$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/2124fa57-9506-3900-9f54-44d075b5d3d9.roa File: 2124fa57-9506-3900-9f54-44d075b5d3d9.roa (raw, json) Hash identifier: 3p37g1+y3pH1YAtVZ2BSEn6SO7+kgqNbUDBwE/RJu90= Subject key identifier: E1:BB:4C:10:9D:FD:32:53:9C:B1:02:CF:92:A0:17:6A:26:7A:5D:E0 Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584F0C077FBAF72146347A89E840 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/2124fa57-9506-3900-9f54-44d075b5d3d9.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 26383 IP address blocks: 2605:e440:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:7f:ba:f7:21:46:34:7a:89:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=5a55e37e-4480-43fb-8770-8cc59064aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:5c:dc:1d:c6:ca:63:b2:bd:b5:e3:f7:a0: 66:c6:70:ee:3e:ff:cb:9c:87:15:00:fc:2d:6a:36: d2:5e:eb:cc:b7:c7:6a:55:1b:54:e1:30:9c:4a:7e: d7:ce:d4:2a:a0:31:d2:d3:67:36:a5:88:bf:20:01: b3:44:f4:f2:b4:ee:91:7a:1f:82:d8:28:6a:18:63: e8:71:1d:0b:30:eb:e8:77:e8:90:5a:5f:e2:ee:a5: 67:1c:f1:da:79:b0:5a:b9:8a:6a:dc:ef:ac:7b:b4: 37:2f:7d:9b:87:70:06:7a:8a:e1:42:e4:17:70:43: bc:4f:93:32:f5:48:74:fc:79:1e:f2:ba:81:ad:19: 82:36:de:c1:cf:76:1e:4b:4e:df:72:0f:dc:09:e5: a3:1a:89:ee:b9:41:f7:1f:d8:56:27:7a:95:b7:3f: 7c:89:fc:d4:4d:70:e0:ba:da:2f:27:06:23:4b:8d: d0:ca:07:6d:43:57:f8:f1:e4:1f:3a:d6:ea:7f:60: af:b3:e7:20:36:ae:db:8c:80:c2:e0:fb:b7:35:86: 3d:1f:ed:14:0c:c3:c8:81:ef:76:48:02:e7:e8:19: c7:23:ff:61:aa:ca:d1:19:6b:ff:0c:6d:d3:70:5a: 32:2e:d4:4d:e8:15:c5:87:4e:a5:17:ac:3d:22:85: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BB:4C:10:9D:FD:32:53:9C:B1:02:CF:92:A0:17:6A:26:7A:5D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/2124fa57-9506-3900-9f54-44d075b5d3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv6: 2605:e440:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b9:51:1e:cb:9e:f6:09:8b:fa:db:c6:8a:c4:08:e9:51:4e: 72:f1:18:4f:83:e1:20:9d:7a:af:45:e6:8e:75:26:04:e5:d9: cd:73:6b:f9:c9:76:9e:96:55:19:26:36:53:3d:43:aa:b6:83: ea:b8:dd:71:dc:29:69:b5:99:18:aa:f7:8c:37:91:f9:f7:c7: b2:73:d7:fd:da:00:f5:90:92:82:89:77:1e:86:20:ce:ea:98: 43:79:b5:69:77:2b:4e:3f:96:17:e3:40:b3:6d:88:b6:40:45: 2e:1c:65:42:c6:91:e5:c2:da:71:23:9b:41:1e:8c:69:41:d3: 94:79:94:f7:73:b1:26:0b:03:d1:b6:2a:ee:1d:0e:8c:78:db: bf:e0:72:44:20:d7:fd:ce:cb:a5:4f:c6:52:4b:8c:49:38:7e: 82:d3:81:f4:a0:3c:18:12:00:66:78:5d:4a:99:22:a8:23:ac: ea:a9:46:0b:9a:f9:61:25:21:d0:f2:bd:c8:54:d9:a9:f0:5b: 7e:fe:fc:06:07:20:bd:c0:27:0c:c6:ce:7b:de:04:7a:79:b6: 58:a4:55:4c:a1:d2:01:43:a5:0f:ee:87:f5:4a:63:e3:a7:15: 60:f8:5d:c9:c1:be:54:59:b0:4d:2f:2d:45:16:bc:ba:2b:a7: 8e:3d:de:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8MB3+69yFGNHqJ6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk NWE1NWUzN2UtNDQ4MC00M2ZiLTg3NzAtOGNjNTkwNjRhYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppRc3B3GymOyvbXj96BmxnDuPv/LnIcVAPwt ajbSXuvMt8dqVRtU4TCcSn7XztQqoDHS02c2pYi/IAGzRPTytO6Reh+C2ChqGGPo cR0LMOvod+iQWl/i7qVnHPHaebBauYpq3O+se7Q3L32bh3AGeorhQuQXcEO8T5My 9Uh0/Hke8rqBrRmCNt7Bz3YeS07fcg/cCeWjGonuuUH3H9hWJ3qVtz98ifzUTXDg utovJwYjS43QygdtQ1f48eQfOtbqf2Cvs+cgNq7bjIDC4Pu3NYY9H+0UDMPIge92 SALn6BnHI/9hqsrRGWv/DG3TcFoyLtRN6BXFh06lF6w9IoXSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOG7TBCd/TJTnLECz5KgF2omel3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvMjEyNGZhNTctOTUwNi0z OTAwLTlmNTQtNDRkMDc1YjVkM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB65UR7LnvYJi/rbxorECOlRTnLxGE+D4SCdeq9F5o51JgTl2c1z a/nJdp6WVRkmNlM9Q6q2g+q43XHcKWm1mRiq94w3kfn3x7Jz1/3aAPWQkoKJdx6G IM7qmEN5tWl3K04/lhfjQLNtiLZARS4cZULGkeXC2nEjm0EejGlB05R5lPdzsSYL A9G2Ku4dDox427/gckQg1/3Oy6VPxlJLjEk4foLTgfSgPBgSAGZ4XUqZIqgjrOqp Rgua+WElIdDyvchU2anwW37+/AYHIL3AJwzGznveBHp5tlikVUyh0gFDpQ/uh/VK Y+OnFWD4XcnBvlRZsE0vLUUWvLorp4493kw= -----END CERTIFICATE-----Generated at Mon Sep 21 10:28:47 2026 by rpki-client