$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa File: 9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa (raw, json) Hash identifier: fpIjCGvYpAW7cSK95PxVuwzvEA+0M2EuctEsFYTk/BA= Subject key identifier: 7F:57:02:30:1C:70:79:76:8E:0C:90:13:ED:11:0C:E8:A0:0F:8D:D5 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584F119D13B983C49AD0288261CC Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 2620:a0:200f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:13:b9:83:c4:9a:d0:28:82:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e8d4b927-0b57-4a22-9cc5-f26420d791a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:a2:0d:f6:f5:7a:57:37:32:2b:d1:be:1c: 17:57:f6:ff:ba:73:68:56:fa:e4:24:9f:1f:4b:ea: 9b:8d:33:31:22:4d:b0:10:6b:78:e8:8b:24:bf:ba: 19:47:67:2c:a5:f3:96:f2:2b:6b:19:10:52:27:1e: 94:d3:63:88:96:cb:5f:12:ac:31:5a:a4:80:57:5e: b6:ce:cd:fa:9f:50:4d:78:fa:5e:f0:f3:7a:a6:fd: f7:71:56:fa:a9:b5:73:37:29:22:64:22:f4:20:8a: 90:14:26:12:0e:5e:9d:e3:41:b9:86:dd:6f:75:8c: 5f:4d:ea:4d:be:25:b4:67:94:c5:7f:93:27:10:ab: 6f:76:c1:2f:ee:77:6e:55:35:c3:47:f5:b1:cf:7f: d6:ce:62:de:20:da:f1:56:15:df:a5:36:b9:16:93: ee:fc:c5:5e:e9:ea:52:20:56:25:07:24:9a:98:a8: de:3d:37:79:2d:6d:72:19:a2:47:3b:c3:2a:0e:d4: f4:29:a6:9e:d5:3d:2b:41:98:33:d7:b1:af:fe:d1: 99:aa:3a:30:46:65:64:54:3a:9d:89:27:1e:fd:bf: 03:30:23:ca:a1:d5:3d:a2:14:2f:6e:3d:ae:b4:9a: a3:8e:e4:2c:d2:4f:66:40:46:ec:21:4e:75:74:b1: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:57:02:30:1C:70:79:76:8E:0C:90:13:ED:11:0C:E8:A0:0F:8D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:200f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:bb:f8:09:df:dc:f7:0c:7d:ab:50:7b:70:14:7c:28:f6:21: 13:b9:53:7c:2e:39:1b:5f:14:55:09:52:4a:dc:e2:34:c1:ce: 96:84:79:c5:29:01:86:e9:9d:2d:3b:20:3f:0f:9a:33:f3:5c: 97:8d:f5:62:8a:54:f7:a3:2a:f8:8c:13:c0:17:a0:19:61:5e: ef:15:41:c5:06:bf:c6:a6:c1:ee:fb:95:a7:ba:b5:e7:94:bc: 7e:98:ba:05:44:d4:68:fd:63:ee:fc:10:a3:a2:46:64:6d:f9: 8a:4d:ca:e7:44:6b:cf:bd:d7:22:49:29:cc:bb:2b:ca:58:d6: ef:4a:79:9d:40:60:69:39:e6:c6:7e:e8:90:b1:b5:f8:ec:c6: ad:cd:34:6f:c2:71:67:10:9e:79:1f:c6:eb:1f:47:ee:51:88: f7:94:5e:f7:03:22:5b:16:c2:05:64:c7:3d:32:75:d0:79:da: f0:92:88:b9:a7:28:f8:22:cf:c9:01:82:cc:a9:a0:98:c4:69: 3a:1f:7b:81:b3:2f:59:4e:14:18:08:0a:32:94:97:89:8a:27: f0:b1:ea:a8:d9:8f:72:b2:62:70:b3:99:a4:2e:53:b5:5e:89: aa:46:34:a8:c4:b9:55:d1:07:47:69:3c:a7:33:5e:f9:72:cf: 89:3c:df:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnRO5g8Sa0CiCYcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThkNGI5MjctMGI1Ny00YTIyLTljYzUtZjI2NDIwZDc5MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYSiDfb1elc3MivRvhwXV/b/unNoVvrkJJ8f S+qbjTMxIk2wEGt46Iskv7oZR2cspfOW8itrGRBSJx6U02OIlstfEqwxWqSAV162 zs36n1BNePpe8PN6pv33cVb6qbVzNykiZCL0IIqQFCYSDl6d40G5ht1vdYxfTepN viW0Z5TFf5MnEKtvdsEv7nduVTXDR/Wxz3/WzmLeINrxVhXfpTa5FpPu/MVe6epS IFYlBySamKjePTd5LW1yGaJHO8MqDtT0Kaae1T0rQZgz17Gv/tGZqjowRmVkVDqd iSce/b8DMCPKodU9ohQvbj2utJqjjuQs0k9mQEbsIU51dLFEfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9XAjAccHl2jgyQE+0RDOigD43VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvOWNmMmEyMjgtM2RkMi0z NWM2LTk5MTUtOWIwMDBiMDgyMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKK7+Anf3PcMfatQe3AUfCj2IRO5U3wuORtfFFUJUkrc4jTBzpaE ecUpAYbpnS07ID8PmjPzXJeN9WKKVPejKviME8AXoBlhXu8VQcUGv8amwe77lae6 teeUvH6YugVE1Gj9Y+78EKOiRmRt+YpNyudEa8+91yJJKcy7K8pY1u9KeZ1AYGk5 5sZ+6JCxtfjsxq3NNG/CcWcQnnkfxusfR+5RiPeUXvcDIlsWwgVkxz0yddB52vCS iLmnKPgiz8kBgsypoJjEaTofe4GzL1lOFBgICjKUl4mKJ/Cx6qjZj3KyYnCzmaQu U7VeiapGNKjEuVXRB0dpPKczXvlyz4k831w= -----END CERTIFICATE-----Generated at Thu Sep 24 11:36:23 2026 by rpki-client