$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa File: 5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json) Hash identifier: Rb0uceP5o+8ZnLIVtFt2GTJqV1cKojU+zNV7ImncDu8= Subject key identifier: 84:D0:4E:EE:D4:B9:A8:50:5F:EF:79:13:C0:4F:71:FE:ED:88:0E:14 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F4328584F506D476CF2CA07F21C0CD460 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:47:6c:f2:ca:07:f2:1c:0c:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3099c34a-da72-49f6-93b4-6cd21a336072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:cc:e3:7d:42:1c:2d:d2:6e:43:74:30:bb: 02:0f:ba:b2:b3:c5:6d:ec:3b:93:69:d1:64:82:e0: cf:09:ce:c4:4f:4e:62:aa:b1:d9:2c:14:37:e7:d9: e2:3c:eb:12:d7:76:1b:26:57:90:a3:71:38:ca:a2: 86:b2:b8:b4:b4:14:b9:95:64:4e:30:97:40:38:9e: 2e:67:64:0f:58:27:aa:46:43:c9:92:a1:a4:4c:ca: 5b:7f:43:54:e4:36:e8:90:b7:aa:2b:f6:26:cd:13: 75:ca:a5:f3:5b:2c:3a:69:9b:d0:49:b2:97:32:2e: 48:ec:95:6e:8f:48:d5:2e:6c:b7:27:b0:d4:8f:7f: 6e:b6:16:fe:7f:93:c6:e2:c2:db:bf:da:92:9e:13: d2:b2:56:be:75:18:79:d0:71:3f:34:ba:8f:15:fd: 33:4f:89:23:27:d7:04:b9:dc:20:40:0c:81:f4:f8: 52:03:63:3c:de:cb:24:66:11:a6:ca:af:c0:8e:f4: 3b:5e:a1:3e:ae:2a:e5:01:d9:66:8d:c5:b3:3b:b7: 3e:0a:a4:75:1d:c2:8f:6a:fc:f5:fc:c1:7e:83:c4: 8f:93:f0:87:94:de:99:90:fc:a3:dd:fd:61:40:82: 01:cf:22:78:79:9d:46:50:08:4c:73:02:85:5c:e8: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:4E:EE:D4:B9:A8:50:5F:EF:79:13:C0:4F:71:FE:ED:88:0E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a2:b6:cd:19:c6:99:bb:85:9c:ac:57:89:7c:32:c1:09:24: 39:b2:05:f7:b2:ef:44:7d:c2:15:4e:d1:9f:fb:6f:fd:79:fe: 51:1d:f5:2b:f7:52:df:ab:d3:ba:37:d2:a3:46:75:3d:22:74: 99:c1:10:77:ea:68:0d:58:fa:c2:f3:ea:4f:18:a3:e2:fc:c8: 47:a1:91:6a:f6:de:eb:ce:0a:25:e1:5e:40:98:48:86:f9:74: 45:29:c8:e0:99:1f:28:47:ae:e4:d8:75:8f:f0:3b:96:b9:7f: b6:84:a3:ba:4c:43:67:08:36:2a:ab:96:48:48:7b:ca:ba:f9: 5a:62:bc:08:d8:f4:5c:c5:bd:b7:69:19:70:20:38:3b:d5:b4: bb:89:ef:af:12:a6:80:df:04:df:07:c6:d6:79:1c:38:93:4d: 2e:59:3d:d0:80:ed:d6:19:72:82:bc:2a:e1:14:70:e3:1c:54: a6:a5:13:48:75:b6:5e:5a:5a:12:1f:57:e2:f2:25:44:0b:10: 98:0a:c8:4f:17:b0:3e:6c:76:40:5a:60:e2:32:ee:cd:ad:d9: 96:ac:4b:20:0f:22:02:5e:b4:ab:8e:4d:e0:03:c4:da:10:3a: c9:be:ee:93:f1:13:ad:2a:c3:e6:9d:91:1c:f5:4e:ae:3c:da: 0a:36:e3:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9QbUds8soH8hwM1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MzA5OWMzNGEtZGE3Mi00OWY2LTkzYjQtNmNkMjFhMzM2MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoDM431CHC3SbkN0MLsCD7qys8Vt7DuTadFk guDPCc7ET05iqrHZLBQ359niPOsS13YbJleQo3E4yqKGsri0tBS5lWROMJdAOJ4u Z2QPWCeqRkPJkqGkTMpbf0NU5DbokLeqK/YmzRN1yqXzWyw6aZvQSbKXMi5I7JVu j0jVLmy3J7DUj39uthb+f5PG4sLbv9qSnhPSsla+dRh50HE/NLqPFf0zT4kjJ9cE udwgQAyB9PhSA2M83sskZhGmyq/AjvQ7XqE+rirlAdlmjcWzO7c+CqR1HcKPavz1 /MF+g8SPk/CHlN6ZkPyj3f1hQIIBzyJ4eZ1GUAhMcwKFXOhqHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFITQTu7UuahQX+95E8BPcf7tiA4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWRhODEzYzYtMzM2Mi0z YTE1LThjOGYtMDFkOTMzZTExMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESits0Zxpm7hZysV4l8MsEJJDmyBfey70R9whVO0Z/7b/15/lEd 9Sv3Ut+r07o30qNGdT0idJnBEHfqaA1Y+sLz6k8Yo+L8yEehkWr23uvOCiXhXkCY SIb5dEUpyOCZHyhHruTYdY/wO5a5f7aEo7pMQ2cINiqrlkhIe8q6+VpivAjY9FzF vbdpGXAgODvVtLuJ768SpoDfBN8HxtZ5HDiTTS5ZPdCA7dYZcoK8KuEUcOMcVKal E0h1tl5aWhIfV+LyJUQLEJgKyE8XsD5sdkBaYOIy7s2t2ZasSyAPIgJetKuOTeAD xNoQOsm+7pPxE60qw+adkRz1Tq482go246c= -----END CERTIFICATE-----Generated at Mon Sep 28 12:33:15 2026 by rpki-client