$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa File: 3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa (raw, json) Hash identifier: veKJ8yDt+nSxS7/gIQlVx2T2DiqZix7eRMZ5Rzt09Ic= Subject key identifier: A7:57:E0:AB:7A:DF:9D:66:70:B9:4F:A4:39:B5:DE:D5:E6:0B:49:6E Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F4328584F119D199E3C1F30AE860A3C00 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397041 IP address blocks: 2604:f740:bacb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:19:9e:3c:1f:30:ae:86:0a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=437601db-50f7-4c92-a276-9eb1e05e05b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:55:24:fd:94:c9:dc:ce:c8:21:9e:a5:73: 4d:0e:cb:92:5c:cd:90:45:ec:e2:37:3b:6b:0d:8a: e1:89:fd:be:5e:22:a8:c7:bd:ed:0e:3e:6c:c5:7f: 38:41:16:0f:dc:3e:f0:7a:5d:9a:59:94:ed:ca:c5: cd:bc:3b:6d:bf:72:38:b0:87:1d:b6:36:fc:de:d2: 8e:e1:9e:58:fe:d6:fa:5e:c2:49:f4:18:26:c6:8d: 82:5e:96:a7:83:a2:ee:20:e0:b0:07:cd:ba:dd:75: 2a:e0:dd:6e:2e:d9:8d:57:b8:0b:45:95:84:12:52: f0:0f:4f:7d:63:22:20:70:34:c3:41:c6:25:d4:cd: 3a:5b:56:c3:59:b1:4f:a6:58:13:6b:c5:d6:31:5d: 60:fb:91:d9:3a:29:61:fc:d6:5d:29:d4:ee:31:c9: d8:6e:7f:79:58:3c:4e:2e:7c:1a:2f:1f:46:d2:25: e3:d4:e8:0e:88:97:f5:52:cf:f9:f4:dc:be:78:7f: cc:79:ca:2b:d7:a2:91:8a:a2:fb:ed:d5:76:20:42: 12:1d:4d:3c:5b:84:af:6b:0b:b4:59:4e:5a:d4:c5: 47:95:f1:67:86:e5:5b:a8:33:5e:a4:9d:8a:f0:70: 2c:c2:a6:c6:f3:77:8d:8c:9f:34:64:d0:d1:e4:b2: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:E0:AB:7A:DF:9D:66:70:B9:4F:A4:39:B5:DE:D5:E6:0B:49:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:f740:bacb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:58:1a:31:57:14:0a:60:c5:82:86:24:16:ae:d1:5a:cf:4c: 37:1f:a9:d9:1e:40:75:1e:49:34:41:a3:4c:cf:ac:b8:0c:4b: 44:d0:87:2c:52:6d:a4:27:f2:59:d2:2e:fc:bb:fa:e0:0c:a1: 9e:ec:85:69:f2:e1:0f:7a:f0:f6:49:ad:60:8e:07:13:40:86: 91:93:d9:70:55:56:a9:05:a2:d4:b5:7b:fb:44:82:93:af:ed: ad:34:ac:15:da:b3:7e:07:43:f6:df:f3:53:76:f7:fd:46:5c: 09:6e:37:75:bf:c6:0b:7d:18:8f:7f:cb:b0:78:d9:62:f1:78: 18:02:fe:6d:15:c8:1e:f4:31:55:51:b2:7a:da:b1:5d:32:de: 3c:17:45:08:fc:0e:2c:15:d2:88:1d:34:2a:0d:27:af:41:99: 9f:81:be:31:57:66:87:e7:63:77:fb:b9:e4:aa:25:93:b0:89: e5:fe:64:56:7c:2a:f1:24:b4:70:5b:10:d2:b6:75:0c:7a:26: 1e:d5:f9:20:ed:1e:41:63:ad:5f:c0:e2:fc:68:61:e0:b7:55: b1:40:6a:6f:58:81:4e:6e:13:51:62:fb:c6:3f:39:1d:3a:65: 92:3f:60:e9:02:75:35:ef:05:0c:c7:1d:d5:98:10:0c:f0:15: 6e:fd:6f:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnRmePB8wroYKPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDM3NjAxZGItNTBmNy00YzkyLWEyNzYtOWViMWUwNWUwNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5VJP2UydzOyCGepXNNDsuSXM2QReziNztr DYrhif2+XiKox73tDj5sxX84QRYP3D7wel2aWZTtysXNvDttv3I4sIcdtjb83tKO 4Z5Y/tb6XsJJ9Bgmxo2CXpang6LuIOCwB8263XUq4N1uLtmNV7gLRZWEElLwD099 YyIgcDTDQcYl1M06W1bDWbFPplgTa8XWMV1g+5HZOilh/NZdKdTuMcnYbn95WDxO LnwaLx9G0iXj1OgOiJf1Us/59Ny+eH/Mecor16KRiqL77dV2IEISHU08W4Svawu0 WU5a1MVHlfFnhuVbqDNepJ2K8HAswqbG83eNjJ80ZNDR5LJNKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdX4Kt6351mcLlPpDm13tXmC0luMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvMzYxMmE3ZmItOWYzZC0z NWNiLWEzNDEtYjY0N2E1YmQ3MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT3QLrL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZYGjFXFApgxYKGJBau0VrPTDcfqdkeQHUeSTRBo0zPrLgMS0TQ hyxSbaQn8lnSLvy7+uAMoZ7shWny4Q968PZJrWCOBxNAhpGT2XBVVqkFotS1e/tE gpOv7a00rBXas34HQ/bf81N29/1GXAluN3W/xgt9GI9/y7B42WLxeBgC/m0VyB70 MVVRsnrasV0y3jwXRQj8DiwV0ogdNCoNJ69BmZ+BvjFXZofnY3f7ueSqJZOwieX+ ZFZ8KvEktHBbENK2dQx6Jh7V+SDtHkFjrV/A4vxoYeC3VbFAam9YgU5uE1Fi+8Y/ OR06ZZI/YOkCdTXvBQzHHdWYEAzwFW79bxE= -----END CERTIFICATE-----Generated at Sun Sep 13 11:41:16 2026 by rpki-client