$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa File: 2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa (raw, json) Hash identifier: ge/tJ8vIVZuyLOA3yD3XVlSG/8hznx8cnPLXaX28NTs= Subject key identifier: 5A:D5:37:AA:34:9C:E9:F1:11:52:73:78:DC:C5:74:0D:B1:E1:C8:44 Certificate issuer: /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Certificate serial: 010D0C9F4328584F51D2B17B2374853BFE20EFC0 Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 26737 IP address blocks: 2620:14:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b1:7b:23:74:85:3b:fe:20:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=86c7dfb5-59fb-4b92-bbf0-e92b7f6ed3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:e7:9d:6c:09:d5:b4:66:6e:e7:d8:41:1b: e7:b4:f2:7d:0c:90:11:62:1f:bd:07:0a:37:de:3c: 26:7b:0c:1d:1e:a3:6f:d4:bc:d1:64:ff:c9:22:23: 1b:3d:ca:87:8e:79:0d:d8:db:b2:2f:c7:10:e5:0c: 94:04:2e:f3:5d:21:29:67:b0:f5:2a:a5:fe:71:53: 39:e0:a1:8c:bf:6c:7c:25:2b:4d:d6:07:33:a5:54: 2a:4d:e0:28:bd:aa:92:b9:46:c7:bb:a2:12:e8:f4: 4a:42:c2:2f:c7:07:84:d0:08:5b:9f:19:db:34:5a: 10:5e:36:90:fa:68:d4:a5:5b:90:75:1f:e5:11:63: 9d:38:f0:ad:99:78:9e:83:74:bd:ab:fe:ca:bb:86: 4d:ea:a1:30:ba:3d:dd:98:38:ca:54:e4:7d:4c:ff: f0:d7:0e:fb:b2:87:12:b5:45:15:63:2b:36:81:67: 69:00:8b:94:96:27:77:75:ec:51:f9:29:d5:8b:5e: 35:63:b5:47:9e:8c:c1:c6:ad:98:46:c7:db:01:f4: d5:ae:99:27:41:42:b9:b8:1f:c5:97:68:f2:ed:b2: f8:f2:a0:34:1a:03:30:ed:bd:43:72:d9:43:c1:ca: 0b:ee:89:2e:bd:92:44:34:6a:6c:0e:2a:a9:d3:c3: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D5:37:AA:34:9C:E9:F1:11:52:73:78:DC:C5:74:0D:B1:E1:C8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl X509v3 Authority Key Identifier: keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer sbgp-ipAddrBlock: critical IPv6: 2620:14:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:49:4f:73:7a:ab:dd:01:aa:dd:1c:11:be:52:4b:94:0c:a4: c0:bc:8f:c5:f5:bb:e3:e4:25:ef:30:f6:48:35:ae:c5:1f:a0: 47:07:8d:eb:4a:51:27:5b:0a:b6:82:58:07:84:38:46:d8:dc: 16:e7:45:91:d3:25:35:ed:bc:3e:aa:64:5c:a7:31:8c:21:ef: 85:1f:67:6c:8d:b8:41:7b:4e:d0:f4:bd:3d:65:bc:1e:ec:f6: 70:41:ee:39:a4:05:3c:2f:a0:39:2c:5e:5a:35:1d:be:5c:ad: f9:42:cd:b1:bb:f8:cd:10:2d:f6:a6:6c:1a:a0:23:67:4a:84: 7b:b6:da:66:48:87:52:4e:9e:b3:e4:07:b7:f9:a4:49:c9:5b: 63:15:cd:9c:f7:c8:c2:22:75:a7:d5:01:89:61:de:28:69:d6: c1:b5:38:eb:9a:40:ed:ef:08:05:5b:ab:ed:67:5f:8c:10:e3: fb:8e:12:3e:00:54:21:e9:19:b4:56:14:ca:cb:17:8a:39:75: 95:2f:a2:7c:8d:05:be:39:9a:7a:10:d0:3c:f2:07:5d:33:1d: 1d:b3:30:f0:1a:31:f1:7c:6c:66:ad:10:f5:df:3e:20:8e:a2: ef:22:08:9d:7c:c3:e4:e1:72:50:17:ef:98:72:a1:bf:55:e5: fc:f9:d0:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9R0rF7I3SFO/4g78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZh MmI0MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODZjN2RmYjUtNTlmYi00YjkyLWJiZjAtZTkyYjdmNmVkM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D7nnWwJ1bRmbufYQRvntPJ9DJARYh+9Bwo3 3jwmewwdHqNv1LzRZP/JIiMbPcqHjnkN2NuyL8cQ5QyUBC7zXSEpZ7D1KqX+cVM5 4KGMv2x8JStN1gczpVQqTeAovaqSuUbHu6IS6PRKQsIvxweE0AhbnxnbNFoQXjaQ +mjUpVuQdR/lEWOdOPCtmXieg3S9q/7Ku4ZN6qEwuj3dmDjKVOR9TP/w1w77socS tUUVYys2gWdpAIuUlid3dexR+SnVi141Y7VHnozBxq2YRsfbAfTVrpknQUK5uB/F l2jy7bL48qA0GgMw7b1DctlDwcoL7okuvZJENGpsDiqp08MIgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrVN6o0nOnxEVJzeNzFdA2x4chEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1 Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvMmQ3ZDEwZjctNjFmNy0z MDFmLTgwZjItOGI4OGYwMTVlNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTlmNWM3NjctNWIxZi00YTg1LThm MDUtOTgwYjU4NWZhMmI0LzU5ZjVjNzY3LTViMWYtNGE4NS04ZjA1LTk4MGI1ODVm YTJiNC5jcmwwHwYDVR0jBBgwFoAUXkkwOuJ1kpAgQPi5HRExgP9Kk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBi NTg1ZmEyYjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAFCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJJT3N6q90Bqt0cEb5SS5QMpMC8j8X1u+PkJe8w9kg1rsUfoEcH jetKUSdbCraCWAeEOEbY3BbnRZHTJTXtvD6qZFynMYwh74UfZ2yNuEF7TtD0vT1l vB7s9nBB7jmkBTwvoDksXlo1Hb5crflCzbG7+M0QLfambBqgI2dKhHu22mZIh1JO nrPkB7f5pEnJW2MVzZz3yMIidafVAYlh3ihp1sG1OOuaQO3vCAVbq+1nX4wQ4/uO Ej4AVCHpGbRWFMrLF4o5dZUvonyNBb45mnoQ0DzyB10zHR2zMPAaMfF8bGatEPXf PiCOou8iCJ18w+ThclAX75hyob9V5fz50A0= -----END CERTIFICATE-----Generated at Mon Sep 28 22:55:27 2026 by rpki-client