$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa File: 145163f9-1765-313c-a389-221ae4503993.roa (raw, json) Hash identifier: z/xQxLMcuzs2aAw+q8yRWI8K1VMsaJ0zM+gdZFz8Ots= Subject key identifier: 0D:59:8F:91:15:2B:95:89:9D:30:45:96:D9:CD:35:82:71:C0:9C:B9 Certificate issuer: /CN=748bac2f-38a7-4ee0-81c0-e846bc60f7bf Certificate serial: 010D0C9F4328584EAFE6EE44F4B2A8EE76125280 Authority key identifier: A3:B9:89:3C:C4:9B:0D:83:21:AA:C5:48:24:40:AA:71:AE:8D:A1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 33438 IP address blocks: 2607:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ee:44:f4:b2:a8:ee:76:12:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748bac2f-38a7-4ee0-81c0-e846bc60f7bf Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=82beda1a-20fb-485d-bb1f-5715760d0ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:d3:bb:dd:6d:5c:84:2a:1e:93:60:93:4a: a2:d3:17:de:9b:77:7c:58:34:ca:37:6b:95:6b:9b: 6b:9c:d5:c4:6e:80:56:8b:9d:54:c1:e9:41:e9:42: 29:20:6b:b3:03:0b:c6:df:60:ac:90:e1:b6:86:f3: a8:6a:ec:a6:c7:c9:1d:50:6a:90:8b:5a:9e:8c:20: b1:b7:58:75:7b:5e:49:8c:f6:9d:c9:3d:6a:eb:b4: 3b:70:be:72:ac:f1:f9:d5:50:7a:4a:d3:88:53:9a: 23:b7:31:f8:3d:c8:da:ed:ac:42:bb:3b:d5:f3:cd: 31:38:43:4c:95:96:0f:27:9a:68:2a:c3:7a:30:78: 99:c4:cd:c5:91:7b:1f:b5:fc:0d:37:57:c3:97:9e: 94:6e:89:4e:c6:0a:82:5a:a4:99:12:ce:98:d5:80: 70:bc:a2:8c:9d:72:19:8d:1b:b6:17:55:c9:19:ad: a7:ad:a9:63:6a:66:92:3a:55:69:92:32:5e:4f:b3: f9:6b:82:6d:56:eb:ad:8d:68:ea:cd:5a:41:95:65: b5:f4:c2:a6:98:5e:c3:0a:0e:1e:5f:b2:ce:68:12: ef:82:c9:dd:49:d6:f1:c4:f6:eb:5b:2b:8f:89:73: c1:ec:c1:37:97:5c:4a:ce:a4:20:e3:72:9f:32:05: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:8F:91:15:2B:95:89:9D:30:45:96:D9:CD:35:82:71:C0:9C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/145163f9-1765-313c-a389-221ae4503993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.crl X509v3 Authority Key Identifier: keyid:A3:B9:89:3C:C4:9B:0D:83:21:AA:C5:48:24:40:AA:71:AE:8D:A1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/748bac2f-38a7-4ee0-81c0-e846bc60f7bf.cer sbgp-ipAddrBlock: critical IPv6: 2607:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ce:76:73:f5:9d:61:3a:ae:2a:bf:9e:32:b5:0f:af:c4:c0: 5b:3a:f9:e5:14:38:f2:c9:12:44:97:62:a3:e8:31:71:50:4f: 08:0e:92:c0:45:84:30:42:5d:8b:17:62:fc:f2:8d:74:09:2f: b1:6a:f1:af:66:30:09:0e:d0:df:e8:02:c1:2f:4a:eb:9e:6c: 8a:e8:13:b3:f5:41:e9:a6:c2:bf:96:7a:50:b1:70:8d:db:b7: a3:13:b7:10:f4:57:ae:09:3d:af:63:ec:bb:73:a4:92:43:28: 83:f6:df:43:95:e1:a7:3f:17:aa:c7:a6:f4:e3:60:07:52:5b: b2:c4:43:83:b3:e2:1a:9f:ed:06:c9:f7:b0:49:9a:8b:88:3d: dc:e4:34:e7:9b:33:ee:f3:f4:95:eb:77:21:2b:7b:e6:57:53: dd:10:16:b6:c1:6d:41:67:0a:91:bf:19:d1:12:b5:bb:9e:42: 35:c3:1f:ff:ab:8f:cd:cc:6f:ce:82:d1:3c:f3:8a:73:56:89: 1d:c5:93:b8:94:e9:3d:3c:f5:2a:f5:1d:53:8e:9a:22:80:1b: 01:85:dd:d9:5b:25:b8:4f:31:50:ac:67:99:0e:e6:e4:06:f4: fd:b7:4d:0e:87:98:16:75:5f:d9:a6:47:8b:62:92:29:39:6a: 09:08:26:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5u5E9LKo7nYSUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4YmFjMmYtMzhhNy00ZWUwLTgxYzAtZTg0NmJjNjBm N2JmMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ODJiZWRhMWEtMjBmYi00ODVkLWJiMWYtNTcxNTc2MGQwZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcfTu91tXIQqHpNgk0qi0xfem3d8WDTKN2uV a5trnNXEboBWi51UwelB6UIpIGuzAwvG32CskOG2hvOoauymx8kdUGqQi1qejCCx t1h1e15JjPadyT1q67Q7cL5yrPH51VB6StOIU5ojtzH4Pcja7axCuzvV880xOENM lZYPJ5poKsN6MHiZxM3FkXsftfwNN1fDl56UbolOxgqCWqSZEs6Y1YBwvKKMnXIZ jRu2F1XJGa2nraljamaSOlVpkjJeT7P5a4JtVuutjWjqzVpBlWW19MKmmF7DCg4e X7LOaBLvgsndSdbxxPbrWyuPiXPB7ME3l1xKzqQg43KfMgWUJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA1Zj5EVK5WJnTBFltnNNYJxwJy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83NDhi YWMyZi0zOGE3LTRlZTAtODFjMC1lODQ2YmM2MGY3YmYvMTQ1MTYzZjktMTc2NS0z MTNjLWEzODktMjIxYWU0NTAzOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzQ4YmFjMmYtMzhhNy00ZWUwLTgx YzAtZTg0NmJjNjBmN2JmLzc0OGJhYzJmLTM4YTctNGVlMC04MWMwLWU4NDZiYzYw ZjdiZi5jcmwwHwYDVR0jBBgwFoAUo7mJPMSbDYMhqsVIJECqca6NofowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83NDhiYWMyZi0zOGE3LTRlZTAtODFjMC1lODQ2 YmM2MGY3YmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgftQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnznZz9Z1hOq4qv54ytQ+vxMBbOvnlFDjyyRJEl2Kj6DFxUE8IDpLA RYQwQl2LF2L88o10CS+xavGvZjAJDtDf6ALBL0rrnmyK6BOz9UHppsK/lnpQsXCN 27ejE7cQ9FeuCT2vY+y7c6SSQyiD9t9DleGnPxeqx6b042AHUluyxEODs+Ian+0G yfewSZqLiD3c5DTnmzPu8/SV63chK3vmV1PdEBa2wW1BZwqRvxnRErW7nkI1wx// q4/NzG/OgtE884pzVokdxZO4lOk9PPUq9R1TjpoigBsBhd3ZWyW4TzFQrGeZDubk BvT9t00Oh5gWdV/ZpkeLYpIpOWoJCCZ9 -----END CERTIFICATE-----Generated at Sat Sep 5 00:47:31 2026 by rpki-client