53:e5:7f:4b:5e:2a:ca:ae:72:db:9b:da:82:fc:38:28:ef: 6f:d3:5b:ac:e9:ed:c8:76:76:16:88:60:f8:94:54:ed:bb:fa: aa:df:96:87:bc:68:eb:1c:5a:40:b2:3a:10:49:9b:08:55:45: 91:c5:c9:b0:07:47:79:ea:c9:4e:17:31:c3:50:18:ec:74:7a: 20:5c:44:ee:cc:a2:9b:75:c7:f3:af:72:45:0d:ba:f8:dd:42: 8c:57:5c:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE884oW/UxRltNkRI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NWUyYTM4NjktMTJjMS00ODBiLThkZDUtOGU3MjI5YTBiYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQJZ2rgSWtENEXL6xBnA0VEMtnf3TQCUl69 paFuOLRfuoD6PWcV8YeAM5qv1ys1aKWcdFv1Uit1dg5vNeHKolHh6rcIel3lvkpS OMZ96zPBlA50WCDZOzWoTagjVETQdY7BZ5DOp52b2o8nTzhCySoEFB8B+Ys4d91J wuEtKQDittiCcby7s1M9/x/XdzSQL2Or6LTH2+bmHO7zdYbWqFyYyHs7UjitUK1D enjNAnFrMZGo9aKyWZLxvB2d4VwEL1mwB8ReFUuBHs3f0Hn1N/BRn/dh4wPXJo9Q z6A6Wu8PBWK9aaTgrd3FOfSxgjT23c5svwshvPJHMSOmWiKeHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDuWWzJBFgcsugesqkWVU87utCJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDA5NDM1YzktYzY2ZS0z YTY5LWEyY2MtNDJkMjlhOWMzNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABPBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbd47ZwfkhvjxT6jHqe9FgUIDU+Td70vm7OEman5M8kFm6CrvHS/a bT5JNShzBj4dLec/1QqJXCKl209xwvU+4SjQY/N3sVwzAjAaunA6EJy2FTDvIEWy 3KYfr6lIGBsT8jJ+KmfhloF2H0NpVLYzDsrjGo+FIXbtdpn7Y6fpNmJvAWjJKhFG 2PODAjfKG6EkOEC1DSmEbH3MXNZ/Fr8khMebUlPlf0teKsquctub2oL8OCjvb9Nb rOntyHZ2Fohg+JRU7bv6qt+Wh7xo6xxaQLI6EEmbCFVFkcXJsAdHeerJThcxw1AY 7HR6IFxE7syim3XH869yRQ26+N1CjFdcOw== -----END CERTIFICATE-----Generated at Mon Oct 12 14:16:58 2026 by rpki-client