$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa File: 2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa (raw, json) Hash identifier: GKZy1/Ox9JLD7F3Ic2MGwlsANwJe6jC0SI+Yyn6i4RY= Subject key identifier: FE:37:81:3A:CA:06:30:6A:DE:73:61:30:11:91:90:DC:64:23:5A:0E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FCF8938AE35CD2B10AC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 2001:56b::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fc:f8:93:8a:e3:5c:d2:b1:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a763b20-580c-49ce-ae9d-9431874bb6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:25:b4:b1:7a:51:f3:27:99:cd:e0:82:f4: ce:da:d0:85:da:48:ee:2a:38:ba:09:f9:2e:11:f8: 70:59:8d:52:18:1a:e5:c1:f6:9e:b6:67:16:8a:9d: 74:be:ac:9a:da:b8:bb:8e:e6:25:26:53:3b:26:9d: 05:7f:c3:5e:f6:8f:0f:22:63:6d:5a:17:f9:0c:42: 99:c1:4f:0b:ba:93:1e:b1:6b:83:0a:e3:e4:93:cc: 86:7f:ad:8b:f9:bc:a7:00:e3:1e:dd:eb:ed:fa:2b: 10:db:3c:d4:11:1a:a6:a1:b1:8e:f9:93:88:4d:35: ab:70:a9:59:52:e2:00:e7:58:d5:d4:0c:c4:0e:41: 7d:4e:8c:ae:99:7b:06:e9:7f:66:83:53:02:d6:be: 70:f2:fa:df:2f:6c:7d:82:5b:8e:81:41:43:c3:e8: 5a:c9:d8:b9:29:4e:35:75:bf:aa:65:b4:ae:a7:11: 00:f1:f7:a3:35:58:24:52:9f:7d:64:0f:ef:59:dc: 73:7d:bc:22:e7:a6:a7:a0:27:90:51:10:44:b1:e6: a0:5a:bc:9e:66:f9:17:79:32:d6:cb:19:3d:34:25: 27:6d:67:8f:4f:aa:d6:ae:09:a0:f2:52:fb:04:9a: 38:05:01:64:d6:fa:d0:03:46:a8:bf:4b:cc:c4:ba: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:81:3A:CA:06:30:6A:DE:73:61:30:11:91:90:DC:64:23:5A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:05:66:15:b7:16:b8:da:1d:55:8b:2d:40:c0:cb:1e:da:83: 6d:2f:88:0a:40:57:43:83:26:46:6f:4a:d1:99:f7:b9:2f:31: fb:d7:dc:46:c8:56:94:55:c1:c3:e6:2c:e2:4e:4a:03:d0:6b: 59:3d:f4:8f:10:95:4f:1e:d1:51:b3:79:71:9a:13:f1:d5:8f: 95:d1:34:eb:07:ad:9c:09:0a:45:0e:ac:cc:f5:92:3c:c6:1f: 18:42:74:81:17:e5:55:d9:31:3b:95:f8:fa:6f:29:da:3c:8c: 67:81:1f:48:19:84:26:6b:ba:8e:22:86:f8:b0:87:5b:58:15: a4:e0:bf:d9:94:ea:18:2d:55:f9:30:37:8c:70:a5:7f:10:95: ed:dc:bc:fb:f0:ca:70:39:f5:26:1f:c5:e0:99:07:31:d4:bd: f3:65:00:ae:93:a6:c4:82:d5:16:8d:0c:5d:b3:d7:8d:33:92: ad:52:e5:77:2c:45:33:4e:9a:11:d3:75:82:b1:7d:d8:f2:c0: d5:ed:78:57:62:2c:b9:85:4e:f6:7d:a4:27:b6:6a:6b:b0:b8: 21:54:d7:b3:a2:12:fc:71:97:7a:ea:8c:d7:25:0d:64:5d:2e: 2c:8c:b0:16:31:a0:02:24:37:76:fb:03:e0:16:c5:62:4d:21: ae:09:20:12 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc/z4k4rjXNKxCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWE3NjNiMjAtNTgwYy00OWNlLWFlOWQtOTQzMTg3NGJiNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuggltLF6UfMnmc3ggvTO2tCF2kjuKji6Cfku EfhwWY1SGBrlwfaetmcWip10vqya2ri7juYlJlM7Jp0Ff8Ne9o8PImNtWhf5DEKZ wU8LupMesWuDCuPkk8yGf62L+bynAOMe3evt+isQ2zzUERqmobGO+ZOITTWrcKlZ UuIA51jV1AzEDkF9ToyumXsG6X9mg1MC1r5w8vrfL2x9gluOgUFDw+haydi5KU41 db+qZbSupxEA8fejNVgkUp99ZA/vWdxzfbwi56anoCeQURBEseagWryeZvkXeTLW yxk9NCUnbWePT6rWrgmg8lL7BJo4BQFk1vrQA0aov0vMxLpKYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP43gTrKBjBq3nNhMBGRkNxkI1oOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZhYzJiMTEtZWFlNi0z NTJmLWI1ZjAtNDRlMWFmNWY5NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFawAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEgVmFbcWuNodVYstQMDLHtqDbS+ICkBXQ4MmRm9K0Zn3uS8x+9fc RshWlFXBw+Ys4k5KA9BrWT30jxCVTx7RUbN5cZoT8dWPldE06wetnAkKRQ6szPWS PMYfGEJ0gRflVdkxO5X4+m8p2jyMZ4EfSBmEJmu6jiKG+LCHW1gVpOC/2ZTqGC1V +TA3jHClfxCV7dy8+/DKcDn1Jh/F4JkHMdS982UArpOmxILVFo0MXbPXjTOSrVLl dyxFM06aEdN1grF92PLA1e14V2IsuYVO9n2kJ7Zqa7C4IVTXs6IS/HGXeuqM1yUN ZF0uLIywFjGgAiQ3dvsD4BbFYk0hrgkgEg== -----END CERTIFICATE-----Generated at Mon Nov 2 12:54:41 2026 by rpki-client