$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa File: 9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa (raw, json) Hash identifier: 57I6HeN7cKkSzYLPm5eBLMRsKXKAD5nV0MzVAFdI+NY= Subject key identifier: 91:4D:D9:C2:63:F7:7A:6C:6F:1D:9D:BC:57:5E:23:F9:61:8B:F0:34 Certificate issuer: /CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Certificate serial: 010D0C9F4328584F5E62D0061C14D03578E66F00 Authority key identifier: 45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 40591 IP address blocks: 2620:0:d90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d0:06:1c:14:d0:35:78:e6:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=9f3a04f3-7541-4baf-9cef-787a6aad057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:43:43:dd:43:c3:a4:cc:de:c9:4b:db:c9: ac:40:5f:59:c7:bf:e1:2e:ec:76:a2:41:4e:a4:81: f7:b7:f0:55:32:8c:f6:a3:6c:75:62:9c:dd:1e:1c: 4c:ee:e4:d5:22:1b:9d:f6:a0:b2:fc:56:17:1a:12: 3f:f5:b1:18:5f:59:72:5b:00:81:ba:6a:c1:dd:02: 87:e1:ef:c8:02:0d:48:60:87:b7:b7:56:7a:d4:20: 3e:65:3b:5b:3f:e1:cc:7b:5c:6c:d4:ca:5b:ea:50: 78:d5:73:1f:54:c5:92:90:c4:9a:a8:5a:d4:61:04: 47:02:26:4b:0f:72:b0:04:64:69:e0:47:a6:f6:b9: 02:ea:02:5e:68:46:64:aa:dc:33:98:aa:7d:2b:32: 59:b8:58:58:b0:cc:e7:3b:3a:f6:8d:ef:c3:8c:7b: 55:bd:a5:e1:3d:58:4b:01:c4:5f:f7:22:22:ad:30: da:6f:bb:82:22:31:8e:a7:ed:19:d2:80:6b:40:e7: 0f:d1:43:f8:a6:ef:ea:14:da:f5:c7:a2:36:14:7e: ed:5b:17:5d:3d:7d:e8:22:d4:1c:f2:b1:5c:51:68: 6f:5f:a0:1b:cb:70:d4:dc:20:4e:f0:5e:76:8e:32: b4:0b:b1:35:85:48:e1:8d:6a:89:88:60:fd:44:23: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4D:D9:C2:63:F7:7A:6C:6F:1D:9D:BC:57:5E:23:F9:61:8B:F0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl X509v3 Authority Key Identifier: keyid:45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:d90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6c:64:2e:c7:72:89:81:36:30:8f:17:c8:e5:7e:2f:be:d6: e4:c3:57:5a:e5:d5:e8:29:e1:18:f4:c8:a7:27:f3:09:99:3c: e0:b2:b5:30:03:ab:f7:5f:d8:80:60:03:a3:33:7b:ef:08:31: 91:1c:5a:64:e8:f8:e1:9b:36:79:bb:6e:84:08:82:39:aa:f6: 27:0b:ac:c8:f3:25:bd:8c:f1:a8:83:43:d9:41:16:1c:07:26: 3f:dd:32:2c:d3:ae:b9:d5:5f:01:40:1a:20:3c:56:9c:cf:26: 54:ee:b3:7e:30:5c:3a:99:90:9f:b4:87:43:e6:25:f1:31:f9: 7d:70:8e:5c:fa:a5:a3:02:54:85:c4:1f:4d:ff:ac:a2:43:0b: 31:33:86:74:90:13:54:80:2b:cc:c1:ff:08:d7:50:c1:99:80: a8:29:81:66:5e:86:e0:36:da:6e:81:55:6e:01:00:1b:e6:fe: e4:7a:66:a6:17:54:0a:19:6d:64:ef:f6:8f:cd:f1:00:2d:59: 54:69:41:b1:e8:75:fb:2c:a1:5e:ee:32:88:3c:4f:a5:5c:41: 82:10:c2:57:75:fc:f6:10:b7:32:1f:09:6a:bd:a6:89:b5:94: e2:e7:17:86:98:34:5e:c8:58:e3:dd:85:9f:60:fb:6b:93:41: 3b:a9:2b:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYtAGHBTQNXjmbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkNGYxN2ItM2Q4Yy00YmNkLWE0NTQtOTY0N2U2NjNj MDkzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OWYzYTA0ZjMtNzU0MS00YmFmLTljZWYtNzg3YTZhYWQwNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxDQ91Dw6TM3slL28msQF9Zx7/hLux2okFO pIH3t/BVMoz2o2x1YpzdHhxM7uTVIhud9qCy/FYXGhI/9bEYX1lyWwCBumrB3QKH 4e/IAg1IYIe3t1Z61CA+ZTtbP+HMe1xs1Mpb6lB41XMfVMWSkMSaqFrUYQRHAiZL D3KwBGRp4Eem9rkC6gJeaEZkqtwzmKp9KzJZuFhYsMznOzr2je/DjHtVvaXhPVhL AcRf9yIirTDab7uCIjGOp+0Z0oBrQOcP0UP4pu/qFNr1x6I2FH7tWxddPX3oItQc 8rFcUWhvX6Aby3DU3CBO8F52jjK0C7E1hUjhjWqJiGD9RCOv/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFN2cJj93psbx2dvFdeI/lhi/A0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0 ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3ZTY2M2MwOTMvOWFmZDFiOWEtZjI4OC0z N2MxLWE5YTktNjYzMTQ4MWQ5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWJkNGYxN2ItM2Q4Yy00YmNkLWE0 NTQtOTY0N2U2NjNjMDkzLzliZDRmMTdiLTNkOGMtNGJjZC1hNDU0LTk2NDdlNjYz YzA5My5jcmwwHwYDVR0jBBgwFoAURcFKwzOsmOe+7hpj4X3o9O5uT/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3 ZTY2M2MwOTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA2Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFsZC7HcomBNjCPF8jlfi++1uTDV1rl1egp4Rj0yKcn8wmZPOCy tTADq/df2IBgA6Mze+8IMZEcWmTo+OGbNnm7boQIgjmq9icLrMjzJb2M8aiDQ9lB FhwHJj/dMizTrrnVXwFAGiA8VpzPJlTus34wXDqZkJ+0h0PmJfEx+X1wjlz6paMC VIXEH03/rKJDCzEzhnSQE1SAK8zB/wjXUMGZgKgpgWZehuA22m6BVW4BABvm/uR6 ZqYXVAoZbWTv9o/N8QAtWVRpQbHodfssoV7uMog8T6VcQYIQwld1/PYQtzIfCWq9 pom1lOLnF4aYNF7IWOPdhZ9g+2uTQTupKxo= -----END CERTIFICATE-----Generated at Sun Oct 11 07:51:57 2026 by rpki-client