$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/ccdfa3ab-bee3-33b5-90f6-2a7f8517db77.roa File: ccdfa3ab-bee3-33b5-90f6-2a7f8517db77.roa (raw, json) Hash identifier: E8O2jRZFnOcmbB+P+jrq0ZmI1BTYi0D4ii8tGcdRTNs= Subject key identifier: 68:72:49:5D:6D:95:48:04:A7:2B:84:46:B3:FD:D5:8D:97:B6:73:5B Certificate issuer: /CN=919a4b9c-70ba-44da-8f00-056b3a87c761 Certificate serial: 010D0C9F4328584F452089281890E76DBCC52FE4 Authority key identifier: 91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/ccdfa3ab-bee3-33b5-90f6-2a7f8517db77.roa Signing time: Wed 23 Sep 2026 11:51:47 +0000 ROA not before: Wed 23 Sep 2026 11:51:47 +0000 ROA not after: Tue 22 Dec 2026 12:51:47 +0000 asID: 30150 IP address blocks: 2620:1b:6001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:20:89:28:18:90:e7:6d:bc:c5:2f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919a4b9c-70ba-44da-8f00-056b3a87c761 Validity Not Before: Sep 23 11:51:47 2026 GMT Not After : Dec 22 12:51:47 2026 GMT Subject: CN=2683edc8-2d54-4dfc-8417-563e6bbf3563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:96:20:d1:c2:06:2b:d2:a8:8c:bd:b0:ae: f2:cd:ad:35:00:4f:9d:3f:40:eb:70:4f:60:52:1b: 48:95:22:5b:40:ea:45:35:d2:d2:72:78:2b:c9:cc: 1d:25:dc:b0:89:b9:19:c2:4a:60:6d:96:03:ed:81: 05:82:8e:73:28:d7:d2:fb:cd:91:04:90:1b:e4:b5: df:31:d5:f2:5a:74:f0:9b:8b:fb:68:39:f2:04:6b: 7f:be:ab:a3:47:aa:5d:04:c8:d2:0a:fb:44:f6:8e: 81:e4:20:3d:d5:e3:44:63:4a:44:ad:83:06:0c:e5: e0:91:bf:77:b6:bc:ed:b2:b3:27:6b:30:e3:46:2d: 40:15:65:58:5c:02:c7:ac:9a:14:29:f1:68:b6:1f: 13:2b:8f:e0:f3:e1:b8:0d:56:7b:37:6f:c1:90:50: e1:be:8d:80:cc:f0:05:4a:e6:af:6c:fc:4c:0d:5f: 17:73:66:41:03:a5:bb:e8:61:1b:83:b3:96:a3:15: 6a:84:5e:1e:e9:b0:ce:fc:cc:da:81:ce:88:4e:46: f4:5d:09:91:7d:bc:a3:0a:63:62:f1:63:93:40:72: cb:17:24:1a:9c:5a:c6:8a:4a:25:78:b6:0f:d5:89: 67:0d:a4:f0:04:c7:89:70:75:2a:15:1f:8e:75:7b: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:49:5D:6D:95:48:04:A7:2B:84:46:B3:FD:D5:8D:97:B6:73:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/ccdfa3ab-bee3-33b5-90f6-2a7f8517db77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl X509v3 Authority Key Identifier: keyid:91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b:6001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:37:51:b8:b5:5a:56:61:82:c8:eb:57:ed:c5:d8:16:9c:96: 68:f0:e4:d8:4a:e9:e1:8e:e8:a7:f1:45:bc:8a:99:5b:76:f2: 38:7d:1e:75:a9:dc:da:44:04:92:fb:e2:75:3a:9f:05:00:f1: f8:b6:0d:e8:8e:74:77:6b:e4:8c:33:52:45:3a:fa:37:1d:7c: a2:08:20:66:52:63:31:00:60:4b:37:24:62:d7:98:7f:7f:dd: fa:1b:e0:59:82:21:47:2e:f4:44:79:f3:c4:08:e1:3d:af:ea: 29:19:c9:10:76:10:b1:51:7e:07:fb:37:e8:b9:9b:9c:ed:38: 72:64:ff:82:c2:0a:38:0f:97:3b:4a:f7:b6:71:3e:91:12:d5: d0:2c:b7:bb:2c:77:8b:80:ba:f7:39:39:17:ee:23:fd:a5:11: 92:be:b4:33:e4:6d:00:63:6c:fc:1b:b9:7b:c3:98:bd:a7:46: 7e:f0:05:b7:ba:17:60:ef:9f:5d:60:1c:b8:a2:2d:fa:3b:e6: ea:04:29:c5:8f:50:1b:3b:8f:d7:a2:be:ff:f4:b0:fa:24:51: 5b:03:12:2a:54:70:88:71:5e:12:ea:5d:6a:5b:c1:4c:cd:1c: 0d:1c:e3:c1:00:95:cb:99:1a:7d:f5:68:82:2d:6c:06:76:cf: 74:67:c5:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FIIkoGJDnbbzFL+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE5YTRiOWMtNzBiYS00NGRhLThmMDAtMDU2YjNhODdj NzYxMB4XDTI2MDkyMzExNTE0N1oXDTI2MTIyMjEyNTE0N1owLzEtMCsGA1UEAxMk MjY4M2VkYzgtMmQ1NC00ZGZjLTg0MTctNTYzZTZiYmYzNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2eWINHCBivSqIy9sK7yza01AE+dP0DrcE9g UhtIlSJbQOpFNdLScngrycwdJdywibkZwkpgbZYD7YEFgo5zKNfS+82RBJAb5LXf MdXyWnTwm4v7aDnyBGt/vqujR6pdBMjSCvtE9o6B5CA91eNEY0pErYMGDOXgkb93 trztsrMnazDjRi1AFWVYXALHrJoUKfFoth8TK4/g8+G4DVZ7N2/BkFDhvo2AzPAF SuavbPxMDV8Xc2ZBA6W76GEbg7OWoxVqhF4e6bDO/Mzagc6ITkb0XQmRfbyjCmNi 8WOTQHLLFyQanFrGikoleLYP1YlnDaTwBMeJcHUqFR+OdXt4JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhySV1tlUgEpyuERrP91Y2XtnNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85MTlh NGI5Yy03MGJhLTQ0ZGEtOGYwMC0wNTZiM2E4N2M3NjEvY2NkZmEzYWItYmVlMy0z M2I1LTkwZjYtMmE3Zjg1MTdkYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTE5YTRiOWMtNzBiYS00NGRhLThm MDAtMDU2YjNhODdjNzYxLzkxOWE0YjljLTcwYmEtNDRkYS04ZjAwLTA1NmIzYTg3 Yzc2MS5jcmwwHwYDVR0jBBgwFoAUkdxKngRICPNUwza4QG8celSbcgUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85MTlhNGI5Yy03MGJhLTQ0ZGEtOGYwMC0wNTZi M2E4N2M3NjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAG2AB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAg3Ubi1WlZhgsjrV+3F2Baclmjw5NhK6eGO6KfxRbyKmVt28jh9 HnWp3NpEBJL74nU6nwUA8fi2DeiOdHdr5IwzUkU6+jcdfKIIIGZSYzEAYEs3JGLX mH9/3fob4FmCIUcu9ER588QI4T2v6ikZyRB2ELFRfgf7N+i5m5ztOHJk/4LCCjgP lztK97ZxPpES1dAst7ssd4uAuvc5ORfuI/2lEZK+tDPkbQBjbPwbuXvDmL2nRn7w Bbe6F2Dvn11gHLiiLfo75uoEKcWPUBs7j9eivv/0sPokUVsDEipUcIhxXhLqXWpb wUzNHA0c48EAlcuZGn31aIItbAZ2z3Rnxdw= -----END CERTIFICATE-----Generated at Wed Sep 30 17:08:49 2026 by rpki-client