$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa File: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (raw, json) Hash identifier: CRK5MuLo/HsmSMoXeyFkNfNCPv3+LLZdharbcE/cO8M= Subject key identifier: 9F:9B:66:17:81:86:E9:45:EF:D2:71:6A:AF:80:31:66:5D:23:34:EE Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584F498A2AA17F7E7244DB68AA80 Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63061 IP address blocks: 2620:b7:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:2a:a1:7f:7e:72:44:db:68:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0227bf70-073e-47d0-ae17-13d326967358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:66:3f:aa:dd:ae:2b:97:33:ae:0b:95:22: 75:4c:b9:93:b3:2d:c1:61:12:fc:3c:eb:77:ac:53: c7:0e:bd:f7:7b:53:cd:60:58:8f:a4:82:a7:ae:1a: 08:e6:c1:6c:d4:14:ce:64:d4:cb:1d:71:55:86:a1: 8c:c5:12:92:b6:f8:1d:cc:9f:9a:c5:29:3f:e0:38: 5e:8d:a1:b3:76:c3:73:23:80:32:1f:0a:3e:7f:cd: 6e:f8:87:a8:da:1a:fc:ac:cb:fc:78:8d:a1:af:bf: 41:1c:7c:c6:56:0d:61:92:45:2b:1c:49:e7:e6:db: fc:79:b3:bc:93:ae:05:e7:1d:8b:9d:87:d6:4a:56: 89:4f:bf:da:b6:1d:fe:02:21:16:82:8c:b8:2a:31: c4:fa:10:47:01:c6:a3:6d:ea:90:ab:ee:8b:4b:3e: aa:ac:e3:49:da:b4:a1:45:7c:5a:0d:6b:22:cc:23: 49:7e:bd:98:dc:8b:4e:68:9a:bc:0a:65:b8:ed:c0: d9:6a:57:95:58:bf:53:fc:0a:17:c6:aa:89:61:ad: 34:f8:db:e6:36:c0:22:7a:e3:d6:55:e5:47:52:37: 62:30:03:df:72:89:58:60:f1:1a:ae:24:99:70:aa: 2d:a8:30:ec:98:bc:a8:39:b9:c2:04:c8:ea:fc:a1: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:66:17:81:86:E9:45:EF:D2:71:6A:AF:80:31:66:5D:23:34:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv6: 2620:b7:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ed:6b:6f:f0:04:d4:b0:b4:77:c1:95:16:90:96:fe:3a:26: 78:32:9c:db:a2:43:aa:3d:f5:7b:6e:c9:50:79:79:14:dc:ff: f7:1a:64:6b:9e:5f:83:07:1d:07:7a:cd:a3:68:bc:79:3e:bf: fe:88:9a:96:de:c5:aa:ac:da:7f:03:40:8b:f8:04:66:b9:9e: 0a:60:28:96:01:25:62:84:d6:84:3e:50:6d:ad:85:2b:1c:13: b7:77:63:5a:af:14:db:df:70:0a:bf:42:0f:85:4c:18:4d:47: 65:52:b3:3b:a3:a8:43:bf:38:8b:8c:54:7e:44:68:40:75:73: 1e:8e:88:a8:50:10:0f:66:57:37:70:42:39:d8:46:9d:e3:c6: 7d:d6:db:f9:08:fa:d9:a2:db:0c:46:2a:29:db:42:31:4f:cb: 82:8a:0f:22:bf:46:0b:d0:18:2c:e0:d3:63:47:ab:ba:df:0c: f4:51:1c:cb:b2:1c:56:fc:a3:29:eb:bf:14:cc:cd:d5:35:e3: 45:5c:91:c3:b6:81:a3:69:23:25:c4:86:fe:79:b2:a4:dc:15: 45:66:25:51:00:44:b3:ee:07:38:e1:75:cd:3e:da:3d:a6:62: 51:49:3b:92:65:64:a1:91:11:51:8f:81:41:5c:14:b4:91:b3: 21:ad:c5:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jiiqhf35yRNtoqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDIyN2JmNzAtMDczZS00N2QwLWFlMTctMTNkMzI2OTY3MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfhmP6rdriuXM64LlSJ1TLmTsy3BYRL8POt3 rFPHDr33e1PNYFiPpIKnrhoI5sFs1BTOZNTLHXFVhqGMxRKStvgdzJ+axSk/4Dhe jaGzdsNzI4AyHwo+f81u+Ieo2hr8rMv8eI2hr79BHHzGVg1hkkUrHEnn5tv8ebO8 k64F5x2LnYfWSlaJT7/ath3+AiEWgoy4KjHE+hBHAcajbeqQq+6LSz6qrONJ2rSh RXxaDWsizCNJfr2Y3ItOaJq8CmW47cDZaleVWL9T/AoXxqqJYa00+NvmNsAieuPW VeVHUjdiMAPfcolYYPEariSZcKotqDDsmLyoObnCBMjq/KGi2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+bZheBhulF79Jxaq+AMWZdIzTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvM2UxY2U5N2ItYWY0Zi0z MjlkLThmN2ItNDkzYTU4ZTJkMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAtyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC/ta2/wBNSwtHfBlRaQlv46JngynNuiQ6o99XtuyVB5eRTc//ca ZGueX4MHHQd6zaNovHk+v/6Impbexaqs2n8DQIv4BGa5ngpgKJYBJWKE1oQ+UG2t hSscE7d3Y1qvFNvfcAq/Qg+FTBhNR2VSszujqEO/OIuMVH5EaEB1cx6OiKhQEA9m VzdwQjnYRp3jxn3W2/kI+tmi2wxGKinbQjFPy4KKDyK/RgvQGCzg02NHq7rfDPRR HMuyHFb8oynrvxTMzdU140VckcO2gaNpIyXEhv55sqTcFUVmJVEARLPuBzjhdc0+ 2j2mYlFJO5JlZKGREVGPgUFcFLSRsyGtxUY= -----END CERTIFICATE-----Generated at Sat Sep 26 08:16:58 2026 by rpki-client