$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa File: 2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa (raw, json) Hash identifier: Hr292Vw2KALCUp5ac9aqwhqW0LIXh/Jr4lDQ4DO7V38= Subject key identifier: A4:72:E7:1B:FA:E0:28:3F:13:69:15:E8:D9:64:FB:6F:0F:E5:C2:57 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584F27F259171E58AA8A33F1BA80 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 22709 IP address blocks: 2631:9000::/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:59:17:1e:58:aa:8a:33:f1:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=310ad7b3-a600-4985-81e8-57608d681c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:fa:0a:56:c5:7e:60:00:f2:9b:a1:da:2a: 01:aa:a4:e7:bc:aa:ca:a7:de:55:21:79:a3:df:8b: 95:99:d4:fd:8f:b8:bc:9b:61:77:f1:09:b6:e8:1a: e1:87:b2:04:ce:5d:32:08:38:1b:d4:4b:39:bc:2f: 4e:dd:2d:5e:ac:78:75:db:97:e7:e9:d2:81:e2:bc: 55:64:5d:6a:fc:81:79:a9:f2:0c:f2:81:e5:cc:e1: b1:d5:5e:e0:3d:c0:f3:8d:89:44:f4:d8:29:c3:d9: b7:9a:a9:e2:26:d2:f0:a7:74:ca:54:34:77:36:13: d8:57:5f:0d:fd:f7:d8:ba:f8:ff:fb:d4:b8:12:fb: 31:ef:95:65:c7:c8:80:1b:a4:67:dd:a6:49:6d:61: ee:45:5e:3e:b5:c6:f7:6f:6e:90:ae:e7:6d:66:f4: 42:16:16:e9:49:9d:a5:be:47:64:b3:b7:13:4a:ef: 22:f2:7e:94:28:18:97:f3:f8:18:1f:93:b5:51:23: f4:48:e5:0d:dd:57:45:63:4a:94:f7:db:50:82:32: 7b:c2:74:3a:8c:4e:c8:d2:b6:18:2a:3a:07:08:72: 35:5d:ac:a5:3c:4c:d7:cc:87:c8:01:2d:dc:3e:6f: 5b:68:60:4e:8f:76:92:84:f6:49:76:42:b1:f3:1d: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:72:E7:1B:FA:E0:28:3F:13:69:15:E8:D9:64:FB:6F:0F:E5:C2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/2f7a117c-9e6e-3017-96fc-6711e6c3c13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv6: 2631:9000::/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4e:3d:32:48:c5:d8:75:50:da:a8:4e:fc:2b:3c:13:30:8e: f9:8b:2d:62:6c:14:3a:7a:fb:dc:08:73:b3:d4:f0:98:ae:8b: 21:37:4d:96:24:12:2c:2c:ec:bf:bd:6e:a8:85:c8:05:b8:9b: 4a:4d:52:42:f8:4c:1c:50:1a:5e:f3:9a:8e:48:04:f3:c6:2e: 36:39:f1:98:1c:c0:08:e2:82:c9:cf:f3:bc:65:65:6c:9d:c5: 25:74:cb:a2:b0:76:80:1e:b3:ec:36:a0:bb:2f:6f:2f:82:df: 1f:59:12:27:85:0b:e7:b4:48:c1:f6:68:73:0e:57:3d:19:2b: cd:f0:ae:70:ff:17:12:a9:9a:c8:21:76:7b:6b:78:38:84:05: a0:f5:0b:e7:50:c7:9e:3b:56:70:d6:86:90:58:92:4f:cb:7b: 55:58:b0:d5:f3:bc:99:fa:78:e6:1e:7a:75:1f:df:1d:21:df: a8:fa:5a:d4:a2:31:60:3d:63:c6:d9:6a:fa:f2:5e:18:45:4a: 1a:dc:60:5d:c7:f2:6c:1d:17:8c:71:f1:42:1b:aa:4e:f9:36: de:9d:28:37:56:b1:81:3d:f1:cc:f8:f4:aa:af:8a:36:6a:1b: 36:d5:13:57:1a:92:48:0e:fb:ae:91:e2:a8:40:00:c0:d9:41: 29:fa:e4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lkXHliqijPxuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MzEwYWQ3YjMtYTYwMC00OTg1LTgxZTgtNTc2MDhkNjgxYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/j6ClbFfmAA8puh2ioBqqTnvKrKp95VIXmj 34uVmdT9j7i8m2F38Qm26Brhh7IEzl0yCDgb1Es5vC9O3S1erHh125fn6dKB4rxV ZF1q/IF5qfIM8oHlzOGx1V7gPcDzjYlE9Ngpw9m3mqniJtLwp3TKVDR3NhPYV18N /ffYuvj/+9S4Evsx75Vlx8iAG6Rn3aZJbWHuRV4+tcb3b26QrudtZvRCFhbpSZ2l vkdks7cTSu8i8n6UKBiX8/gYH5O1USP0SOUN3VdFY0qU99tQgjJ7wnQ6jE7I0rYY KjoHCHI1XaylPEzXzIfIAS3cPm9baGBOj3aShPZJdkKx8x1C/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRy5xv64Cg/E2kV6Nlk+28P5cJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMmY3YTExN2MtOWU2ZS0z MDE3LTk2ZmMtNjcxMWU2YzNjMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAJjGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9OPTJIxdh1UNqoTvwrPBMwjvmLLWJsFDp6+9wIc7PU8JiuiyE3TZYk Eiws7L+9bqiFyAW4m0pNUkL4TBxQGl7zmo5IBPPGLjY58ZgcwAjigsnP87xlZWyd xSV0y6KwdoAes+w2oLsvby+C3x9ZEieFC+e0SMH2aHMOVz0ZK83wrnD/FxKpmsgh dntreDiEBaD1C+dQx547VnDWhpBYkk/Le1VYsNXzvJn6eOYeenUf3x0h36j6WtSi MWA9Y8bZavryXhhFShrcYF3H8mwdF4xx8UIbqk75Nt6dKDdWsYE98cz49KqvijZq GzbVE1cakkgO+66R4qhAAMDZQSn65LA= -----END CERTIFICATE-----Generated at Fri Sep 25 20:25:32 2026 by rpki-client