$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: fzCwXnbqacI6dY/51/MwUMC7kq1lk3IVb2XGdKTl7Cc= Subject key identifier: FF:24:28:F6:55:DC:E1:91:4B:37:1F:7F:32:D4:29:60:1E:D7:30:8E Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584F6F22F2C1F42D23A110829280 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f2:c1:f4:2d:23:a1:10:82:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=44192201-51b8-4edf-875a-903e4b284bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:8e:09:bc:e4:c2:08:2d:bd:14:da:27:95: 88:d5:03:2c:38:2b:3e:8e:48:1c:d0:fc:f8:42:c2: d2:c3:cc:94:e6:ee:09:b9:f8:1c:d9:ee:60:d6:8e: f8:78:a5:fc:e8:5e:a4:4a:a3:f1:11:d0:2c:46:f3: 9c:5b:67:13:92:33:cc:2b:28:df:d4:9c:46:91:45: 5b:1d:97:a3:fe:b3:73:dc:66:6a:9e:da:37:2a:89: 30:94:62:a3:65:10:d0:b4:5e:2c:df:42:0b:b2:b4: 4f:c1:5a:43:ef:c2:1b:2f:20:2e:f7:51:8c:94:23: fd:d2:de:4d:05:6d:67:ec:74:2e:79:8f:b2:c3:bc: 1f:33:ce:11:94:9d:9f:d8:5d:c7:0b:6f:6e:3b:7a: e8:54:1e:03:1b:fe:3c:05:1f:16:52:00:0b:a7:28: 9c:9b:81:d0:f3:23:0e:cf:02:aa:a7:34:ba:9d:02: e6:1a:71:33:c8:d4:ce:e8:d7:c6:cc:7a:46:d1:bf: 2c:37:85:98:ec:f3:71:91:4f:d8:16:b2:6a:a9:05: d5:45:57:55:19:f6:5c:e0:e0:c7:15:56:6b:9b:d1: f9:cf:9e:12:fa:37:9e:c5:1d:90:9f:85:6a:d1:bb: d4:79:e0:67:27:df:5c:5a:eb:5d:4c:81:c6:e6:f1: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:28:F6:55:DC:E1:91:4B:37:1F:7F:32:D4:29:60:1E:D7:30:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:68:84:f6:2c:bc:41:36:fe:13:cf:16:c5:93:7a:0c:74:9f: e8:6c:43:43:ea:ff:eb:3b:e7:6e:e8:2b:d2:e5:1a:3a:b0:c5: 52:e0:a2:38:1a:0a:75:40:52:a0:45:9d:a5:a4:51:7d:05:e5: fe:13:8e:74:19:1f:28:a3:8e:32:4b:04:17:17:66:f6:17:c5: af:a0:64:d3:c3:b1:4a:20:23:f0:dd:4b:59:8a:7a:d0:e5:d2: b9:a8:0a:95:23:fe:42:98:1f:a3:ff:41:cd:cd:66:94:a0:2e: 8b:2d:d4:c6:97:c6:be:ad:79:e0:bb:8b:e8:5a:3b:33:10:05: 07:e0:64:dc:26:3b:5c:d9:44:d2:4f:2f:1e:f2:51:b6:1a:e0: 90:69:4c:c4:40:7b:d3:51:11:6a:86:61:87:41:bc:4e:95:df: 2d:1a:00:7a:98:0f:9b:0f:75:9b:4b:67:a3:7b:82:d8:37:6c: ff:f7:f2:9c:16:48:f7:ad:cb:0e:16:20:dd:35:d3:a9:57:d2: 0e:e5:87:39:12:24:99:43:f2:5d:69:3d:e7:ed:a1:f3:00:c4: a9:15:29:f9:73:79:63:0b:b6:9e:75:7f:45:8d:e2:ca:90:ff: 16:41:7a:82:9b:fe:a5:de:a0:2f:12:d7:71:89:af:91:92:f7: 3f:cc:23:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9vIvLB9C0joRCCkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDQxOTIyMDEtNTFiOC00ZWRmLTg3NWEtOTAzZTRiMjg0YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsSOCbzkwggtvRTaJ5WI1QMsOCs+jkgc0Pz4 QsLSw8yU5u4Jufgc2e5g1o74eKX86F6kSqPxEdAsRvOcW2cTkjPMKyjf1JxGkUVb HZej/rNz3GZqnto3KokwlGKjZRDQtF4s30ILsrRPwVpD78IbLyAu91GMlCP90t5N BW1n7HQueY+yw7wfM84RlJ2f2F3HC29uO3roVB4DG/48BR8WUgALpyicm4HQ8yMO zwKqpzS6nQLmGnEzyNTO6NfGzHpG0b8sN4WY7PNxkU/YFrJqqQXVRVdVGfZc4ODH FVZrm9H5z54S+jeexR2Qn4Vq0bvUeeBnJ99cWutdTIHG5vExvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP8kKPZV3OGRSzcffzLUKWAe1zCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDMaIT2LLxBNv4TzxbFk3oMdJ/obEND6v/rO+du6CvS5Ro6sMVS4KI4 Ggp1QFKgRZ2lpFF9BeX+E450GR8oo44ySwQXF2b2F8WvoGTTw7FKICPw3UtZinrQ 5dK5qAqVI/5CmB+j/0HNzWaUoC6LLdTGl8a+rXngu4voWjszEAUH4GTcJjtc2UTS Ty8e8lG2GuCQaUzEQHvTURFqhmGHQbxOld8tGgB6mA+bD3WbS2eje4LYN2z/9/Kc Fkj3rcsOFiDdNdOpV9IO5Yc5EiSZQ/JdaT3n7aHzAMSpFSn5c3ljC7aedX9FjeLK kP8WQXqCm/6l3qAvEtdxia+Rkvc/zCMh -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:49 2026 by rpki-client