$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa File: 57b2b121-c49d-3287-acea-daa76e44396a.roa (raw, json) Hash identifier: V0Bgu3qiQSnGt7NJ0OrYFJJP/2A420Q8iOXaweKjjWY= Subject key identifier: 82:C2:21:CC:90:E4:A2:3C:8B:A5:DB:2C:D3:20:13:EF:C7:24:EB:5F Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584F225D00588CB955D553002280 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 88 IP address blocks: 2620:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:00:58:8c:b9:55:d5:53:00:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=6d6fc9ac-eaad-4c84-9ffc-e8ea30fa265b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:67:3f:56:fa:ec:7a:e5:11:42:9a:69:59: b1:b2:2f:19:30:2a:e7:5e:25:15:14:8d:ab:45:24: 9d:d7:50:7c:db:40:d2:9f:31:02:de:a2:39:57:04: 16:6e:30:51:9e:7f:71:90:fb:61:b3:33:9f:ac:7a: c3:ca:07:28:a2:e0:3a:a2:30:b7:7d:8f:6e:1e:94: 6f:29:15:47:77:f5:e0:87:7f:5d:cd:63:df:c1:a6: 96:f9:de:6a:72:7a:20:9b:40:22:c4:b8:c2:e7:db: 7e:e1:c3:60:8b:50:6b:d9:6a:8a:a0:33:b5:47:96: f8:26:4d:98:0e:c0:91:26:36:8e:75:d0:5e:dc:3e: 24:6c:08:56:2b:f3:3a:4a:6c:2c:d7:37:c2:44:e2: 03:cd:00:45:b1:9b:14:99:87:ae:7b:b3:d9:66:30: 1b:af:0b:34:21:10:a9:db:84:1b:37:8f:a6:eb:9a: f2:0e:51:0d:ee:06:b1:3e:a7:57:54:b5:91:fc:c0: 13:d8:54:7e:75:6a:35:72:bc:e9:e2:da:55:fb:d6: 64:84:1b:3d:01:1b:d4:7e:11:d3:57:29:9c:89:1b: bd:25:c2:8e:5c:4c:46:0a:5a:1e:7b:b6:69:3f:90: 0b:8b:ed:e9:df:d2:a6:27:9e:ee:75:d5:2f:29:e3: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:21:CC:90:E4:A2:3C:8B:A5:DB:2C:D3:20:13:EF:C7:24:EB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2620:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c4:03:7d:56:e4:f7:51:7a:41:9a:b6:60:d5:2c:67:0a:48: 7c:d2:40:4d:45:ac:19:ef:82:09:b4:bc:5a:f3:95:c2:14:8c: 43:6f:70:c9:b5:2c:50:7a:ff:fb:4b:58:ac:b4:e9:f8:35:52: b8:e7:8f:b7:36:1f:96:d8:b7:4d:50:1a:f9:ab:57:b8:67:c9: 49:8c:60:11:ca:62:39:a3:a7:10:29:35:13:7f:f4:34:4d:6c: 33:13:26:28:b2:7b:41:34:c7:6a:4d:e1:c0:ce:69:f8:18:18: bd:e3:d4:c1:55:2b:c1:71:d8:4d:56:b8:f3:c1:d9:9a:ff:ac: d6:63:8c:54:ea:34:29:3f:7e:84:7a:dd:9b:a3:17:9e:cc:33: b8:78:80:d4:7c:f5:eb:89:2c:b8:26:ff:b4:a2:1f:ef:6e:ab: 6a:9c:2c:8e:77:76:79:26:d0:75:ca:9e:88:e5:4e:33:57:20: b6:61:06:88:49:7f:24:57:e0:61:0a:b8:d6:78:a1:92:02:df: e5:46:66:07:e0:8d:b9:b8:69:1f:f1:fa:c0:6b:c1:26:3c:d3: 29:a8:20:ee:42:47:11:a8:f0:47:31:8d:f8:f8:ba:92:19:28: 7b:ca:b3:a2:6e:43:1c:7e:8a:ba:24:97:d8:c7:84:31:68:d9: bf:12:17:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXQBYjLlV1VMAIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ2ZmM5YWMtZWFhZC00Yzg0LTlmZmMtZThlYTMwZmEyNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2lnP1b67HrlEUKaaVmxsi8ZMCrnXiUVFI2r RSSd11B820DSnzEC3qI5VwQWbjBRnn9xkPthszOfrHrDygcoouA6ojC3fY9uHpRv KRVHd/Xgh39dzWPfwaaW+d5qcnogm0AixLjC59t+4cNgi1Br2WqKoDO1R5b4Jk2Y DsCRJjaOddBe3D4kbAhWK/M6Smws1zfCROIDzQBFsZsUmYeue7PZZjAbrws0IRCp 24QbN4+m65ryDlEN7gaxPqdXVLWR/MAT2FR+dWo1crzp4tpV+9ZkhBs9ARvUfhHT VymciRu9JcKOXExGCloee7ZpP5ALi+3p39KmJ57uddUvKeMEdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILCIcyQ5KI8i6XbLNMgE+/HJOtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvNTdiMmIxMjEtYzQ5ZC0z Mjg3LWFjZWEtZGFhNzZlNDQzOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAxAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrEA31W5PdRekGatmDVLGcKSHzSQE1FrBnvggm0vFrzlcIUjENv cMm1LFB6//tLWKy06fg1Urjnj7c2H5bYt01QGvmrV7hnyUmMYBHKYjmjpxApNRN/ 9DRNbDMTJiiye0E0x2pN4cDOafgYGL3j1MFVK8Fx2E1WuPPB2Zr/rNZjjFTqNCk/ foR63ZujF57MM7h4gNR89euJLLgm/7SiH+9uq2qcLI53dnkm0HXKnojlTjNXILZh BohJfyRX4GEKuNZ4oZIC3+VGZgfgjbm4aR/x+sBrwSY80ymoIO5CRxGo8Ecxjfj4 upIZKHvKs6JuQxx+irokl9jHhDFo2b8SF/o= -----END CERTIFICATE-----Generated at Tue Sep 22 13:21:44 2026 by rpki-client