$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3997ab1b-7668-3c35-a992-83512516b01b.roa File: 3997ab1b-7668-3c35-a992-83512516b01b.roa (raw, json) Hash identifier: l6phpDRFxQor3Wr5H0JiYaKpZ9XPK3i/45zIA7YBZc4= Subject key identifier: 71:37:BE:A6:AD:E3:A5:6E:81:61:80:E1:95:2B:27:01:94:1F:98:A0 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F0AB6956C5771DAA5286C7D80 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3997ab1b-7668-3c35-a992-83512516b01b.roa Signing time: Wed 02 Sep 2026 13:41:25 +0000 ROA not before: Wed 02 Sep 2026 13:41:25 +0000 ROA not after: Tue 01 Dec 2026 14:41:25 +0000 asID: 3573 IP address blocks: 2610:b0:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:b6:95:6c:57:71:da:a5:28:6c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Sep 2 13:41:25 2026 GMT Not After : Dec 1 14:41:25 2026 GMT Subject: CN=6c9455a8-2ab3-4245-a88c-88f5239b9043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:e8:60:cb:f9:8a:2e:cd:c0:1d:88:1a:b7: 74:60:12:3b:66:54:23:14:97:1e:ec:01:d3:24:e1: 08:f1:0f:85:1a:2d:63:d0:e7:41:11:28:66:b6:55: d5:ed:db:47:b4:b5:b9:b5:70:35:dd:04:d7:21:d8: 46:08:a8:60:49:ed:01:63:11:7d:90:14:a4:ae:ea: 85:24:ac:68:43:2f:55:d3:45:b7:a1:0c:09:65:25: 2d:a3:20:27:9c:e9:3d:ca:df:31:8b:8b:de:91:75: 6b:28:11:be:b4:b2:4b:b6:10:fe:c5:58:2f:54:bb: 74:08:b8:e2:48:7a:f4:9a:9d:c6:04:a3:fb:22:54: 64:a2:de:da:25:cd:80:06:e7:6b:1a:b4:f0:45:c6: a0:53:37:73:2f:fc:d3:09:4d:0d:fb:81:11:ca:bc: 95:29:f6:01:64:8d:dc:a8:bc:cf:3d:46:1d:ac:b7: ff:d6:1b:6e:26:81:fa:ac:fc:5a:63:ba:77:23:38: e2:00:19:e4:0b:5c:54:5c:bf:dd:14:28:11:0e:ac: 3d:06:8b:c0:68:20:cf:da:dd:1d:08:bb:5b:c3:3a: 93:d4:44:26:93:45:e0:e7:10:db:c6:33:b4:93:ff: 85:2e:21:8d:91:d9:f2:97:9d:41:06:cb:5c:c9:25: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:37:BE:A6:AD:E3:A5:6E:81:61:80:E1:95:2B:27:01:94:1F:98:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3997ab1b-7668-3c35-a992-83512516b01b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a7:73:c1:f8:14:c4:41:fc:14:eb:f0:6e:d7:34:8c:1e:b4: ae:c0:8a:f2:2e:32:83:8f:3f:e3:2c:5e:2a:1f:8a:ec:28:e3: c5:ef:09:50:c5:e4:63:b5:64:a5:8e:f4:a2:2a:0b:20:fe:21: 9a:05:ae:78:8d:b5:9a:9c:c8:c0:81:9a:01:bd:f5:ba:0f:f8: 43:31:3c:5e:3b:4a:9f:ab:36:01:14:26:4e:5d:83:fb:23:ee: 49:49:aa:1b:f0:c5:08:81:95:7d:65:3b:94:ff:a2:42:dc:6a: b8:66:4d:d1:c5:67:fe:5a:fc:49:49:bb:d1:27:8d:6f:96:bc: 1b:d2:00:0d:e1:1f:98:d1:dd:32:ea:b4:0d:bb:fb:b8:db:2d: 68:f5:d7:f2:e5:63:c6:27:05:96:d5:0e:54:dc:9b:77:9d:3b: ae:32:4f:d9:89:2b:31:e1:9f:67:90:db:2a:c1:d7:ef:c7:24: 38:55:a1:b3:ea:9d:07:73:d1:01:23:0f:51:9c:a2:72:38:58: 73:73:b1:2f:7a:f5:32:ca:31:1f:f6:21:01:99:fb:8c:a6:4e: bb:68:d9:27:e7:c8:5f:8e:6c:43:1f:0e:90:8e:2f:7b:c0:f4: 55:de:fd:57:a4:23:43:8c:a4:b6:ce:cf:2f:1f:a5:1d:35:3b: c6:71:fb:1d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8KtpVsV3HapShsfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MDkwMjEzNDEyNVoXDTI2MTIwMTE0NDEyNVowLzEtMCsGA1UEAxMk NmM5NDU1YTgtMmFiMy00MjQ1LWE4OGMtODhmNTIzOWI5MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnXoYMv5ii7NwB2IGrd0YBI7ZlQjFJce7AHT JOEI8Q+FGi1j0OdBEShmtlXV7dtHtLW5tXA13QTXIdhGCKhgSe0BYxF9kBSkruqF JKxoQy9V00W3oQwJZSUtoyAnnOk9yt8xi4vekXVrKBG+tLJLthD+xVgvVLt0CLji SHr0mp3GBKP7IlRkot7aJc2ABudrGrTwRcagUzdzL/zTCU0N+4ERyryVKfYBZI3c qLzPPUYdrLf/1htuJoH6rPxaY7p3IzjiABnkC1xUXL/dFCgRDqw9BovAaCDP2t0d CLtbwzqT1EQmk0Xg5xDbxjO0k/+FLiGNkdnyl51BBstcySXYJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHE3vqat46VugWGA4ZUrJwGUH5igMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMzk5N2FiMWItNzY2OC0z YzM1LWE5OTItODM1MTI1MTZiMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAsAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfKdzwfgUxEH8FOvwbtc0jB60rsCK8i4yg48/4yxeKh+K7Cjjxe8J UMXkY7VkpY70oioLIP4hmgWueI21mpzIwIGaAb31ug/4QzE8XjtKn6s2ARQmTl2D +yPuSUmqG/DFCIGVfWU7lP+iQtxquGZN0cVn/lr8SUm70SeNb5a8G9IADeEfmNHd Muq0Dbv7uNstaPXX8uVjxicFltUOVNybd507rjJP2YkrMeGfZ5DbKsHX78ckOFWh s+qdB3PRASMPUZyicjhYc3OxL3r1MsoxH/YhAZn7jKZOu2jZJ+fIX45sQx8OkI4v e8D0Vd79V6QjQ4ykts7PLx+lHTU7xnH7HQ== -----END CERTIFICATE-----Generated at Wed Sep 16 18:04:26 2026 by rpki-client