$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa File: d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (raw, json) Hash identifier: KilFcQZLLiqLIVC019vg+wUIb2o+f/U2tG2aC+cHcHQ= Subject key identifier: A4:C9:86:51:D9:7F:B4:64:99:10:46:E4:80:DE:02:98:B8:6C:44:C3 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584F4986EFEB06948ACBE9AE8740 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46309 IP address blocks: 2605:bc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ef:eb:06:94:8a:cb:e9:ae:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=75183787-da50-4738-a1b6-8098a4219c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:f5:14:80:66:96:da:e8:69:3d:e4:eb:17: c0:cb:38:6e:02:5b:84:91:74:91:cf:82:9b:4c:2c: 58:57:18:6b:1c:2e:7f:de:26:b3:96:3d:4d:d5:dc: 76:8f:c1:46:18:01:58:7e:11:06:03:fe:9b:6e:df: 23:10:3f:ec:f1:1e:57:af:43:fe:54:ca:f5:0d:2f: d8:28:c2:7f:2c:31:ab:83:33:72:e9:ed:8b:d3:3d: 35:1d:02:28:ca:34:a6:70:20:bb:eb:97:84:fe:34: 7e:e4:b7:25:3a:26:e7:cb:aa:5e:f0:20:84:32:ed: 28:ee:e8:a2:fd:c9:11:78:97:2c:72:dc:ba:e1:6b: 5f:0a:91:4c:9d:1c:ac:b4:5e:14:60:41:d4:13:74: 5a:5e:ee:e1:4b:27:4b:b7:7f:e4:b9:2a:c3:00:87: 7c:1e:db:17:ed:b8:08:61:d5:8b:36:af:f5:e5:50: cc:40:f1:4f:33:ac:65:03:33:43:d0:98:7b:96:0c: f4:82:f3:9e:28:c7:3d:92:24:b7:b0:82:71:b1:e0: b3:64:ce:6f:0b:68:eb:5e:29:bd:28:51:63:50:70: af:18:e8:68:fc:92:bb:56:96:43:e1:68:08:1b:35: 38:3f:5e:59:9b:1a:b0:89:3b:be:66:03:55:7b:fb: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C9:86:51:D9:7F:B4:64:99:10:46:E4:80:DE:02:98:B8:6C:44:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv6: 2605:bc00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f0:68:1a:58:ef:b7:54:5b:27:d6:d6:fa:10:6c:42:51:8d: 6c:ae:62:55:21:2d:6e:68:c2:73:b5:6e:89:b9:27:c4:87:5f: 55:c1:93:dc:e5:de:64:08:ab:d9:a5:27:36:a1:5e:d9:90:94: 2b:da:3a:98:fd:3f:b9:d4:fb:80:be:b0:21:05:ac:75:38:c0: 7a:dc:39:b8:04:45:69:67:09:e3:4c:a0:f9:5b:bd:9a:15:c5: 0d:5f:fb:6b:11:eb:74:1e:ae:73:91:c3:2b:8f:90:91:19:a6: 2d:df:f0:c7:92:77:ce:1d:c1:11:bd:bd:5d:b5:af:85:8f:d4: 25:0e:a7:1c:83:34:64:b5:a8:49:1f:0b:81:af:85:d3:6d:10: 0a:80:78:7f:df:7e:76:cd:91:79:33:ff:c7:c1:4c:82:c4:f6: 72:8d:94:c9:4a:3c:6d:26:1b:fa:73:55:fb:94:89:f9:1d:81: 0d:44:77:15:e1:37:da:06:3b:1d:c4:74:c2:9a:b1:41:76:9f: b4:f9:6b:a0:a4:3d:e3:47:02:fe:19:c1:80:cf:51:7d:dd:f9: d9:b1:cd:e9:76:a7:13:29:5b:3f:e5:5f:6a:64:d0:fd:a0:12: eb:c9:8d:a9:9a:b8:29:de:64:4f:d7:1a:44:44:99:92:b6:48: 73:0c:d2:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jhu/rBpSKy+muh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzUxODM3ODctZGE1MC00NzM4LWExYjYtODA5OGE0MjE5YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V71FIBmltroaT3k6xfAyzhuAluEkXSRz4Kb TCxYVxhrHC5/3iazlj1N1dx2j8FGGAFYfhEGA/6bbt8jED/s8R5Xr0P+VMr1DS/Y KMJ/LDGrgzNy6e2L0z01HQIoyjSmcCC765eE/jR+5LclOibny6pe8CCEMu0o7uii /ckReJcscty64WtfCpFMnRystF4UYEHUE3RaXu7hSydLt3/kuSrDAId8HtsX7bgI YdWLNq/15VDMQPFPM6xlAzND0Jh7lgz0gvOeKMc9kiS3sIJxseCzZM5vC2jrXim9 KFFjUHCvGOho/JK7VpZD4WgIGzU4P15ZmxqwiTu+ZgNVe/uI+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKTJhlHZf7RkmRBG5IDeApi4bETDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvZDFiZDgzZGQtNWVjYy0z Yzc3LTkwNmMtZWE1NmFlNjI0MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgW8ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA8GgaWO+3VFsn1tb6EGxCUY1srmJVIS1uaMJztW6JuSfEh19VwZPc 5d5kCKvZpSc2oV7ZkJQr2jqY/T+51PuAvrAhBax1OMB63Dm4BEVpZwnjTKD5W72a FcUNX/trEet0Hq5zkcMrj5CRGaYt3/DHknfOHcERvb1dta+Fj9QlDqccgzRktahJ HwuBr4XTbRAKgHh/3352zZF5M//HwUyCxPZyjZTJSjxtJhv6c1X7lIn5HYENRHcV 4TfaBjsdxHTCmrFBdp+0+WugpD3jRwL+GcGAz1F93fnZsc3pdqcTKVs/5V9qZND9 oBLryY2pmrgp3mRP1xpERJmStkhzDNJE -----END CERTIFICATE-----Generated at Sat Sep 26 03:34:39 2026 by rpki-client