$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa File: 3c43b276-fc41-37ea-b4d5-c88fba282149.roa (raw, json) Hash identifier: AHn2KfN/qY33cBkf2C0Gp10KnIE9Pns8p+w6LWhD9V0= Subject key identifier: AE:F7:CC:69:3B:B3:F4:A9:5C:DF:C2:9F:CE:F1:43:23:F9:19:86:39 Certificate issuer: /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Certificate serial: 010D0C9F4328584EC20C71740288A22DC83EA700 Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 40706 IP address blocks: 2620:57:a000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:71:74:02:88:a2:2d:c8:3e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=ad373956-9623-4b4a-baa5-a31ea5daf382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:6e:c7:f5:db:66:1a:ad:a0:f2:a1:58:26: 7b:77:ac:6d:db:5d:e2:45:ef:2f:7d:cd:88:c4:e4: d3:72:cc:e8:04:3e:55:a8:e2:d1:60:95:8a:d3:8d: d1:65:9f:8a:78:d0:e7:5d:6f:6a:00:69:34:2b:b4: 3e:aa:31:46:0c:4a:d8:73:aa:2d:8b:a7:84:97:64: ae:23:07:da:03:ff:e8:c4:da:23:ae:02:9d:99:d1: 51:9b:ea:61:2b:21:0e:06:b3:1b:ca:04:ce:10:ed: 36:f6:90:96:75:2b:b8:d7:bd:86:09:d3:d7:b0:54: 7e:5c:4d:cd:33:a6:8c:03:09:ff:f5:6b:19:39:59: 26:92:45:5b:b6:cc:cf:37:3a:ac:e9:8f:39:70:91: 75:91:32:49:15:cd:92:93:0f:ae:ea:c9:5b:46:4b: f7:31:15:3c:18:88:9e:ff:b4:3c:c0:9c:4d:2d:d9: d4:e3:c9:81:5f:e8:b5:9f:c6:0b:3c:10:1c:b0:fa: 47:86:07:1c:a6:f1:44:6e:13:28:80:89:fc:03:16: b4:64:c5:e5:98:2a:32:ae:ed:23:f2:bf:30:48:07: 92:e6:49:56:14:9c:5d:87:1e:dd:f9:c7:80:ec:9a: 7b:3c:8f:74:39:cd:eb:4b:db:a8:71:26:61:04:43: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:CC:69:3B:B3:F4:A9:5C:DF:C2:9F:CE:F1:43:23:F9:19:86:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl X509v3 Authority Key Identifier: keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer sbgp-ipAddrBlock: critical IPv6: 2620:57:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:b3:74:6b:ef:71:1f:ea:4d:93:95:fb:e9:55:ed:5b:c2: 1f:f0:21:b4:47:bb:41:e9:e7:00:c2:c1:d1:c3:86:42:6a:85: f2:97:a7:83:0d:51:ef:ff:d5:33:1a:b3:d8:99:1e:80:ab:07: 06:32:f5:06:d6:35:49:8c:6e:c2:06:ab:5a:b4:1a:8c:99:9b: 9e:d5:a3:7a:21:01:85:66:f3:d2:40:02:96:09:a6:01:34:ab: 3f:21:de:74:b4:04:09:d3:da:5d:8e:67:1a:3e:9a:a3:9d:c5: 95:44:50:08:25:bf:bf:2f:be:6d:79:03:f5:75:db:ce:b4:b6: 84:41:6b:d9:d4:34:6a:d5:94:86:c0:e2:6a:a8:80:3c:2c:a9: 06:19:3f:e5:c8:0d:3b:9f:c2:ca:7a:43:68:70:cf:87:86:8e: 67:e4:ad:6a:a1:bf:1c:7a:e2:f8:61:34:58:de:4a:e7:e4:45: ec:a2:d1:50:38:79:17:29:02:04:ca:74:61:62:97:04:57:d0: 72:38:ad:2e:14:48:27:77:f6:03:76:00:d3:c8:02:6f:65:7d: ca:bd:ef:07:76:18:a0:62:90:36:28:53:c3:c0:b9:07:be:78: 40:c8:71:16:2a:07:49:ba:1c:ba:98:d3:50:8d:e4:90:23:15: d2:c2:57:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7CDHF0AoiiLcg+pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmYzFkNTItYzAwOC00ZmRjLWFjZDEtNzNhYjZjNzFi MTUzMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YWQzNzM5NTYtOTYyMy00YjRhLWJhYTUtYTMxZWE1ZGFmMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLhux/XbZhqtoPKhWCZ7d6xt213iRe8vfc2I xOTTcszoBD5VqOLRYJWK043RZZ+KeNDnXW9qAGk0K7Q+qjFGDErYc6oti6eEl2Su IwfaA//oxNojrgKdmdFRm+phKyEOBrMbygTOEO029pCWdSu4172GCdPXsFR+XE3N M6aMAwn/9WsZOVkmkkVbtszPNzqs6Y85cJF1kTJJFc2Skw+u6slbRkv3MRU8GIie /7Q8wJxNLdnU48mBX+i1n8YLPBAcsPpHhgccpvFEbhMogIn8Axa0ZMXlmCoyru0j 8r8wSAeS5klWFJxdhx7d+ceA7Jp7PI90Oc3rS9uocSZhBEPEnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK73zGk7s/SpXN/Cn87xQyP5GYY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZj MWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2FiNmM3MWIxNTMvM2M0M2IyNzYtZmM0MS0z N2VhLWI0ZDUtYzg4ZmJhMjgyMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzlmYzFkNTItYzAwOC00ZmRjLWFj ZDEtNzNhYjZjNzFiMTUzL2M5ZmMxZDUyLWMwMDgtNGZkYy1hY2QxLTczYWI2Yzcx YjE1My5jcmwwHwYDVR0jBBgwFoAUzxswEXB1OE9yPumwzQkqt1oIxu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZjMWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2Fi NmM3MWIxNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAV6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZms3Rr73Ef6k2TlfvpVe1bwh/wIbRHu0Hp5wDCwdHDhkJqhfKX p4MNUe//1TMas9iZHoCrBwYy9QbWNUmMbsIGq1q0GoyZm57Vo3ohAYVm89JAApYJ pgE0qz8h3nS0BAnT2l2OZxo+mqOdxZVEUAglv78vvm15A/V12860toRBa9nUNGrV lIbA4mqogDwsqQYZP+XIDTufwsp6Q2hwz4eGjmfkrWqhvxx64vhhNFjeSufkReyi 0VA4eRcpAgTKdGFilwRX0HI4rS4USCd39gN2ANPIAm9lfcq97wd2GKBikDYoU8PA uQe+eEDIcRYqB0m6HLqY01CN5JAjFdLCV0Q= -----END CERTIFICATE-----Generated at Wed Sep 9 00:12:44 2026 by rpki-client