$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa File: 95f415e9-f520-3499-9401-200ef544c860.roa (raw, json) Hash identifier: Ja28Wcx/kwI804eVXfjnJ/yFNktG5jJzZ4t5msY6fyM= Subject key identifier: 90:7A:0D:42:61:04:2D:D6:21:E9:E0:67:A3:2A:3B:70:07:58:61:5E Certificate issuer: /CN=e13a5b98-c410-4224-be84-d8a01047fa5b Certificate serial: 010D0C9F4328584F4973A7B4DD12A799902B2C38 Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14041 IP address blocks: 2620:123:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a7:b4:dd:12:a7:99:90:2b:2c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=024705d9-c8a3-4ea9-8d66-807bd196860d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:26:5b:b3:73:4a:d0:3c:3e:24:21:b6:1f: 4d:7b:1b:8e:f1:cd:56:24:28:3c:81:aa:be:04:1c: 8e:a8:af:1d:86:5e:3a:4e:42:68:0a:98:f9:20:d1: 88:a5:c7:8d:ff:44:41:1c:56:74:ca:2f:93:bc:ac: 3a:35:0c:91:f8:91:bd:ec:a5:07:f8:74:1a:46:a7: df:15:0d:7f:77:4d:d2:26:91:40:85:c4:73:b4:50: 95:5b:5a:42:bf:c7:15:e9:46:13:1b:c0:72:16:b4: 7f:10:0d:cb:7b:a3:70:ef:56:9b:6c:a1:f1:80:e2: 31:a9:2a:c7:1f:46:7d:38:88:57:75:52:82:8a:35: 35:bc:11:39:c3:84:b7:ac:3d:6a:f1:2e:cc:c6:31: 13:a4:06:6c:ed:f1:90:52:bc:3d:80:a7:63:33:6f: c9:77:e7:07:83:6b:4a:65:53:5b:4b:b8:5a:29:36: cc:c8:cf:40:c4:6c:15:41:b4:82:13:dd:82:b8:60: 9a:bb:18:e0:1d:4b:57:d6:30:22:d0:e3:8e:2b:be: 21:ec:32:2a:84:c7:49:50:10:c0:90:0f:0b:bf:6f: ac:94:60:02:de:9a:e1:03:96:42:43:34:7d:6f:62: ad:18:5d:e8:d9:34:1a:97:70:e2:ba:4f:6f:5e:03: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7A:0D:42:61:04:2D:D6:21:E9:E0:67:A3:2A:3B:70:07:58:61:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/95f415e9-f520-3499-9401-200ef544c860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl X509v3 Authority Key Identifier: keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:03:d6:0b:3e:9d:6e:17:d9:d4:70:42:77:f7:29:fe:5a:c0: 31:aa:ab:39:08:7d:79:f5:2f:a4:33:7f:79:ec:7b:85:af:7c: ea:52:de:7a:d2:d4:8a:e8:ae:9b:bd:25:fd:69:a2:e6:27:ed: 9d:3d:e5:39:33:5d:aa:e4:2b:ef:28:63:f6:71:b5:49:3b:94: 31:42:78:bc:33:c7:1b:8c:57:b6:97:51:35:49:94:62:c8:05: f8:ee:ef:ae:de:b0:50:2b:36:1c:42:68:68:31:04:ee:57:c4: 91:38:d6:2c:39:a1:79:cb:a9:f1:a7:89:48:40:19:0a:a0:45: 00:49:bc:d8:39:87:92:06:1f:a4:71:d0:76:f4:bc:c1:2e:b4: 41:9a:08:4b:ab:22:f1:ab:c8:27:29:fd:07:6c:9d:aa:15:b4: 77:01:4f:15:c1:ed:ac:2f:a4:cf:f8:8f:42:34:bc:d8:9a:52: 27:6e:0e:6c:a2:5f:51:e7:72:2e:60:e4:09:14:c4:c1:01:27: a8:c7:7d:bb:77:48:64:f6:d7:14:b6:99:ba:0c:00:e3:52:bf: 56:63:25:b7:f4:ab:19:76:1d:2f:c0:7a:1b:1b:1c:d5:4f:41: 79:b2:8d:04:9a:0c:d6:c4:49:e2:08:4d:09:7d:19:cf:76:47: a3:d0:e1:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc6e03RKnmZArLDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzYTViOTgtYzQxMC00MjI0LWJlODQtZDhhMDEwNDdm YTViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDI0NzA1ZDktYzhhMy00ZWE5LThkNjYtODA3YmQxOTY4NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8QmW7NzStA8PiQhth9NexuO8c1WJCg8gaq+ BByOqK8dhl46TkJoCpj5INGIpceN/0RBHFZ0yi+TvKw6NQyR+JG97KUH+HQaRqff FQ1/d03SJpFAhcRztFCVW1pCv8cV6UYTG8ByFrR/EA3Le6Nw71abbKHxgOIxqSrH H0Z9OIhXdVKCijU1vBE5w4S3rD1q8S7MxjETpAZs7fGQUrw9gKdjM2/Jd+cHg2tK ZVNbS7haKTbMyM9AxGwVQbSCE92CuGCauxjgHUtX1jAi0OOOK74h7DIqhMdJUBDA kA8Lv2+slGAC3prhA5ZCQzR9b2KtGF3o2TQal3Diuk9vXgPxvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJB6DUJhBC3WIengZ6MqO3AHWGFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNh NWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEwMTA0N2ZhNWIvOTVmNDE1ZTktZjUyMC0z NDk5LTk0MDEtMjAwZWY1NDRjODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzYTViOTgtYzQxMC00MjI0LWJl ODQtZDhhMDEwNDdmYTViL2UxM2E1Yjk4LWM0MTAtNDIyNC1iZTg0LWQ4YTAxMDQ3 ZmE1Yi5jcmwwHwYDVR0jBBgwFoAUBzT8cMlD4r8n1KXf9GQ5fSh+ZXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTNhNWI5OC1jNDEwLTQyMjQtYmU4NC1kOGEw MTA0N2ZhNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABI1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYwPWCz6dbhfZ1HBCd/cp/lrAMaqrOQh9efUvpDN/eex7ha986lLe etLUiuium70l/Wmi5iftnT3lOTNdquQr7yhj9nG1STuUMUJ4vDPHG4xXtpdRNUmU YsgF+O7vrt6wUCs2HEJoaDEE7lfEkTjWLDmhecup8aeJSEAZCqBFAEm82DmHkgYf pHHQdvS8wS60QZoIS6si8avIJyn9B2ydqhW0dwFPFcHtrC+kz/iPQjS82JpSJ24O bKJfUedyLmDkCRTEwQEnqMd9u3dIZPbXFLaZugwA41K/VmMlt/SrGXYdL8B6Gxsc 1U9BebKNBJoM1sRJ4ghNCX0Zz3ZHo9DhFg== -----END CERTIFICATE-----Generated at Sun Oct 11 18:04:12 2026 by rpki-client