$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/52de1c3f-61b3-3c0f-975e-3a5bc82a53a4.roa File: 52de1c3f-61b3-3c0f-975e-3a5bc82a53a4.roa (raw, json) Hash identifier: mZq5U68yGE5z7fT+vN2R4t62O8UbH+v1VGIUp7BZx34= Subject key identifier: F4:49:6B:85:EB:50:A2:C8:DA:7C:EA:63:F5:85:60:BE:99:B7:27:15 Certificate issuer: /CN=22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82 Certificate serial: 010D0C9F4328584F0B4C54D613D1BCD184E05C00 Authority key identifier: 47:E1:DB:9B:5B:F8:D4:E1:E8:DB:3D:8E:41:51:E9:C5:23:C4:E8:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/52de1c3f-61b3-3c0f-975e-3a5bc82a53a4.roa Signing time: Wed 02 Sep 2026 18:43:08 +0000 ROA not before: Wed 02 Sep 2026 18:43:08 +0000 ROA not after: Tue 01 Dec 2026 19:43:08 +0000 asID: 29997 IP address blocks: 2620:0:2e60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:4c:54:d6:13:d1:bc:d1:84:e0:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82 Validity Not Before: Sep 2 18:43:08 2026 GMT Not After : Dec 1 19:43:08 2026 GMT Subject: CN=0d5148b8-ad08-4a75-a25a-65e7f2a3c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:58:4b:f1:24:dc:74:92:75:b2:c3:e4:cc: e5:ca:aa:d0:8a:cc:01:c0:90:73:47:46:3d:48:9d: d8:17:94:36:08:1d:d7:6c:39:be:0d:a0:08:a3:2d: 68:3e:e4:0a:d4:83:2b:55:e1:bc:f1:41:66:01:ff: cb:bb:6a:05:8b:8c:37:02:6c:6f:a7:9d:91:97:f2: 49:1e:2e:d0:47:c2:56:cc:93:8e:5b:c0:7a:27:d1: a7:15:07:bf:33:85:44:f9:fa:bf:65:78:d3:27:ea: 11:25:1e:04:69:53:5d:aa:29:42:91:56:53:00:04: c2:cc:29:8a:4b:60:af:03:8d:f8:b7:41:7b:02:5c: 5c:24:dc:ef:3a:ef:43:c0:00:d0:81:bf:0c:4c:96: 39:bb:0f:07:c3:1a:8c:e5:d9:d8:60:63:e7:93:36: 6d:59:a8:d7:f9:9a:5d:f4:90:10:bc:0d:d5:16:32: 2b:05:8a:c9:7b:1c:aa:92:59:5a:df:4d:0a:d5:c5: 42:d4:e0:28:b0:b1:b2:a9:3c:89:b3:6d:20:14:2f: dc:fe:86:ae:cc:e2:c8:a4:74:d1:41:f5:21:c8:30: 6b:c0:56:d9:31:9b:13:53:96:2c:f4:8f:0b:15:c3: 08:25:a5:58:4d:7d:2b:f6:39:0c:c9:31:55:e5:49: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:6B:85:EB:50:A2:C8:DA:7C:EA:63:F5:85:60:BE:99:B7:27:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/52de1c3f-61b3-3c0f-975e-3a5bc82a53a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.crl X509v3 Authority Key Identifier: keyid:47:E1:DB:9B:5B:F8:D4:E1:E8:DB:3D:8E:41:51:E9:C5:23:C4:E8:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2e60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2a:27:d8:5f:6c:b1:09:0c:c7:1c:19:7f:fe:cf:a2:93:b3: b0:7f:92:b2:ac:d5:df:db:bc:af:ab:ae:d9:80:51:76:b2:9a: dd:d4:5d:4f:9e:9c:49:f2:5d:cc:12:62:04:bc:b0:62:e2:f4: 82:ce:6f:e1:e3:9b:89:4c:8b:e9:58:86:f6:c7:b1:6a:e1:63: f9:f7:08:10:d3:c5:00:05:6f:d1:e5:06:79:c7:51:e2:38:cb: 0c:10:b2:94:31:66:3f:9f:f6:c4:7a:1f:2f:44:6e:f7:40:4c: a9:00:7e:96:6d:19:e2:36:dc:3c:18:eb:bf:66:4b:c8:ce:04: 26:25:b9:e3:6c:ff:4d:a7:38:37:36:3d:7c:27:09:f3:8e:7e: 78:f2:7c:b3:ce:d4:3c:3b:46:8f:a2:20:e4:0d:46:75:f6:26: 6e:46:fe:0c:c0:f0:c9:d8:79:3e:72:c8:43:ac:03:fe:49:c9: 9a:5c:c9:b1:26:15:b1:94:03:a4:35:20:c1:9c:db:ca:84:cf: 7c:a8:29:ce:b3:bf:c8:93:42:d0:49:67:bb:ce:5a:b3:31:cc: 9a:5e:11:c9:78:ec:9d:48:fe:fd:e1:4b:5a:04:46:a0:93:9b: 54:0c:65:96:05:a6:6c:32:84:67:5c:70:e6:b5:22:38:8f:77: 8c:8c:e0:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LTFTWE9G80YTgXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhMWJlZjItMWY4Ni00YmY1LTliOGMtOGRjYzZjMThh ZTgyMB4XDTI2MDkwMjE4NDMwOFoXDTI2MTIwMTE5NDMwOFowLzEtMCsGA1UEAxMk MGQ1MTQ4YjgtYWQwOC00YTc1LWEyNWEtNjVlN2YyYTNjMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc1YS/Ek3HSSdbLD5MzlyqrQiswBwJBzR0Y9 SJ3YF5Q2CB3XbDm+DaAIoy1oPuQK1IMrVeG88UFmAf/Lu2oFi4w3Amxvp52Rl/JJ Hi7QR8JWzJOOW8B6J9GnFQe/M4VE+fq/ZXjTJ+oRJR4EaVNdqilCkVZTAATCzCmK S2CvA434t0F7AlxcJNzvOu9DwADQgb8MTJY5uw8HwxqM5dnYYGPnkzZtWajX+Zpd 9JAQvA3VFjIrBYrJexyqklla300K1cVC1OAosLGyqTyJs20gFC/c/oauzOLIpHTR QfUhyDBrwFbZMZsTU5Ys9I8LFcMIJaVYTX0r9jkMyTFV5UmS/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPRJa4XrUKLI2nzqY/WFYL6ZtycVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMmEx YmVmMi0xZjg2LTRiZjUtOWI4Yy04ZGNjNmMxOGFlODIvNTJkZTFjM2YtNjFiMy0z YzBmLTk3NWUtM2E1YmM4MmE1M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjJhMWJlZjItMWY4Ni00YmY1LTli OGMtOGRjYzZjMThhZTgyLzIyYTFiZWYyLTFmODYtNGJmNS05YjhjLThkY2M2YzE4 YWU4Mi5jcmwwHwYDVR0jBBgwFoAUR+Hbm1v41OHo2z2OQVHpxSPE6JcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMmExYmVmMi0xZjg2LTRiZjUtOWI4Yy04ZGNj NmMxOGFlODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAC5g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIsqJ9hfbLEJDMccGX/+z6KTs7B/krKs1d/bvK+rrtmAUXaymt3U XU+enEnyXcwSYgS8sGLi9ILOb+Hjm4lMi+lYhvbHsWrhY/n3CBDTxQAFb9HlBnnH UeI4ywwQspQxZj+f9sR6Hy9EbvdATKkAfpZtGeI23DwY679mS8jOBCYlueNs/02n ODc2PXwnCfOOfnjyfLPO1Dw7Ro+iIOQNRnX2Jm5G/gzA8MnYeT5yyEOsA/5JyZpc ybEmFbGUA6Q1IMGc28qEz3yoKc6zv8iTQtBJZ7vOWrMxzJpeEcl47J1I/v3hS1oE RqCTm1QMZZYFpmwyhGdccOa1IjiPd4yM4PY= -----END CERTIFICATE-----Generated at Tue Sep 22 01:28:56 2026 by rpki-client