$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa File: cac81a67-312e-33f8-966d-322161e7bd8e.roa (raw, json) Hash identifier: 5NNdbSjkFJFEHfg43dewqB+ZYeMc6Qm9KVgj1NK8ZLo= Subject key identifier: 4B:66:36:8A:72:E7:A9:29:15:93:F8:97:5A:EC:E5:2A:96:C4:41:84 Certificate issuer: /CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Certificate serial: 010D0C9F4328584F49734E38CCF1587D7F2F5500 Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33197 IP address blocks: 2607:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4e:38:cc:f1:58:7d:7f:2f:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1775072d-79d0-4442-9097-907dfa283a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:6d:98:1a:95:b6:b4:d3:c7:8b:84:9e:ec: c5:ab:ed:a5:9e:a0:0d:28:11:68:cd:cc:2c:cb:64: 26:a8:25:a7:ed:42:27:23:67:cd:70:b9:05:7a:ff: b7:f3:68:fb:37:9a:d3:f9:65:ee:0f:86:be:1a:d9: 5b:76:67:ee:64:f6:da:59:d3:56:23:0c:6a:ab:06: 97:7b:4e:87:5d:ff:8a:5f:03:4b:ab:6a:88:42:49: 1a:88:9b:df:70:d5:36:81:c1:e7:17:65:20:f4:08: a1:25:4a:6a:aa:4e:e0:15:2c:f3:7f:52:5d:41:e1: fe:03:1d:34:4e:86:3d:4e:2f:da:85:89:8a:b6:2c: df:3f:d7:14:91:6b:b2:55:92:ab:06:db:4e:d5:33: 48:66:6a:07:3a:36:4c:f3:6f:06:94:53:71:f0:69: c0:9a:2d:4d:02:46:92:05:e3:05:4f:e8:5b:4c:bb: cf:94:b6:7a:d3:19:ad:30:2a:9d:cf:b9:d0:5d:9a: 42:a3:3b:8f:36:54:6a:72:b6:3c:31:12:6e:53:87: cf:c4:d7:33:56:5e:99:a3:2c:fd:9a:9f:39:59:99: 24:24:ee:f7:8a:08:db:66:76:d8:91:a5:2e:33:1a: fb:cc:c5:07:58:11:f9:77:af:46:e0:d6:70:14:54: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:66:36:8A:72:E7:A9:29:15:93:F8:97:5A:EC:E5:2A:96:C4:41:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/cac81a67-312e-33f8-966d-322161e7bd8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl X509v3 Authority Key Identifier: keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer sbgp-ipAddrBlock: critical IPv6: 2607:e100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bd:92:e5:df:62:b0:92:e7:86:fe:1f:81:78:5b:27:e5:45: 42:ca:ed:97:f4:54:91:bd:1c:48:d6:42:4e:9d:01:15:31:42: d6:4b:af:f8:a6:db:0f:34:91:a3:cb:05:f3:70:3b:43:1d:89: af:69:01:db:82:e0:f3:d4:dc:32:ac:d7:69:1d:7d:73:88:88: 63:86:f1:bb:b5:a5:97:c9:f4:66:2b:87:80:66:fa:0b:d3:e9: 26:72:d3:9d:e3:52:eb:45:26:6e:85:50:6f:a4:3e:a4:4d:94: 49:33:64:3e:f8:c0:dd:86:6b:eb:97:f2:e7:e4:c0:44:cf:b5: f6:33:08:bc:e9:56:fb:1c:c2:f3:4b:e1:46:7b:88:e3:10:3f: e1:a6:00:80:e8:5c:0a:9a:6d:64:1b:b2:40:53:06:31:98:43: 5c:d3:de:26:24:a1:a3:95:7e:d9:36:3d:40:e9:6c:15:9b:63: 4d:b1:3f:86:b7:95:5c:85:26:67:be:84:2c:52:3e:5c:e1:41: b3:58:0e:00:00:f2:7c:c2:73:41:b3:1b:91:37:40:25:10:22: 73:aa:a1:03:34:55:92:e2:c8:06:63:17:fb:a8:2f:75:29:eb: 31:18:e8:63:5c:5e:9c:fe:8a:4f:d1:f4:29:44:12:d3:e5:98: 5c:3a:fc:a8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc044zPFYfX8vVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQxZDNjZTgtZDI5Zi00MGFmLWI4ODMtMmYxMTRhZWU0 ZDI5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTc3NTA3MmQtNzlkMC00NDQyLTkwOTctOTA3ZGZhMjgzYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlRtmBqVtrTTx4uEnuzFq+2lnqANKBFozcws y2QmqCWn7UInI2fNcLkFev+382j7N5rT+WXuD4a+GtlbdmfuZPbaWdNWIwxqqwaX e06HXf+KXwNLq2qIQkkaiJvfcNU2gcHnF2Ug9AihJUpqqk7gFSzzf1JdQeH+Ax00 ToY9Ti/ahYmKtizfP9cUkWuyVZKrBttO1TNIZmoHOjZM828GlFNx8GnAmi1NAkaS BeMFT+hbTLvPlLZ60xmtMCqdz7nQXZpCozuPNlRqcrY8MRJuU4fPxNczVl6Zoyz9 mp85WZkkJO73igjbZnbYkaUuMxr7zMUHWBH5d69G4NZwFFTFAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEtmNopy56kpFZP4l1rs5SqWxEGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NDFk M2NlOC1kMjlmLTQwYWYtYjg4My0yZjExNGFlZTRkMjkvY2FjODFhNjctMzEyZS0z M2Y4LTk2NmQtMzIyMTYxZTdiZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODQxZDNjZTgtZDI5Zi00MGFmLWI4 ODMtMmYxMTRhZWU0ZDI5Lzg0MWQzY2U4LWQyOWYtNDBhZi1iODgzLTJmMTE0YWVl NGQyOS5jcmwwHwYDVR0jBBgwFoAU3K4MmZpEhmZapzo6SV+9KrNYIcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NDFkM2NlOC1kMjlmLTQwYWYtYjg4My0yZjEx NGFlZTRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfhAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFL2S5d9isJLnhv4fgXhbJ+VFQsrtl/RUkb0cSNZCTp0BFTFC1kuv +KbbDzSRo8sF83A7Qx2Jr2kB24Lg89TcMqzXaR19c4iIY4bxu7Wll8n0ZiuHgGb6 C9PpJnLTneNS60UmboVQb6Q+pE2USTNkPvjA3YZr65fy5+TARM+19jMIvOlW+xzC 80vhRnuI4xA/4aYAgOhcCpptZBuyQFMGMZhDXNPeJiSho5V+2TY9QOlsFZtjTbE/ hreVXIUmZ76ELFI+XOFBs1gOAADyfMJzQbMbkTdAJRAic6qhAzRVkuLIBmMX+6gv dSnrMRjoY1xenP6KT9H0KUQS0+WYXDr8qA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:58:22 2026 by rpki-client