$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa File: 0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json) Hash identifier: W7eIRBfLxJCpFV+CNZgNIgfLZpPVPOXT+zfFYdvp3N4= Subject key identifier: 31:9E:08:D3:C9:63:5C:8E:D3:59:45:18:46:A6:E1:E7:09:11:2E:A4 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F49757F9FE5466E5ADA8BF9C0 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 2604:4040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:7f:9f:e5:46:6e:5a:da:8b:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c891a9f5-bae9-446b-81e0-b3fba6bd1741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:ee:bd:0e:66:1b:8d:25:09:35:36:89:3b: b0:d0:bc:9a:8e:8b:4e:e0:28:79:0e:5c:6b:7a:61: b7:c3:3b:2a:d7:03:70:35:5e:3b:69:54:18:6d:39: 12:43:4a:d4:b8:a6:7e:1e:69:8e:e2:5d:54:ef:ef: be:a2:28:e7:64:cf:b4:f5:ae:7c:d1:16:ee:8c:50: 88:af:37:db:c8:20:10:20:7a:6c:b4:e9:43:e7:d1: ac:9b:50:d3:5c:9b:30:e4:c7:ee:31:a9:c2:bc:5c: 08:86:37:0a:86:4b:72:22:9c:3c:92:c3:34:a9:ac: 3a:d9:9d:17:9e:0e:26:3e:c5:8a:94:31:3e:3e:f7: b0:6f:64:de:58:e9:15:d7:7f:bb:ed:f3:41:3f:91: f2:88:4c:89:5c:a2:98:78:ab:00:80:7a:93:c1:f6: 84:77:39:a6:62:c0:e9:d3:91:e2:e3:bf:03:9d:2b: 5c:ed:b9:1e:fd:eb:1f:85:70:30:76:07:d7:7e:5c: ba:23:5a:0d:e2:d7:e4:f9:83:3a:6b:c9:c8:d6:1c: c1:ee:53:cf:8a:f7:14:76:a9:63:17:ac:84:c7:bd: 55:9d:7d:6c:81:fe:f6:21:b5:f0:b4:46:61:92:07: 30:ac:ca:12:c9:17:3c:ff:0b:4d:19:5e:12:1c:19: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:08:D3:C9:63:5C:8E:D3:59:45:18:46:A6:E1:E7:09:11:2E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2604:4040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:13:80:bf:7e:77:d2:d5:25:de:1c:9f:6f:d2:ea:8e:18:a4: 47:e8:7d:23:cc:83:11:aa:43:bc:48:f1:c8:af:6c:4c:d5:ec: 7d:8e:18:69:e3:3d:53:1b:2d:e2:8e:a4:b3:6c:ea:6b:1b:3a: 41:22:0f:e1:c0:0c:74:3e:90:eb:55:4d:48:b8:8d:19:14:a7: a8:cd:55:6e:fb:48:f8:e2:ce:7d:e0:61:5b:e5:ab:5f:91:a7: 29:41:b8:d3:34:7d:6f:15:9d:80:43:f8:c2:9d:a8:c0:1a:c4: df:10:ef:af:ad:4a:79:46:97:7a:59:3b:97:29:85:6e:6a:89: c6:6b:af:71:a1:12:c6:54:c0:a2:aa:11:56:27:32:e0:a6:b5: 69:b9:1b:4c:33:6c:b6:5c:52:b5:87:99:cd:58:1a:b7:50:dc: f1:2e:1c:cd:c5:f1:4f:71:7b:da:38:86:2d:a8:29:75:6a:35: f6:2f:5f:fd:63:99:87:2f:78:80:55:8e:32:14:fe:80:ce:ed: 59:47:e9:22:a4:46:0f:c3:9e:d1:ca:18:31:0b:8a:2b:e7:d3: c7:ac:0d:0a:5b:ad:4d:d5:be:a8:1b:a7:a9:20:77:63:90:3a: c7:59:0f:f0:a0:d9:7f:d7:0d:e8:9b:13:b6:74:e6:ce:26:82: 57:55:fb:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdX+f5UZuWtqL+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg5MWE5ZjUtYmFlOS00NDZiLTgxZTAtYjNmYmE2YmQxNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLLuvQ5mG40lCTU2iTuw0LyajotO4Ch5Dlxr emG3wzsq1wNwNV47aVQYbTkSQ0rUuKZ+HmmO4l1U7+++oijnZM+09a580RbujFCI rzfbyCAQIHpstOlD59Gsm1DTXJsw5MfuManCvFwIhjcKhktyIpw8ksM0qaw62Z0X ng4mPsWKlDE+Pvewb2TeWOkV13+77fNBP5HyiEyJXKKYeKsAgHqTwfaEdzmmYsDp 05Hi478DnStc7bke/esfhXAwdgfXfly6I1oN4tfk+YM6a8nI1hzB7lPPivcUdqlj F6yEx71VnX1sgf72IbXwtEZhkgcwrMoSyRc8/wtNGV4SHBn4GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDGeCNPJY1yO01lFGEam4ecJES6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGVjNWRjOTItNjBkZC0z YTYxLWI4OWMtZjcwNWRiYWQ2MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSE4C/fnfS1SXeHJ9v0uqOGKRH6H0jzIMRqkO8SPHIr2xM1ex9jhhp 4z1TGy3ijqSzbOprGzpBIg/hwAx0PpDrVU1IuI0ZFKeozVVu+0j44s594GFb5atf kacpQbjTNH1vFZ2AQ/jCnajAGsTfEO+vrUp5Rpd6WTuXKYVuaonGa69xoRLGVMCi qhFWJzLgprVpuRtMM2y2XFK1h5nNWBq3UNzxLhzNxfFPcXvaOIYtqCl1ajX2L1/9 Y5mHL3iAVY4yFP6Azu1ZR+kipEYPw57RyhgxC4or59PHrA0KW61N1b6oG6epIHdj kDrHWQ/woNl/1w3omxO2dObOJoJXVfsO -----END CERTIFICATE-----Generated at Sun Oct 4 20:02:56 2026 by rpki-client