$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/9bc613bc-638a-318e-8717-2a86e80cb7de.roa File: 9bc613bc-638a-318e-8717-2a86e80cb7de.roa (raw, json) Hash identifier: 8pkaVmTXLJAMB0boMfnzf44e++b+cSvh+xNDGKQjQ+Y= Subject key identifier: 54:97:15:3A:CC:D0:32:05:3C:07:6F:EA:43:17:F3:CF:FC:34:B8:F3 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F0AB8D63F8D68AF9974414530 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/9bc613bc-638a-318e-8717-2a86e80cb7de.roa Signing time: Wed 02 Sep 2026 13:45:57 +0000 ROA not before: Wed 02 Sep 2026 13:45:57 +0000 ROA not after: Tue 01 Dec 2026 14:45:57 +0000 asID: 3573 IP address blocks: 2610:b0:2020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:b8:d6:3f:8d:68:af:99:74:41:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Sep 2 13:45:57 2026 GMT Not After : Dec 1 14:45:57 2026 GMT Subject: CN=95edd974-2bbf-4e1f-b97e-de76d13c4212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:f4:42:8b:67:21:47:4a:34:52:eb:88:4f: 9d:8f:9a:73:c7:c1:9e:59:86:9e:5c:03:f1:ce:4b: cc:59:3e:01:fc:1b:41:d2:8f:a6:c3:cf:a5:01:b7: 39:7d:e5:ef:2f:7b:43:3c:68:ea:6f:bb:fd:ea:9a: ad:91:80:28:48:9c:b5:17:2b:dd:87:eb:61:c0:c1: f6:db:9b:0a:9e:22:23:50:19:54:cb:81:d4:ce:52: 0e:d0:9f:0b:e7:86:d0:0c:46:c9:74:50:5a:f9:87: d7:da:d3:fc:3e:ec:f9:a2:7b:e0:e7:ba:3a:69:11: 7e:b3:75:49:86:38:17:e8:7f:db:f5:22:e6:0c:09: b2:66:ea:8c:f5:9c:4c:dc:58:19:c6:4a:2d:6d:04: 6b:e8:ec:96:f2:d4:96:06:2c:82:4f:ab:e8:2c:b9: 92:3e:a3:c9:27:48:df:7c:c6:eb:46:9b:74:6f:37: 13:58:8f:f6:32:47:b1:a6:2a:fa:70:d9:7d:2d:52: ec:35:ea:de:69:e4:5c:c4:eb:fb:cd:7a:d1:06:c2: 8a:b3:72:14:f0:f3:58:28:80:ab:06:dc:52:2f:de: 07:bc:ee:b9:49:0d:09:ed:61:ca:7e:18:d4:f1:c8: 74:d8:41:fa:0a:76:ea:5b:64:f2:de:f4:78:5e:cf: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:97:15:3A:CC:D0:32:05:3C:07:6F:EA:43:17:F3:CF:FC:34:B8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/9bc613bc-638a-318e-8717-2a86e80cb7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:2020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:56:af:59:d4:72:37:08:42:46:29:f0:80:9f:90:25:01:d0: 47:2b:5b:49:d7:c7:2f:1e:d5:dd:0d:fe:7a:89:31:09:0a:6b: 8b:5a:a8:e0:22:1a:45:db:e0:04:1f:b4:bf:c4:cd:91:ea:10: cf:53:67:b3:d2:78:94:78:a0:ef:85:c3:ac:a9:63:24:92:ae: 3c:e9:90:95:d1:2e:45:7c:41:23:bc:09:d2:9c:e2:5e:81:30: d8:d8:ec:7c:27:87:52:f1:b2:0d:46:8d:f9:51:7e:d9:ee:de: 0f:49:8f:7e:3f:49:01:12:59:cd:cd:50:da:10:3f:aa:65:77: 56:61:cc:8c:63:e0:70:1a:03:db:af:72:0d:3c:fa:8f:1b:f4: fa:0b:31:18:cb:01:33:b0:2f:9d:6c:72:22:ec:a2:20:62:5c: 2b:0f:23:59:2a:e4:b4:df:1e:a2:99:a0:f5:41:2d:35:fe:7e: 6a:74:e2:73:5b:8e:f0:4e:f5:45:0c:f4:b6:ec:a0:c1:27:14: c2:78:0f:d2:33:45:a5:e6:f6:2f:45:c4:69:9d:f4:53:00:61: 30:0c:54:ae:65:05:28:d0:6a:e6:6e:cd:22:18:e4:87:30:a9: 16:85:1c:81:5f:40:63:64:f5:ac:a9:99:14:19:34:f6:84:23: 9c:a0:14:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8KuNY/jWivmXRBRTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MDkwMjEzNDU1N1oXDTI2MTIwMTE0NDU1N1owLzEtMCsGA1UEAxMk OTVlZGQ5NzQtMmJiZi00ZTFmLWI5N2UtZGU3NmQxM2M0MjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAT0QotnIUdKNFLriE+dj5pzx8GeWYaeXAPx zkvMWT4B/BtB0o+mw8+lAbc5feXvL3tDPGjqb7v96pqtkYAoSJy1Fyvdh+thwMH2 25sKniIjUBlUy4HUzlIO0J8L54bQDEbJdFBa+YfX2tP8Puz5onvg57o6aRF+s3VJ hjgX6H/b9SLmDAmyZuqM9ZxM3FgZxkotbQRr6OyW8tSWBiyCT6voLLmSPqPJJ0jf fMbrRpt0bzcTWI/2Mkexpir6cNl9LVLsNereaeRcxOv7zXrRBsKKs3IU8PNYKICr BtxSL94HvO65SQ0J7WHKfhjU8ch02EH6CnbqW2Ty3vR4Xs8GLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSXFTrM0DIFPAdv6kMX88/8NLjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvOWJjNjEzYmMtNjM4YS0z MThlLTg3MTctMmE4NmU4MGNiN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAsCAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxWr1nUcjcIQkYp8ICfkCUB0EcrW0nXxy8e1d0N/nqJMQkKa4ta qOAiGkXb4AQftL/EzZHqEM9TZ7PSeJR4oO+Fw6ypYySSrjzpkJXRLkV8QSO8CdKc 4l6BMNjY7Hwnh1Lxsg1GjflRftnu3g9Jj34/SQESWc3NUNoQP6pld1ZhzIxj4HAa A9uvcg08+o8b9PoLMRjLATOwL51sciLsoiBiXCsPI1kq5LTfHqKZoPVBLTX+fmp0 4nNbjvBO9UUM9LbsoMEnFMJ4D9IzRaXm9i9FxGmd9FMAYTAMVK5lBSjQauZuzSIY 5IcwqRaFHIFfQGNk9aypmRQZNPaEI5ygFJI= -----END CERTIFICATE-----Generated at Wed Sep 16 18:04:21 2026 by rpki-client