$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa File: 41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa (raw, json) Hash identifier: O3ZGfUc+O/8bSo2svetPUTJJclFK+OY04NKSDaw0Bek= Subject key identifier: 41:81:70:50:A6:F9:A4:C2:FD:2E:2B:0A:92:08:C9:00:51:F4:38:32 Certificate issuer: /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Certificate serial: 010D0C9F4328584F63F81D29F20EB404BDE9D460 Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 32334 IP address blocks: 2620:17:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1d:29:f2:0e:b4:04:bd:e9:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=4671d390-7215-422b-96c3-648e0107b50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:2e:aa:fc:a2:f1:6a:67:cb:2e:c5:e4:f6: c2:d7:b2:1a:4e:ff:d2:78:79:95:6c:aa:90:17:05: 62:c5:7a:98:01:39:fe:8a:3d:51:d0:16:7f:10:5e: 36:75:bc:91:87:1e:76:8a:dc:45:39:e7:14:1b:d6: c4:14:84:98:2f:f4:8a:a3:78:82:bc:a8:c1:25:47: 40:6a:4c:2b:72:ca:4b:64:71:c6:9b:a3:c4:74:65: 4d:e7:5e:72:9d:e9:5b:a5:73:c1:32:dd:f7:84:9f: 0e:e1:5b:6c:da:f5:ec:7c:ba:c1:d8:58:9b:63:ee: ec:4a:fd:e7:20:15:cd:d0:b9:9c:8a:5e:32:07:36: cb:0f:13:e7:68:1a:ed:49:d2:51:7a:d9:ff:60:95: ce:25:38:e4:94:9e:af:fb:e5:f7:7f:81:74:c7:ab: 7c:5a:2b:7b:f1:cb:4c:08:a8:a3:8f:19:1c:58:3e: 37:b0:95:17:1f:f6:b1:e9:f4:68:ad:d8:9e:af:5c: 7e:97:cc:e4:9a:15:1e:33:27:df:ac:89:f6:d5:d4: 42:8a:2c:aa:0f:72:6b:da:88:e8:ae:2a:31:81:83: 1a:1f:c1:ef:fe:67:6c:d4:81:7b:5b:fc:77:dd:10: 5b:7e:90:45:d9:d8:98:f7:14:cd:bf:9e:ef:74:70: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:70:50:A6:F9:A4:C2:FD:2E:2B:0A:92:08:C9:00:51:F4:38:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl X509v3 Authority Key Identifier: keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer sbgp-ipAddrBlock: critical IPv6: 2620:17:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:94:80:47:a5:d9:01:00:60:1d:bc:42:95:4b:6a:43:fc:4f: 7f:f9:54:44:5d:58:19:df:69:dd:49:89:f6:91:04:4e:d2:15: a7:7e:0f:ce:4b:54:03:42:55:d2:da:9d:56:70:85:98:34:0e: d5:33:e8:e7:1a:8a:57:8d:91:e4:d9:19:40:80:30:de:7b:b6: 6b:52:6c:bd:7a:58:0b:04:3b:34:ee:a6:42:7b:75:4e:7c:57: 2d:65:57:bf:6f:a5:ca:ef:19:25:c3:e6:76:45:a4:b3:62:fe: 63:24:4a:39:31:4a:61:3b:48:a4:b2:71:7b:a9:13:fb:38:de: c3:e4:0c:d3:2f:1b:ec:74:c5:e4:48:ce:27:9f:df:89:77:99: 4b:d1:00:d7:27:42:f5:2c:d2:7e:1b:0c:ab:95:8e:df:96:c7: 7b:97:d3:b0:df:50:de:96:fa:4d:79:dd:50:25:f6:b2:aa:22: d4:89:6c:d9:d4:fa:36:b6:51:d8:a8:64:98:98:70:6b:eb:b4: e6:02:d0:e6:86:ff:b8:3c:bb:21:5e:e0:da:89:11:08:7a:0f: 6a:13:78:15:4d:a0:84:ca:78:94:e0:8a:0a:46:41:15:9c:02: e7:85:80:24:d7:7b:66:86:01:63:ad:86:18:2b:9b:6d:15:c3: 88:ce:6a:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9j+B0p8g60BL3p1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0OTM0YzgtNWI3OC00OGQ2LWIyNjEtYjdhMGQxYmM0 YmI3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NDY3MWQzOTAtNzIxNS00MjJiLTk2YzMtNjQ4ZTAxMDdiNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyEuqvyi8Wpnyy7F5PbC17IaTv/SeHmVbKqQ FwVixXqYATn+ij1R0BZ/EF42dbyRhx52itxFOecUG9bEFISYL/SKo3iCvKjBJUdA akwrcspLZHHGm6PEdGVN515ynelbpXPBMt33hJ8O4Vts2vXsfLrB2FibY+7sSv3n IBXN0Lmcil4yBzbLDxPnaBrtSdJRetn/YJXOJTjklJ6v++X3f4F0x6t8Wit78ctM CKijjxkcWD43sJUXH/ax6fRordier1x+l8zkmhUeMyffrIn21dRCiiyqD3Jr2ojo rioxgYMaH8Hv/mds1IF7W/x33RBbfpBF2diY9xTNv57vdHD1wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGBcFCm+aTC/S4rCpIIyQBR9DgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5 MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFiYzRiYjcvNDFkNWVkYjItMTBmNy0z ZTBhLWI3ZDMtN2FjMjg0MGI2N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ0OTM0YzgtNWI3OC00OGQ2LWIy NjEtYjdhMGQxYmM0YmI3LzJkNDkzNGM4LTViNzgtNDhkNi1iMjYxLWI3YTBkMWJj NGJiNy5jcmwwHwYDVR0jBBgwFoAUjaVzmWc3dFzU/MzrwMLF5wxUSeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2Ew ZDFiYzRiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAF6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuUgEel2QEAYB28QpVLakP8T3/5VERdWBnfad1JifaRBE7SFad+ D85LVANCVdLanVZwhZg0DtUz6OcaileNkeTZGUCAMN57tmtSbL16WAsEOzTupkJ7 dU58Vy1lV79vpcrvGSXD5nZFpLNi/mMkSjkxSmE7SKSycXupE/s43sPkDNMvG+x0 xeRIzief34l3mUvRANcnQvUs0n4bDKuVjt+Wx3uX07DfUN6W+k153VAl9rKqItSJ bNnU+ja2UdioZJiYcGvrtOYC0OaG/7g8uyFe4NqJEQh6D2oTeBVNoITKeJTgigpG QRWcAueFgCTXe2aGAWOthhgrm20Vw4jOaic= -----END CERTIFICATE-----Generated at Tue Oct 13 18:48:23 2026 by rpki-client