$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa File: 5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa (raw, json) Hash identifier: qFAh4862kaYBajHWUrrCWUb8EsFsXRUKT8OSdF4Zq3k= Subject key identifier: 1B:1D:C8:59:DD:F0:0D:5B:AD:87:F5:F5:9F:95:C0:8D:DF:13:3C:FD Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584F27F253DF5CEF0AD7856B0D40 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 7352 IP address blocks: 2604:cd00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:53:df:5c:ef:0a:d7:85:6b:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=789ce1d6-131e-43f8-b859-ba63608022d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:e8:e3:48:3e:11:76:fd:29:81:ea:45:ab: d0:fc:71:88:97:df:33:b3:43:43:47:4d:fd:72:e5: 4a:83:73:de:de:dc:bd:12:d7:b9:a8:44:3f:ba:f1: d2:b9:dc:77:0a:1f:31:6b:64:b0:38:96:52:36:e5: 86:aa:18:d1:bd:ff:84:1b:96:12:e2:5b:fe:43:8a: ad:14:9f:6c:a1:ad:9f:08:30:fa:8f:ac:7e:d9:1c: 87:7a:ef:de:0b:95:a9:f4:7a:b5:98:2b:ee:28:ce: 2e:2a:d9:f6:3d:c5:bd:09:2c:b6:8d:ba:32:3e:16: cc:c6:e4:29:e8:f2:76:cd:ec:76:c6:be:2b:76:26: 5d:d5:dc:b4:8d:23:4d:63:7f:dd:2a:ec:10:43:98: 1d:05:0f:35:1f:a2:7b:a1:fb:56:c7:4d:92:f4:31: 74:f2:b3:83:d9:2c:61:26:26:99:00:78:5d:df:b5: 0f:dd:cc:1a:b4:44:99:86:f4:7c:65:48:da:78:29: 4f:52:84:ef:9d:18:31:53:33:84:6c:92:52:b3:c8: 89:0d:55:82:01:8b:84:42:5c:64:26:ca:21:07:42: f8:a1:ba:b9:98:c1:50:ed:1c:34:b1:51:3f:8b:bd: 9a:48:84:4f:18:39:b8:bf:9b:e4:2f:8a:2a:f9:2f: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1D:C8:59:DD:F0:0D:5B:AD:87:F5:F5:9F:95:C0:8D:DF:13:3C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv6: 2604:cd00:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:16:8f:99:18:58:6e:fb:df:62:bc:39:f1:c9:07:c4:5a:6f: b2:5d:20:db:7f:48:f1:28:e2:3e:aa:b6:30:ee:24:18:ee:42: ee:3b:21:92:24:5a:13:15:db:8b:b4:e7:46:e6:be:05:8e:b5: 90:53:db:0c:43:8f:84:09:64:7c:f2:78:7d:62:cf:9f:6c:53: ce:69:86:c0:f5:65:eb:79:3a:59:51:31:77:9c:d0:fd:97:d9: c6:e9:00:53:ec:7d:9f:97:7f:43:7b:45:84:a7:1d:9a:1d:32: e2:80:92:7d:bc:4c:d3:fc:35:f4:88:20:b9:ca:74:27:62:2f: 2f:2a:dd:b0:d5:70:ca:e4:1a:22:34:55:60:40:2c:04:96:ca: 96:2c:15:0f:7d:8f:8d:cb:92:b2:71:0b:01:9c:7c:76:ae:60: b5:20:e4:e6:c3:d0:23:43:a5:40:23:1b:68:1b:91:96:bb:df: ed:5d:2c:f9:06:9c:15:94:4f:cf:9c:8d:d2:9e:bc:0d:c0:e8: 2f:5f:85:97:be:51:fa:ed:c3:ce:3c:79:70:08:34:c9:9c:cd: b4:14:ce:62:6e:b2:f6:74:3c:97:9e:06:8f:9d:20:34:03:c8: 1d:fb:cf:9b:8d:20:b8:9f:8b:e2:8d:8c:e6:9b:0d:b3:17:13: 34:1b:20:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8n8lPfXO8K14VrDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk Nzg5Y2UxZDYtMTMxZS00M2Y4LWI4NTktYmE2MzYwODAyMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEbo40g+EXb9KYHqRavQ/HGIl98zs0NDR039 cuVKg3Pe3ty9Ete5qEQ/uvHSudx3Ch8xa2SwOJZSNuWGqhjRvf+EG5YS4lv+Q4qt FJ9soa2fCDD6j6x+2RyHeu/eC5Wp9Hq1mCvuKM4uKtn2PcW9CSy2jboyPhbMxuQp 6PJ2zex2xr4rdiZd1dy0jSNNY3/dKuwQQ5gdBQ81H6J7oftWx02S9DF08rOD2Sxh JiaZAHhd37UP3cwatESZhvR8ZUjaeClPUoTvnRgxUzOEbJJSs8iJDVWCAYuEQlxk JsohB0L4obq5mMFQ7Rw0sVE/i72aSIRPGDm4v5vkL4oq+S8mYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsdyFnd8A1brYf19Z+VwI3fEzz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvNWMwZjcwMjAtNTRlMC0z OTkxLWI3ZDQtMjNkNWZmZDhhN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTNAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgWj5kYWG7732K8OfHJB8Rab7JdINt/SPEo4j6qtjDuJBjuQu47 IZIkWhMV24u050bmvgWOtZBT2wxDj4QJZHzyeH1iz59sU85phsD1Zet5OllRMXec 0P2X2cbpAFPsfZ+Xf0N7RYSnHZodMuKAkn28TNP8NfSIILnKdCdiLy8q3bDVcMrk GiI0VWBALASWypYsFQ99j43LkrJxCwGcfHauYLUg5ObD0CNDpUAjG2gbkZa73+1d LPkGnBWUT8+cjdKevA3A6C9fhZe+Ufrtw848eXAINMmczbQUzmJusvZ0PJeeBo+d IDQDyB37z5uNILifi+KNjOabDbMXEzQbIC4= -----END CERTIFICATE-----Generated at Thu Sep 24 15:26:24 2026 by rpki-client