$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/621f8d13-f400-369c-b2b9-0552bfd7438b.roa File: 621f8d13-f400-369c-b2b9-0552bfd7438b.roa (raw, json) Hash identifier: IC9a0sA0//8iP3q9iFkidTaRvqgHf2UFBymRj6A0G0w= Subject key identifier: 5B:10:FB:B2:18:96:DF:64:05:71:CC:9B:7F:28:2D:C0:1F:FD:F2:02 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F4AD61DDAE0D68DCB62115500 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/621f8d13-f400-369c-b2b9-0552bfd7438b.roa Signing time: Fri 25 Sep 2026 12:56:41 +0000 ROA not before: Fri 25 Sep 2026 12:56:41 +0000 ROA not after: Thu 24 Dec 2026 13:56:41 +0000 asID: 3573 IP address blocks: 2610:b0:40b8::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d6:1d:da:e0:d6:8d:cb:62:11:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Sep 25 12:56:41 2026 GMT Not After : Dec 24 13:56:41 2026 GMT Subject: CN=3315e9b5-5a4d-44c2-ae50-f7e3a7014fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:5f:fc:ae:02:84:b1:e0:bc:9d:57:ff:28: 3e:33:28:18:f1:98:58:d2:ba:6d:f8:d4:59:bb:7b: 99:6f:f6:cf:3e:9f:ad:ac:1b:2d:ba:c2:1b:20:87: 1c:4f:03:37:f7:23:61:b1:3d:e2:89:5b:c2:8f:c2: 1e:0b:ba:ea:d1:6e:9b:c7:ce:97:5e:f5:b3:b0:55: a1:48:db:a8:30:99:c3:c0:c9:68:90:ee:cc:05:66: 8f:44:f6:98:c5:f3:f6:d3:71:a9:ff:47:0c:82:f4: f2:d4:ae:0c:11:23:40:3f:e3:35:7d:3e:03:ee:08: d3:bb:07:14:a1:73:50:83:18:43:3c:6d:dc:8a:88: bd:84:6c:5b:b2:8c:3c:10:58:74:8d:87:44:b8:c8: 59:4a:52:47:6e:87:3b:e0:75:0d:e2:69:a5:6d:b7: dc:f1:37:0e:77:1d:80:36:39:51:ac:81:ee:14:08: 16:3e:8f:dc:69:1d:a6:f6:39:56:c0:ff:41:66:41: aa:2a:1c:ac:91:81:90:10:db:9c:68:d5:f2:80:67: a9:26:0d:47:8c:74:35:14:93:7c:39:bc:18:c2:35: 2f:f6:6c:93:1a:c4:94:51:5d:6f:12:ab:5d:60:d8: c2:30:fd:24:a6:25:bf:5e:5a:86:c5:d1:a8:d3:a7: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:FB:B2:18:96:DF:64:05:71:CC:9B:7F:28:2D:C0:1F:FD:F2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/621f8d13-f400-369c-b2b9-0552bfd7438b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:40b8::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4d:6a:d5:72:e7:fc:2e:40:c0:fa:0e:de:36:ea:ea:c6:7c: 7f:c5:6d:ce:31:2c:e4:bf:f8:35:4b:8e:0a:2f:78:01:58:a4: 11:14:2e:fe:8d:34:6b:57:ff:e7:be:8d:19:0c:05:d3:8c:7a: 76:ee:61:a4:65:63:50:13:ec:fb:41:a3:68:c4:f2:3e:30:ec: 2c:05:5f:d9:a2:38:50:1a:95:01:5f:46:54:f2:08:23:9c:ee: bb:ab:e2:99:1b:36:df:65:1e:a1:b3:48:82:87:8e:de:7b:03: 2f:82:98:15:7e:b1:d0:c9:c1:4e:20:9c:46:e4:98:64:2e:55: ab:2e:2d:3d:34:ef:e3:b1:7e:e1:c9:51:2f:53:b1:2a:9e:98: 18:97:44:78:1f:5b:b7:ec:35:06:0c:47:af:76:8b:9d:f9:fc: ce:9a:22:40:e0:12:da:06:59:4d:61:8c:bd:74:c3:71:a1:47: 64:b7:5d:0e:d4:80:df:d9:aa:b4:d1:90:f8:ae:e7:71:50:b4: 8f:36:d2:57:d0:8b:68:72:e9:f4:5a:b0:ef:be:81:13:dd:e3: ca:5c:9b:ef:ad:23:18:67:8b:97:a7:25:99:e5:ac:4c:a1:99: ce:cd:fa:4f:c9:1a:20:7a:71:db:ff:76:f6:ba:06:ff:eb:ea: 97:d0:83:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9K1h3a4NaNy2IRVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MDkyNTEyNTY0MVoXDTI2MTIyNDEzNTY0MVowLzEtMCsGA1UEAxMk MzMxNWU5YjUtNWE0ZC00NGMyLWFlNTAtZjdlM2E3MDE0ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChf/K4ChLHgvJ1X/yg+MygY8ZhY0rpt+NRZ u3uZb/bPPp+trBstusIbIIccTwM39yNhsT3iiVvCj8IeC7rq0W6bx86XXvWzsFWh SNuoMJnDwMlokO7MBWaPRPaYxfP203Gp/0cMgvTy1K4MESNAP+M1fT4D7gjTuwcU oXNQgxhDPG3cioi9hGxbsow8EFh0jYdEuMhZSlJHboc74HUN4mmlbbfc8TcOdx2A NjlRrIHuFAgWPo/caR2m9jlWwP9BZkGqKhyskYGQENucaNXygGepJg1HjHQ1FJN8 ObwYwjUv9myTGsSUUV1vEqtdYNjCMP0kpiW/XlqGxdGo06etvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsQ+7IYlt9kBXHMm38oLcAf/fICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvNjIxZjhkMTMtZjQwMC0z NjljLWIyYjktMDU1MmJmZDc0MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJhAAsEC4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZNatVy5/wuQMD6Dt426urGfH/Fbc4xLOS/+DVLjgoveAFYpBEU Lv6NNGtX/+e+jRkMBdOMenbuYaRlY1AT7PtBo2jE8j4w7CwFX9miOFAalQFfRlTy CCOc7rur4pkbNt9lHqGzSIKHjt57Ay+CmBV+sdDJwU4gnEbkmGQuVasuLT007+Ox fuHJUS9TsSqemBiXRHgfW7fsNQYMR692i535/M6aIkDgEtoGWU1hjL10w3GhR2S3 XQ7UgN/ZqrTRkPiu53FQtI820lfQi2hy6fRasO++gRPd48pcm++tIxhni5enJZnl rEyhmc7N+k/JGiB6cdv/dva6Bv/r6pfQgxc= -----END CERTIFICATE-----Generated at Sat Sep 26 17:01:30 2026 by rpki-client