$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa File: 2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa (raw, json) Hash identifier: ODBxJB7b4TEhpSd79D0vGCkTUvOmxMvtMP0BcPp6JhA= Subject key identifier: 4B:6C:57:D0:9E:34:FA:C8:C7:5B:E1:E3:7B:D9:F6:9C:1C:18:4A:31 Certificate issuer: /CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Certificate serial: 010D0C9F4328584EB2B1B30D97387EB815AC4800 Authority key identifier: A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 13335 IP address blocks: 2620:cb:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b3:0d:97:38:7e:b8:15:ac:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=8de77971-6754-4cd1-94c3-29ece51176b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:92:ea:32:15:d8:07:e0:3c:a1:50:4b:5e: 77:5e:af:a4:07:a2:43:9a:b6:c6:cb:6d:0d:19:2a: 4c:4a:51:c8:b7:e5:3d:d7:50:65:a0:66:4a:d3:9a: b2:48:45:08:d1:ed:67:3c:70:2a:a4:f5:6f:6b:21: 73:84:5b:b2:6c:bf:ff:cf:43:41:b8:10:68:f7:a2: fb:2c:7d:a4:45:6f:d1:3b:c6:bc:24:59:38:c1:a8: f7:41:f8:04:10:fd:45:ef:75:7a:21:c1:ea:8a:29: 3c:08:3b:1e:ea:a2:2e:c0:20:98:a1:fe:57:92:c9: f5:35:28:67:f7:5a:c9:f1:8f:9b:11:b0:1e:28:f0: 57:c5:9b:be:2b:3e:14:9c:b0:9f:44:32:4c:9d:ff: 2b:d7:ba:c4:9a:5d:e7:88:03:70:11:33:c3:37:86: ba:55:2f:79:56:61:f1:22:c8:ec:55:aa:6b:81:e9: 28:e2:be:b0:6b:f7:af:1b:83:bd:72:24:94:aa:3c: a5:2d:77:c9:f4:a9:8d:64:4c:87:36:1a:fa:2c:18: fd:b3:5e:0e:31:6a:de:f2:a0:6c:36:f5:3e:ae:78: 35:1e:89:0b:b3:70:21:cb:72:e0:b5:fb:a8:f9:48: 21:99:03:ba:74:4a:3d:ff:54:30:7b:36:19:1e:d1: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:57:D0:9E:34:FA:C8:C7:5B:E1:E3:7B:D9:F6:9C:1C:18:4A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl X509v3 Authority Key Identifier: keyid:A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer sbgp-ipAddrBlock: critical IPv6: 2620:cb:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:da:55:74:ed:ff:a5:b4:b5:7b:f7:9d:70:a0:2a:7b:bb:ea: 73:47:97:6f:29:e6:50:03:1b:52:e7:e0:af:2c:ee:07:3f:e0: a7:ec:b4:3c:0b:99:a7:e5:03:98:5f:a2:63:08:2c:b9:a7:39: 7a:a9:8c:9e:82:3c:c6:c0:71:20:8c:17:fb:93:8b:1e:19:82: 36:d1:46:c2:84:11:0d:d8:4a:a1:de:0c:32:31:49:6f:cc:a4: e7:e7:d9:d3:67:2c:55:f3:66:ab:7d:7d:46:c3:ab:25:3b:10: 3d:41:5b:70:cc:81:cc:6f:ac:ba:13:cf:4b:44:f4:e1:03:4f: 57:78:f8:cc:aa:82:8b:a1:2d:47:de:1c:9a:eb:50:e6:f0:70: ba:0a:f5:49:7b:ab:5d:9f:95:ec:8f:d6:84:38:b0:75:4b:7b: ba:be:de:0d:04:99:dd:cd:98:d6:78:26:7c:ab:06:93:4c:8a: 7e:b6:96:52:be:32:60:c9:af:4a:f1:c2:7e:7f:9f:08:1f:7c: 4a:82:7f:3a:36:5b:e0:4b:80:2b:cc:84:c6:12:67:9b:67:06: fb:a2:00:25:53:db:a9:11:6a:75:2a:08:f2:0b:e6:71:8c:c2: 8e:04:ba:d8:e4:2e:69:f2:24:ec:df:bc:0c:57:91:4c:28:a3: 28:c0:fa:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ysbMNlzh+uBWsSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkYTlhZjktZDJkZi00ODA5LWI1MmMtZDdiYzg4NTlm ZWIzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OGRlNzc5NzEtNjc1NC00Y2QxLTk0YzMtMjllY2U1MTE3NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloiS6jIV2AfgPKFQS153Xq+kB6JDmrbGy20N GSpMSlHIt+U911BloGZK05qySEUI0e1nPHAqpPVvayFzhFuybL//z0NBuBBo96L7 LH2kRW/RO8a8JFk4waj3QfgEEP1F73V6IcHqiik8CDse6qIuwCCYof5Xksn1NShn 91rJ8Y+bEbAeKPBXxZu+Kz4UnLCfRDJMnf8r17rEml3niANwETPDN4a6VS95VmHx IsjsVaprgeko4r6wa/evG4O9ciSUqjylLXfJ9KmNZEyHNhr6LBj9s14OMWre8qBs NvU+rng1HokLs3Ahy3Lgtfuo+UghmQO6dEo9/1QwezYZHtEMCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtsV9CeNPrIx1vh43vZ9pwcGEoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Rh OWFmOS1kMmRmLTQ4MDktYjUyYy1kN2JjODg1OWZlYjMvMmE5YzA4NDgtMmE5NC0z Y2JjLWJjNjctN2NhMmJhNGM5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNkYTlhZjktZDJkZi00ODA5LWI1 MmMtZDdiYzg4NTlmZWIzL2ZjZGE5YWY5LWQyZGYtNDgwOS1iNTJjLWQ3YmM4ODU5 ZmViMy5jcmwwHwYDVR0jBBgwFoAUoQQLRehstb9uP371hwsWs+OCvQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2RhOWFmOS1kMmRmLTQ4MDktYjUyYy1kN2Jj ODg1OWZlYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAyyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDaVXTt/6W0tXv3nXCgKnu76nNHl28p5lADG1Ln4K8s7gc/4Kfs tDwLmaflA5hfomMILLmnOXqpjJ6CPMbAcSCMF/uTix4ZgjbRRsKEEQ3YSqHeDDIx SW/MpOfn2dNnLFXzZqt9fUbDqyU7ED1BW3DMgcxvrLoTz0tE9OEDT1d4+Myqgouh LUfeHJrrUObwcLoK9Ul7q12fleyP1oQ4sHVLe7q+3g0Emd3NmNZ4JnyrBpNMin62 llK+MmDJr0rxwn5/nwgffEqCfzo2W+BLgCvMhMYSZ5tnBvuiACVT26kRanUqCPIL 5nGMwo4EutjkLmnyJOzfvAxXkUwooyjA+tQ= -----END CERTIFICATE-----Generated at Tue Sep 22 22:33:17 2026 by rpki-client