$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa File: e444ac11-ef96-312e-bc6f-003e024b582e.roa (raw, json) Hash identifier: kBD91+wbwAe5MDSkdgNRMKIqpYTWTqgp1yuW4/zQqA0= Subject key identifier: 81:33:CB:DF:90:B3:20:3A:FA:89:C2:AB:F6:94:1E:BE:7D:5F:21:3C Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F6292CAA4B3563F6F5A609580 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 26967 IP address blocks: 2620:125:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ca:a4:b3:56:3f:6f:5a:60:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=bb0dc4a0-fee2-4e92-8ce3-1cb313cb1398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:c9:b2:a1:9d:7e:0b:9e:d0:af:9b:76:86: 67:76:d4:9f:dd:65:f9:5e:7e:8a:cc:40:00:08:3c: 71:f6:84:4d:72:06:bd:19:6b:eb:68:b6:34:73:14: 00:b3:eb:41:62:09:1f:fa:f8:5d:12:ee:ac:01:b8: 4e:a3:1d:53:19:59:01:78:9d:33:18:5f:40:10:0e: 44:c5:db:67:48:ef:64:56:a3:c4:41:4e:04:f9:81: ff:e9:58:a7:59:19:47:55:c9:b2:1f:25:f5:62:eb: 04:54:5b:5e:f7:63:f6:2e:2d:08:b0:a3:5b:3e:1d: 9b:b5:08:41:f4:1a:5b:7a:50:e8:68:32:a4:67:3e: ee:41:37:a7:42:8e:fe:17:5d:a5:d0:b7:ce:ec:86: 71:c0:b0:60:6e:e8:27:f3:85:7d:e8:2a:7a:67:55: 4c:12:98:b7:f9:d2:17:ba:e6:9a:8a:c8:91:72:64: 9b:0d:56:3d:bf:fa:db:d7:80:df:8a:b8:34:79:0d: 2d:0a:ba:05:e6:f4:a1:50:5b:19:b6:4f:66:de:0f: cd:93:72:c1:a8:12:8f:95:fb:d6:04:c8:ae:b3:8c: 41:72:33:11:80:2a:8c:ca:ac:58:01:35:c9:41:8d: 2e:b0:a0:a9:e3:49:92:68:df:06:ea:cc:12:6c:cc: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:33:CB:DF:90:B3:20:3A:FA:89:C2:AB:F6:94:1E:BE:7D:5F:21:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:b1:7a:bc:c4:ae:0b:0c:28:ac:53:b6:59:b2:6e:39:f4: 33:db:e3:71:f1:5c:46:69:bb:52:60:bc:28:63:12:fe:2f:52: 8d:ae:70:20:8a:50:d2:1d:2e:1e:4f:bc:76:aa:4c:b6:67:92: d6:05:36:be:6a:35:9d:eb:98:2a:0f:5c:e6:76:08:f5:8a:fa: c9:40:35:7d:fa:76:29:cc:51:92:bc:4a:2e:b6:dc:4c:74:3f: b3:05:22:c3:fd:09:aa:e6:10:86:07:09:c7:23:96:1d:db:3b: b9:12:99:95:66:97:fb:0b:6d:10:d7:ad:2e:79:52:b7:cf:4a: 2a:2c:8b:f7:54:05:b7:bc:cf:24:4e:2a:c9:98:a9:99:64:47: f2:5d:47:e8:85:6c:9f:3d:45:33:26:c8:63:2d:53:22:67:bb: 4f:76:a3:45:b8:e2:7d:2d:9d:e4:2d:3f:2a:00:21:6d:73:27: 01:76:de:50:55:f5:aa:14:c5:e7:01:66:8e:f4:93:1c:00:be: 5b:42:90:58:44:d8:07:d1:53:d4:c7:d5:7b:e0:8e:9d:e6:69: 8a:c3:b4:9b:8c:f9:1c:b7:eb:e0:8b:28:e7:1b:69:ca:2b:ba: d9:76:f3:7d:9f:00:35:43:59:6e:d6:01:cf:ce:be:8e:41:55: 0a:10:6f:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksqks1Y/b1pglYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmIwZGM0YTAtZmVlMi00ZTkyLThjZTMtMWNiMzEzY2IxMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsijJsqGdfgue0K+bdoZndtSf3WX5Xn6KzEAA CDxx9oRNcga9GWvraLY0cxQAs+tBYgkf+vhdEu6sAbhOox1TGVkBeJ0zGF9AEA5E xdtnSO9kVqPEQU4E+YH/6VinWRlHVcmyHyX1YusEVFte92P2Li0IsKNbPh2btQhB 9BpbelDoaDKkZz7uQTenQo7+F12l0LfO7IZxwLBgbugn84V96Cp6Z1VMEpi3+dIX uuaaisiRcmSbDVY9v/rb14Dfirg0eQ0tCroF5vShUFsZtk9m3g/Nk3LBqBKPlfvW BMius4xBcjMRgCqMyqxYATXJQY0usKCp40mSaN8G6swSbMxZjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIEzy9+QsyA6+onCq/aUHr59XyE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvZTQ0NGFjMTEtZWY5Ni0z MTJlLWJjNmYtMDAzZTAyNGI1ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJbAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkNsXq8xK4LDCisU7ZZsm459DPb43HxXEZpu1JgvChjEv4vUo2u cCCKUNIdLh5PvHaqTLZnktYFNr5qNZ3rmCoPXOZ2CPWK+slANX36dinMUZK8Si62 3Ex0P7MFIsP9CarmEIYHCccjlh3bO7kSmZVml/sLbRDXrS55UrfPSiosi/dUBbe8 zyROKsmYqZlkR/JdR+iFbJ89RTMmyGMtUyJnu092o0W44n0tneQtPyoAIW1zJwF2 3lBV9aoUxecBZo70kxwAvltCkFhE2AfRU9TH1Xvgjp3maYrDtJuM+Ry36+CLKOcb acorutl2832fADVDWW7WAc/Ovo5BVQoQbyk= -----END CERTIFICATE-----Generated at Sat Oct 10 11:04:09 2026 by rpki-client