$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa File: a20c2df9-68c3-3920-812e-1578e81c4ea6.roa (raw, json) Hash identifier: OdxBib5ubEOjXAaGPLFWkXbvrAxEBRloE6Wg13RTXL4= Subject key identifier: 0C:A4:6B:03:C5:4B:08:C3:FA:CD:13:92:22:F1:B2:53:96:D5:8E:0B Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F225D04FCCE27879BCCA9CB80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 397423 IP address blocks: 2604:7580:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:04:fc:ce:27:87:9b:cc:a9:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=1320e27d-5172-48e6-a114-8bfbee435d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:10:81:16:cd:47:af:d3:73:cc:78:ef:3e: c2:a3:10:93:35:a2:18:d2:a2:40:8a:15:85:ec:28: 1f:02:f4:74:68:d2:95:73:2c:3b:fe:bd:3d:4d:d5: 29:3d:06:17:01:16:3e:d2:bc:02:06:67:22:cc:2d: 4c:b6:d4:92:7a:08:1a:bb:d6:05:34:b7:32:ba:e8: bf:90:0d:de:d7:31:1f:1c:dd:85:7f:24:61:d5:b5: 87:45:b6:34:e3:0c:7e:a3:f9:c1:bb:ee:03:77:2b: ef:be:80:9a:55:68:85:0c:6d:27:04:d2:57:96:8e: 41:41:12:02:b1:10:3c:18:0c:22:15:32:05:91:1d: d4:8f:53:30:ea:43:d6:d8:3b:e8:d4:08:d4:9b:fd: 76:47:88:1e:b2:40:55:a0:99:57:e9:cb:f8:d3:67: aa:da:d6:a3:a2:d4:31:52:ef:20:69:ee:a9:b9:d5: da:a7:69:61:4d:7b:ed:83:58:87:55:df:87:3e:7b: 24:d4:7b:29:6b:99:b9:15:98:09:29:55:fa:7b:81: 2f:85:a5:8a:44:23:c0:12:d4:e6:c4:8f:26:fa:21: 29:4a:ac:dd:ff:34:85:22:82:98:ed:f4:8a:ac:37: b2:20:6e:e4:b4:1e:eb:87:4d:d2:10:0c:c4:f7:c8: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A4:6B:03:C5:4B:08:C3:FA:CD:13:92:22:F1:B2:53:96:D5:8E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ea:99:6d:f7:04:ec:f6:69:39:04:f7:a9:9a:b2:a3:81:5d: a6:58:be:7a:6c:e6:0d:57:8c:9a:ed:ea:50:91:d6:99:31:7b: 51:44:01:cc:5d:69:f9:96:93:24:85:ac:c4:98:f5:1a:43:e1: d2:99:88:17:36:05:23:c6:40:36:b3:fb:dd:41:c1:db:b6:4c: 93:9d:d1:03:a6:e0:df:16:fc:f1:f4:fc:8e:6a:c9:9f:96:c4: e2:d4:82:32:44:57:d8:be:4b:e1:72:3b:af:f7:ee:52:a6:b3: 6b:26:60:fb:51:23:4e:8f:17:fb:83:0c:7b:c5:8f:7e:f5:9f: d2:cc:ef:07:cf:0d:0c:ab:1b:4c:5b:bc:97:5d:ef:3e:4b:1c: f4:ee:28:ad:72:93:77:af:1d:2e:57:40:ce:72:b7:87:34:d9: 41:d9:56:bd:bf:dc:62:86:49:ca:98:3e:c6:69:b1:5e:5a:b6: 77:e5:5e:72:18:b3:8a:d7:a0:89:f3:76:bd:2c:81:c3:05:e7: 1b:fa:b0:b1:e0:00:86:4f:56:2c:bc:5f:11:90:ef:c4:a6:19: bc:a7:0d:9b:0f:5f:d6:5f:a8:36:31:12:ab:b1:0b:80:bb:b6: 28:d3:79:5e:b6:33:1e:0d:03:17:d5:6a:33:f7:b7:03:e1:19: 76:4e:c0:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXQT8zieHm8ypy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MTMyMGUyN2QtNTE3Mi00OGU2LWExMTQtOGJmYmVlNDM1ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVoQgRbNR6/Tc8x47z7CoxCTNaIY0qJAihWF 7CgfAvR0aNKVcyw7/r09TdUpPQYXARY+0rwCBmcizC1MttSSeggau9YFNLcyuui/ kA3e1zEfHN2FfyRh1bWHRbY04wx+o/nBu+4DdyvvvoCaVWiFDG0nBNJXlo5BQRIC sRA8GAwiFTIFkR3Uj1Mw6kPW2Dvo1AjUm/12R4geskBVoJlX6cv402eq2tajotQx Uu8gae6pudXap2lhTXvtg1iHVd+HPnsk1Hspa5m5FZgJKVX6e4EvhaWKRCPAEtTm xI8m+iEpSqzd/zSFIoKY7fSKrDeyIG7ktB7rh03SEAzE98gfTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAykawPFSwjD+s0TkiLxslOW1Y4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTIwYzJkZjktNjhjMy0z OTIwLTgxMmUtMTU3OGU4MWM0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfqmW33BOz2aTkE96masqOBXaZYvnps5g1XjJrt6lCR1pkxe1FE AcxdafmWkySFrMSY9RpD4dKZiBc2BSPGQDaz+91Bwdu2TJOd0QOm4N8W/PH0/I5q yZ+WxOLUgjJEV9i+S+FyO6/37lKms2smYPtRI06PF/uDDHvFj371n9LM7wfPDQyr G0xbvJdd7z5LHPTuKK1yk3evHS5XQM5yt4c02UHZVr2/3GKGScqYPsZpsV5atnfl XnIYs4rXoInzdr0sgcMF5xv6sLHgAIZPViy8XxGQ78SmGbynDZsPX9ZfqDYxEqux C4C7tijTeV62Mx4NAxfVajP3twPhGXZOwOY= -----END CERTIFICATE-----Generated at Sun Sep 20 15:54:39 2026 by rpki-client