$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa File: 7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json) Hash identifier: btnppAuswr0YHSEHF91aUVUS+GydGf92KaXbIemdxp8= Subject key identifier: FE:9C:D6:90:8D:37:99:EE:61:1F:46:6B:56:CA:2A:61:91:88:EB:9D Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584F612D69004CB6AC19658BDC80 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 401523 IP address blocks: 2620:d0:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:69:00:4c:b6:ac:19:65:8b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=8a5a0fe1-4f79-4273-b157-86e6d7ff2491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:47:0d:a4:92:10:98:d6:a0:b9:30:a1:9e: e8:49:4e:f2:3f:1a:ef:e6:fc:98:a0:43:b1:8a:fc: 6a:16:f5:1c:dc:f8:f3:00:2d:6f:05:ed:54:88:17: 43:4d:46:f7:ed:04:fc:d2:3e:18:02:97:a3:2f:c9: ec:c5:89:b6:43:3a:75:9c:ab:d5:a5:b3:9c:4d:bf: ed:01:b4:f3:fe:e7:fc:5e:fd:91:28:38:1d:42:25: ae:1f:0f:8e:c1:6c:90:e7:95:0d:71:be:14:5e:0c: 3f:6b:63:8f:55:75:1a:03:a4:b3:2d:cf:e8:38:45: d5:ba:1b:d1:1c:af:07:75:92:d3:6b:5d:16:36:a3: d8:12:ac:20:f9:55:2f:ee:ca:de:ef:db:ab:45:60: fd:77:b0:e6:fa:a5:58:90:51:6a:cd:44:a0:21:d8: b3:87:d7:d3:bc:00:f3:c8:c5:f8:e3:e0:ea:9f:38: f7:99:39:f5:a9:78:74:40:c1:58:bc:e7:f9:32:29: 9d:c8:bf:72:23:5b:55:8f:25:2c:e9:ce:5d:3e:5a: b3:fd:34:00:22:90:96:d4:f3:e5:63:7f:fa:55:dd: 2e:11:2b:2f:07:9b:2d:86:5b:0f:92:85:e6:4c:d4: 81:4d:cc:a6:4e:94:42:f7:28:f1:3e:bc:65:68:57: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9C:D6:90:8D:37:99:EE:61:1F:46:6B:56:CA:2A:61:91:88:EB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv6: 2620:d0:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:23:18:f7:0c:c8:e3:5c:03:0a:56:dc:1b:6a:ab:11:69:f3: 36:16:56:6d:10:7a:c2:7f:94:6a:57:51:ab:3b:cd:cd:a5:4e: 29:92:b3:0b:c5:bd:87:ec:d9:d6:15:4e:f2:95:16:d3:e7:6a: b6:cf:15:cd:67:b5:ac:c0:c4:2e:f7:26:a8:0a:da:1c:97:4e: e2:a6:21:65:23:51:f5:ea:72:d5:97:f0:a4:3c:13:0c:3f:50: e3:0a:cf:cd:a7:e5:f4:21:3f:79:97:53:02:0c:da:bc:45:44: 52:82:f6:46:6b:6c:3e:8b:c7:cd:e4:d3:6c:f0:0f:63:29:96: e5:fd:f0:50:0d:13:05:4a:66:ef:38:31:d9:fa:3c:bc:48:a4: c0:65:cd:10:48:65:68:fa:f3:a9:22:12:ef:bb:1a:20:f6:98: 93:75:05:cf:6c:9f:78:c9:6f:41:cc:50:1a:04:20:e3:a8:ff: 3c:d9:ee:09:bf:9f:87:c4:50:2c:a5:ca:00:81:3a:ce:e4:41: af:fa:38:67:97:52:e4:e6:80:c0:16:5e:b9:f8:cc:cd:8d:19: 79:4d:8a:02:0f:4d:fe:4e:7a:8b:e9:cd:e6:c1:76:de:a1:54: b4:0e:27:55:54:77:d7:82:6e:6e:37:7a:29:0d:41:e8:2c:aa: c1:6b:0e:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLWkATLasGWWL3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk OGE1YTBmZTEtNGY3OS00MjczLWIxNTctODZlNmQ3ZmYyNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXVHDaSSEJjWoLkwoZ7oSU7yPxrv5vyYoEOx ivxqFvUc3PjzAC1vBe1UiBdDTUb37QT80j4YApejL8nsxYm2Qzp1nKvVpbOcTb/t AbTz/uf8Xv2RKDgdQiWuHw+OwWyQ55UNcb4UXgw/a2OPVXUaA6SzLc/oOEXVuhvR HK8HdZLTa10WNqPYEqwg+VUv7sre79urRWD9d7Dm+qVYkFFqzUSgIdizh9fTvADz yMX44+Dqnzj3mTn1qXh0QMFYvOf5MimdyL9yI1tVjyUs6c5dPlqz/TQAIpCW1PPl Y3/6Vd0uESsvB5sthlsPkoXmTNSBTcymTpRC9yjxPrxlaFcbnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6c1pCNN5nuYR9Ga1bKKmGRiOudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvN2QzOGZhNzMtYWQwNS0z OWI0LThlZTgtODNhODNiMmE5OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0OAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMUjGPcMyONcAwpW3BtqqxFp8zYWVm0QesJ/lGpXUas7zc2lTimS swvFvYfs2dYVTvKVFtPnarbPFc1ntazAxC73JqgK2hyXTuKmIWUjUfXqctWX8KQ8 Eww/UOMKz82n5fQhP3mXUwIM2rxFRFKC9kZrbD6Lx83k02zwD2MpluX98FANEwVK Zu84Mdn6PLxIpMBlzRBIZWj686kiEu+7GiD2mJN1Bc9sn3jJb0HMUBoEIOOo/zzZ 7gm/n4fEUCylygCBOs7kQa/6OGeXUuTmgMAWXrn4zM2NGXlNigIPTf5OeovpzebB dt6hVLQOJ1VUd9eCbm43eikNQegsqsFrDo0= -----END CERTIFICATE-----Generated at Sun Oct 11 11:18:13 2026 by rpki-client