$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa File: f285fce8-0e10-3435-bf49-9793aefeda4b.roa (raw, json) Hash identifier: yiySOsBPn24JIMkHeahyKIZ1lzFLLGQazl1DGJHUgW8= Subject key identifier: 34:C9:DF:A0:B3:C5:02:DB:EA:19:42:F6:64:7F:5B:8D:50:A1:1A:46 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584F119D13E79BF9141FC396BF00 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 2620:a0:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:13:e7:9b:f9:14:1f:c3:96:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c12fa2ae-5ef8-4875-8f3b-0b1a68c503d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:68:a0:b8:92:ae:83:4e:af:7f:c2:df:19: ba:60:85:f7:6f:e0:7f:cc:b9:33:c8:e6:e1:8b:9e: 77:b7:78:38:3b:ce:9c:42:46:79:52:11:48:63:c5: ab:6e:7c:ab:c2:3f:e0:d0:61:43:a0:22:08:80:80: 9a:c6:cc:4b:40:18:db:ac:60:06:b1:a7:08:e2:98: ef:40:d4:c9:d8:f3:10:31:96:e8:d2:86:0c:2c:44: a3:c6:24:44:4b:b1:e1:12:ae:7c:01:9a:56:c4:77: f3:dc:ac:5f:2e:7a:1d:f6:ec:20:6a:ab:da:9e:ae: 92:cd:82:7d:bd:90:26:8e:50:07:40:64:5b:3b:e2: 4f:fa:fc:07:70:71:c7:7b:c3:a5:d5:29:18:6e:20: 7b:c0:5a:6d:8b:a4:ae:d5:df:5f:fe:25:07:53:fb: b3:4f:5b:34:59:15:81:82:c5:ed:7d:3b:20:de:4f: 7c:be:fd:38:02:6b:06:d0:77:4d:dd:a1:c6:36:23: 9d:65:4a:c9:7a:54:fe:7a:91:ad:1d:68:ab:63:a0: c9:cf:65:89:4e:9b:78:b3:bb:10:51:02:bf:3b:26: c0:bc:48:1d:48:ea:cf:f5:a4:5f:e8:c9:83:37:1e: 72:be:7b:c1:ae:7f:9a:0b:44:96:2a:43:5a:1f:ad: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:DF:A0:B3:C5:02:DB:EA:19:42:F6:64:7F:5B:8D:50:A1:1A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f285fce8-0e10-3435-bf49-9793aefeda4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:2003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6c:cb:8f:0e:dc:d2:ac:0a:34:1a:24:bc:bd:84:84:9b:ca: 48:50:36:32:51:cd:38:17:86:63:c9:74:02:fa:65:cc:3d:76: 7d:af:61:47:94:ec:b4:b7:77:5e:fe:0a:87:dc:ba:d9:11:e6: 34:15:1a:55:92:9a:a0:94:34:5b:83:6c:2d:c9:72:6e:8a:6a: a8:d0:3a:d6:e3:d0:30:96:5c:9a:ed:a9:f0:1b:3d:1c:51:fb: 65:fc:7d:5c:45:36:89:b2:71:98:ff:a8:e0:7b:44:c7:5c:22: da:06:2e:b3:4f:cf:97:00:ac:8f:64:b4:16:26:72:26:6e:cb: 83:2b:69:39:ef:5b:57:29:6c:60:8f:d6:fd:58:cd:3a:de:fc: b5:6f:73:e5:2d:c8:4f:33:f3:79:19:8e:26:40:ff:7e:88:13: 33:42:ec:d7:a5:3c:02:8c:88:50:4f:f6:b1:f5:fe:17:fe:3c: 23:5e:43:d4:66:b3:b3:ff:be:a8:2f:01:78:a5:9d:d5:d6:d8: b7:44:39:17:59:40:69:c3:89:88:e2:f0:16:07:3f:2c:c8:fe: b2:8f:9f:56:88:d9:48:66:aa:01:67:b3:a5:ce:a1:bf:b6:d3: 65:ae:98:07:23:99:57:44:4f:cd:69:15:33:f7:2c:7d:f5:88: 4b:ea:bd:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnRPnm/kUH8OWvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzEyZmEyYWUtNWVmOC00ODc1LThmM2ItMGIxYTY4YzUwM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofRooLiSroNOr3/C3xm6YIX3b+B/zLkzyObh i553t3g4O86cQkZ5UhFIY8Wrbnyrwj/g0GFDoCIIgICaxsxLQBjbrGAGsacI4pjv QNTJ2PMQMZbo0oYMLESjxiRES7HhEq58AZpWxHfz3KxfLnod9uwgaqvanq6SzYJ9 vZAmjlAHQGRbO+JP+vwHcHHHe8Ol1SkYbiB7wFpti6Su1d9f/iUHU/uzT1s0WRWB gsXtfTsg3k98vv04AmsG0HdN3aHGNiOdZUrJelT+epGtHWirY6DJz2WJTpt4s7sQ UQK/OybAvEgdSOrP9aRf6MmDNx5yvnvBrn+aC0SWKkNaH61UOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTJ36CzxQLb6hlC9mR/W41QoRpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvZjI4NWZjZTgtMGUxMC0z NDM1LWJmNDktOTc5M2FlZmVkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJsy48O3NKsCjQaJLy9hISbykhQNjJRzTgXhmPJdAL6Zcw9dn2v YUeU7LS3d17+CofcutkR5jQVGlWSmqCUNFuDbC3Jcm6KaqjQOtbj0DCWXJrtqfAb PRxR+2X8fVxFNomycZj/qOB7RMdcItoGLrNPz5cArI9ktBYmciZuy4MraTnvW1cp bGCP1v1YzTre/LVvc+UtyE8z83kZjiZA/36IEzNC7NelPAKMiFBP9rH1/hf+PCNe Q9Rms7P/vqgvAXilndXW2LdEORdZQGnDiYji8BYHPyzI/rKPn1aI2UhmqgFns6XO ob+202WumAcjmVdET81pFTP3LH31iEvqvSA= -----END CERTIFICATE-----Generated at Wed Sep 23 20:02:36 2026 by rpki-client