$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa File: 4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa (raw, json) Hash identifier: sb3w8HbsDSN5OpsRm863SomB8wM2FJTKc9jbmvqI0YI= Subject key identifier: 28:67:74:E7:A3:B3:C7:3C:47:CD:8A:77:B8:D4:DE:71:5D:CA:BB:B2 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F5767F872D066A0535059AD80 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 55039 IP address blocks: 2606:4b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f8:72:d0:66:a0:53:50:59:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=919e9b5f-176c-4a8d-b952-9ee01f802d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:d6:a8:cb:78:41:b1:07:a7:17:24:a8:40: 30:12:ad:6d:a4:84:ce:a7:91:cb:94:5e:45:87:99: 34:77:48:11:ef:7d:40:42:3b:ab:4e:5a:aa:c5:9c: fc:26:04:9b:a9:9d:2b:0f:84:02:70:0f:ba:2f:de: cd:4f:87:e3:c6:09:af:48:ff:f4:be:22:3b:42:bc: 55:62:46:0e:bc:43:a8:c2:be:b6:a1:68:a5:25:ea: a6:fe:3e:bc:41:ac:d4:ab:d0:2f:9a:31:49:65:ac: 9a:b0:f7:d3:16:8a:a9:6c:eb:c5:08:43:ce:f2:a9: 2d:66:1a:05:b7:a1:3e:29:b3:a6:2f:0f:a4:36:86: 18:8f:f8:1b:53:47:c5:48:77:6b:e0:ab:ad:a7:5b: 30:41:d1:b4:46:42:90:5d:22:c7:7c:35:d5:8c:bb: bf:70:ae:74:b6:bb:02:83:da:93:e6:57:9b:cb:d3: 80:48:bb:14:8e:aa:e5:61:f5:a9:83:30:51:1d:05: d8:d7:e7:10:54:f8:43:56:1f:d6:6c:81:c4:5f:40: e1:02:52:9e:bf:52:44:49:9c:b7:7b:4a:50:b4:55: dc:67:19:64:b4:5f:7a:8e:f3:41:94:54:74:5e:7b: 8c:c5:66:4c:49:a1:41:2e:2e:e4:31:de:26:0b:42: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:67:74:E7:A3:B3:C7:3C:47:CD:8A:77:B8:D4:DE:71:5D:CA:BB:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv6: 2606:4b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:20:33:e9:ff:45:a7:8d:50:36:69:00:28:47:57:0b:54: f6:8e:20:f8:82:92:26:1a:f1:ac:de:b1:01:b5:f4:d4:23:04: 0b:bd:72:87:6c:ae:56:12:71:3e:63:df:50:26:e3:4e:2a:93: 4f:0d:5c:d1:e0:41:a6:2d:43:9d:56:ac:5a:35:95:0a:a8:97: b9:a1:b2:53:c2:e6:9c:60:25:40:bc:38:89:1a:f9:cd:b8:4c: 43:2b:15:b9:c2:1e:0f:6b:2e:bc:cf:80:87:e4:7b:4f:72:44: 26:00:43:c3:5d:cc:27:0f:ae:17:3e:43:36:07:d6:73:ab:f7: 84:02:de:9a:0f:77:eb:fa:cc:27:d2:a3:04:52:af:1a:21:81: a0:fc:d9:24:5f:57:dd:71:eb:a6:e9:61:7c:0d:57:97:5e:04: f6:ca:03:89:89:84:93:93:77:76:38:32:ef:4e:24:15:e3:57: 1a:06:d8:ca:1e:c9:7e:f7:f8:45:75:5d:eb:0b:11:4e:23:84: b0:69:ea:0d:f6:0d:af:1c:3d:5d:ab:0a:d9:ce:70:84:22:a3: 4e:65:12:b3:e2:08:d1:c3:ea:89:67:d8:d6:d6:d7:90:f0:9b: ca:72:e0:66:c4:07:6e:b1:90:94:e4:81:fc:af:7f:74:fc:95: f3:25:05:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9XZ/hy0GagU1BZrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OTE5ZTliNWYtMTc2Yy00YThkLWI5NTItOWVlMDFmODAyZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TbWqMt4QbEHpxckqEAwEq1tpITOp5HLlF5F h5k0d0gR731AQjurTlqqxZz8JgSbqZ0rD4QCcA+6L97NT4fjxgmvSP/0viI7QrxV YkYOvEOowr62oWilJeqm/j68QazUq9AvmjFJZayasPfTFoqpbOvFCEPO8qktZhoF t6E+KbOmLw+kNoYYj/gbU0fFSHdr4Kutp1swQdG0RkKQXSLHfDXVjLu/cK50trsC g9qT5leby9OASLsUjqrlYfWpgzBRHQXY1+cQVPhDVh/WbIHEX0DhAlKev1JESZy3 e0pQtFXcZxlktF96jvNBlFR0XnuMxWZMSaFBLi7kMd4mC0J7GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChndOejs8c8R82Kd7jU3nFdyruyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvNGJhNTZjYzEtOWNkNC0z ZjQ3LTk3Y2QtYTBiMTEyMWFjYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZLgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc5CAz6f9Fp41QNmkAKEdXC1T2jiD4gpImGvGs3rEBtfTUIwQLvXKH bK5WEnE+Y99QJuNOKpNPDVzR4EGmLUOdVqxaNZUKqJe5obJTwuacYCVAvDiJGvnN uExDKxW5wh4Pay68z4CH5HtPckQmAEPDXcwnD64XPkM2B9Zzq/eEAt6aD3fr+swn 0qMEUq8aIYGg/NkkX1fdceum6WF8DVeXXgT2ygOJiYSTk3d2ODLvTiQV41caBtjK Hsl+9/hFdV3rCxFOI4SwaeoN9g2vHD1dqwrZznCEIqNOZRKz4gjRw+qJZ9jW1teQ 8JvKcuBmxAdusZCU5IH8r390/JXzJQXH -----END CERTIFICATE-----Generated at Sun Oct 11 11:20:04 2026 by rpki-client