$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a11d6e5-b97e-341a-88c7-4b8b56282ea0.roa File: 3a11d6e5-b97e-341a-88c7-4b8b56282ea0.roa (raw, json) Hash identifier: ovtQrA3K9K88fX6oQCV8QsSNzoAzHaz1wQ607YOBK3g= Subject key identifier: D5:C7:36:E0:FA:DC:6E:E9:27:2A:97:03:7F:62:75:F0:F0:9C:A4:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498794CD385E8D6D2290B700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a11d6e5-b97e-341a-88c7-4b8b56282ea0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2600:1904:4000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:94:cd:38:5e:8d:6d:22:90:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c851951-f661-43fb-8431-5a0e9981d59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:e4:db:1f:c6:25:97:ad:85:b0:7e:e5:69: 0f:8f:17:e4:31:86:96:2d:a8:93:96:51:14:28:1d: 1e:21:45:39:29:9f:ff:e9:b9:fb:9b:15:08:76:32: f6:d1:03:21:39:a6:41:fe:9b:12:fc:8c:81:79:9f: 37:1b:cd:fb:d4:72:9e:51:9c:88:e5:55:33:a5:28: f2:e5:ec:2b:56:5b:2a:1f:f9:23:0b:02:a9:98:bf: 73:7c:1d:79:48:68:4c:0a:2b:4b:7d:95:d3:58:28: 2a:35:98:e6:28:3e:c8:8b:d8:38:43:85:c9:e2:6d: 70:06:9d:66:21:95:86:2b:c0:04:5a:77:31:17:9a: 05:b5:fc:87:a7:78:0b:82:50:57:67:cc:dc:98:d9: 55:c4:49:4f:8f:06:24:08:cb:81:d7:5b:f3:05:a7: fd:32:55:93:52:ff:27:55:78:8e:79:06:e4:0a:7e: e6:87:86:68:0f:c7:1c:9c:57:f5:90:6a:d7:cf:01: ea:db:81:c0:49:66:3c:c0:9e:59:4c:9f:a0:4a:90: 0f:6e:81:86:c2:ab:0a:44:75:aa:cb:43:54:39:7b: 7d:34:ac:56:b5:4e:db:d6:1f:52:1e:43:2f:9c:55: 1a:59:1c:6b:f0:72:65:20:92:46:67:69:2f:c1:89: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:36:E0:FA:DC:6E:E9:27:2A:97:03:7F:62:75:F0:F0:9C:A4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a11d6e5-b97e-341a-88c7-4b8b56282ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1904:4000::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:aa:a2:d0:6a:12:df:44:68:de:fc:0b:ec:c4:06:7a:80:4b: f8:bb:81:5d:88:5f:c9:7d:e5:c1:dc:25:06:4b:e9:f4:be:95: f9:57:50:97:7d:2b:69:80:fd:1d:3f:14:5e:bc:e1:2e:e5:2c: 90:13:19:08:24:aa:9f:88:6e:86:68:79:e4:2a:40:29:fd:bc: f1:00:a7:02:5e:5d:6c:2b:5b:75:a0:14:b6:d2:e1:e9:8a:3c: df:48:62:f1:fe:68:67:71:a7:de:22:59:c8:04:32:e4:52:5a: e3:22:97:b7:10:9f:66:b6:27:60:0f:ec:62:62:17:83:8c:d1: 77:5f:ca:29:f1:4a:90:74:83:14:e1:89:c4:26:86:67:4f:62: e4:a2:2a:de:f2:c3:b7:39:cc:4a:d2:56:0e:a5:16:03:af:4f: d5:98:45:42:9a:49:45:ca:7f:18:36:b6:82:88:76:5d:83:08: 20:30:fc:77:08:d7:ea:11:e5:49:81:b7:be:8b:ef:03:b8:cf: d4:b7:5b:07:52:40:e4:38:e3:de:62:78:a0:04:77:ad:e8:7b: 4f:79:70:c8:be:2a:39:f9:1d:d9:6b:34:00:63:89:c9:9f:aa: 3c:53:4a:64:c0:e6:85:3a:ce:88:4b:ac:48:a0:7f:e0:bc:79: eb:02:7f:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh5TNOF6NbSKQtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM4NTE5NTEtZjY2MS00M2ZiLTg0MzEtNWEwZTk5ODFkNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF7k2x/GJZethbB+5WkPjxfkMYaWLaiTllEU KB0eIUU5KZ//6bn7mxUIdjL20QMhOaZB/psS/IyBeZ83G8371HKeUZyI5VUzpSjy 5ewrVlsqH/kjCwKpmL9zfB15SGhMCitLfZXTWCgqNZjmKD7Ii9g4Q4XJ4m1wBp1m IZWGK8AEWncxF5oFtfyHp3gLglBXZ8zcmNlVxElPjwYkCMuB11vzBaf9MlWTUv8n VXiOeQbkCn7mh4ZoD8ccnFf1kGrXzwHq24HASWY8wJ5ZTJ+gSpAPboGGwqsKRHWq y0NUOXt9NKxWtU7b1h9SHkMvnFUaWRxr8HJlIJJGZ2kvwYl6gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXHNuD63G7pJyqXA39idfDwnKTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ExMWQ2ZTUtYjk3ZS0z NDFhLTg4YzctNGI4YjU2MjgyZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgAZBEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqqotBqEt9EaN78C+zEBnqAS/i7gV2IX8l95cHcJQZL6fS+lflX UJd9K2mA/R0/FF684S7lLJATGQgkqp+IboZoeeQqQCn9vPEApwJeXWwrW3WgFLbS 4emKPN9IYvH+aGdxp94iWcgEMuRSWuMil7cQn2a2J2AP7GJiF4OM0XdfyinxSpB0 gxThicQmhmdPYuSiKt7yw7c5zErSVg6lFgOvT9WYRUKaSUXKfxg2toKIdl2DCCAw /HcI1+oR5UmBt76L7wO4z9S3WwdSQOQ4495ieKAEd63oe095cMi+Kjn5HdlrNABj icmfqjxTSmTA5oU6zohLrEigf+C8eesCf8I= -----END CERTIFICATE-----Generated at Mon Sep 28 12:49:23 2026 by rpki-client