$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: 7wEllgUg4+R62LpHwBNjx5nt1bJdPx/SR6Xyu4U1Dr0= Subject key identifier: 34:30:85:A0:B7:A4:FD:CF:51:31:98:37:54:B4:78:E4:3A:BF:89:70 Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584F6292E0C155A6DA7F38351300 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e0:c1:55:a6:da:7f:38:35:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7f62407b-1814-4a03-94e2-67d2d6146f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:95:67:ec:7f:24:61:4c:e0:51:1d:b4:86: fd:a0:9c:97:e6:e9:15:fc:d1:de:62:be:ed:e3:28: 5f:4b:30:b4:20:3f:ab:8d:43:f4:a4:45:45:c4:3a: 30:4d:3c:88:39:04:b0:f6:75:1f:0a:44:cc:aa:bd: 0f:12:3e:e4:6b:85:b0:39:a3:da:5f:d6:1b:9b:a1: 07:a7:9c:bc:a2:15:06:83:3f:5a:12:60:78:ac:3e: 7a:9a:c8:6d:b2:47:51:11:c2:2e:74:de:d3:f5:07: ab:86:ba:3e:82:e2:5a:8e:87:ee:69:ae:19:4f:70: 98:4a:0c:ab:8b:73:90:29:8d:a1:81:c4:35:3a:1b: 34:fa:71:95:78:07:cd:4d:7c:2d:2b:81:6c:6c:5f: e6:e5:b1:73:ae:d3:47:75:a9:a8:bc:45:45:ca:72: c2:e3:88:78:e0:0d:8c:83:81:dd:52:3b:d3:91:62: 2b:5d:bb:2d:f0:cf:b5:c2:ce:e8:5d:af:b0:c6:20: 09:13:d1:3e:94:e2:8c:c7:98:01:99:cc:2b:b2:c2: e6:f0:55:79:90:6a:ba:b6:d4:19:ec:2e:e9:69:b1: d9:2d:c6:26:71:ad:8f:bf:85:e2:1d:4e:98:28:64: 20:f0:a3:41:ff:de:a4:1d:b7:b1:9b:de:a4:ee:b2: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:30:85:A0:B7:A4:FD:CF:51:31:98:37:54:B4:78:E4:3A:BF:89:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:72:31:e1:41:47:f6:98:1b:0b:00:d0:b6:cc:8d:16:51:c9: ca:ba:a9:89:d4:b0:48:9e:5f:f0:ca:65:ef:ca:8c:f3:43:c4: 92:82:0e:2c:f4:af:83:58:54:62:0a:06:d6:0f:25:96:e5:ca: c8:49:ff:af:a2:fd:ae:72:d0:1f:bd:c3:4c:a4:0d:df:1e:ec: 6d:d2:c6:52:d0:b0:e3:ec:a3:51:51:c4:31:57:f8:37:d0:07: 15:e4:02:e0:aa:eb:bc:4d:6b:c4:64:0b:ca:49:c1:5e:c1:85: 58:a0:4b:14:3a:5b:1b:3b:a5:9f:9b:7b:e7:51:64:07:29:44: 09:bc:bb:c1:f2:59:95:dc:f2:d6:0c:15:d8:94:1e:59:57:09: 18:1b:d4:0a:62:cc:7a:57:8d:e3:75:65:c7:a6:6d:d9:c8:c8: bd:1b:6d:20:aa:b0:7d:39:b2:6a:e0:07:66:6c:60:1e:53:6e: 53:45:3b:1c:93:c7:91:a0:6f:89:53:a8:95:d9:49:5b:03:6f: 8e:40:82:26:a5:cf:05:f1:31:34:71:9e:85:8f:52:3e:b8:5c: da:ea:b3:5e:8d:59:87:79:d3:19:f3:75:56:53:89:ec:07:8b: 90:a1:92:ed:2b:d3:3e:b1:56:ae:a2:b1:93:46:af:59:6c:bc: 4c:22:e7:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikuDBVabafzg1EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2Y2MjQwN2ItMTgxNC00YTAzLTk0ZTItNjdkMmQ2MTQ2ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiyVZ+x/JGFM4FEdtIb9oJyX5ukV/NHeYr7t 4yhfSzC0ID+rjUP0pEVFxDowTTyIOQSw9nUfCkTMqr0PEj7ka4WwOaPaX9Ybm6EH p5y8ohUGgz9aEmB4rD56mshtskdREcIudN7T9Qerhro+guJajofuaa4ZT3CYSgyr i3OQKY2hgcQ1Ohs0+nGVeAfNTXwtK4FsbF/m5bFzrtNHdamovEVFynLC44h44A2M g4HdUjvTkWIrXbst8M+1ws7oXa+wxiAJE9E+lOKMx5gBmcwrssLm8FV5kGq6ttQZ 7C7pabHZLcYmca2Pv4XiHU6YKGQg8KNB/96kHbexm96k7rJvFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDQwhaC3pP3PUTGYN1S0eOQ6v4lwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/cjHhQUf2mBsLANC2zI0WUcnKuqmJ1LBInl/wymXvyozzQ8SSgg4s 9K+DWFRiCgbWDyWW5crISf+vov2uctAfvcNMpA3fHuxt0sZS0LDj7KNRUcQxV/g3 0AcV5ALgquu8TWvEZAvKScFewYVYoEsUOlsbO6Wfm3vnUWQHKUQJvLvB8lmV3PLW DBXYlB5ZVwkYG9QKYsx6V43jdWXHpm3ZyMi9G20gqrB9ObJq4AdmbGAeU25TRTsc k8eRoG+JU6iV2UlbA2+OQIImpc8F8TE0cZ6Fj1I+uFza6rNejVmHedMZ83VWU4ns B4uQoZLtK9M+sVauorGTRq9ZbLxMIud5 -----END CERTIFICATE-----Generated at Sun Oct 11 06:56:41 2026 by rpki-client