$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa File: a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa (raw, json) Hash identifier: 2+GNENP+F6bGrv0vefwuvRTZ8MOGPO7OnOE2NgEWyVc= Subject key identifier: D9:8A:2D:F1:8D:78:3E:8C:72:19:2F:98:E3:5E:4C:7A:2D:49:C1:AF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF717B5BD686BE90DB1E68CA4 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397242 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b5:bd:68:6b:e9:0d:b1:e6:8c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d9fa34aa-a9ba-4d92-b837-d361b02c5e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:c6:d3:c5:de:bb:a8:46:08:01:ab:7d:f8: 02:d0:cb:96:13:b0:48:5f:ef:08:fe:02:0e:4f:28: 54:97:92:91:7b:98:d5:ce:27:f1:1d:93:82:ca:33: 56:e7:a7:78:5e:1c:33:41:ec:44:55:7d:69:f7:2f: ba:f1:b4:90:dd:70:db:90:ab:29:9c:41:2e:b6:ec: 2d:1f:e8:1e:63:dc:06:67:72:45:29:4c:65:03:4c: 67:50:9c:31:e1:73:38:e0:82:20:b4:a6:e2:31:7d: fd:87:0e:11:3e:e8:8a:1f:e2:c0:b4:aa:28:01:b7: d0:c5:8e:86:17:2a:45:0e:f6:26:4f:28:9e:5f:19: fb:bf:8c:84:00:82:c8:a7:51:cb:b0:56:59:c8:b3: 35:85:dc:ed:ce:ee:5e:7e:40:c8:dc:b8:d6:94:ec: d9:51:a0:9f:92:f0:40:51:aa:34:8f:81:7e:ea:6e: c2:4f:e9:bc:bf:5d:6b:2b:81:7e:50:90:1b:15:a2: 3a:dc:79:f1:e1:44:c4:ac:a5:c0:c1:6d:4b:34:45: b4:5f:df:1a:bb:e6:09:ba:24:5a:dd:c6:c3:dd:25: d8:db:9b:64:1e:8c:bc:9a:22:aa:92:39:c1:49:11: b8:70:25:7f:17:59:5e:21:c0:22:ab:1d:4f:e5:f5: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8A:2D:F1:8D:78:3E:8C:72:19:2F:98:E3:5E:4C:7A:2D:49:C1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4a:43:af:8a:99:73:c0:ad:8a:05:bd:5e:1a:72:41:ac:58: dc:0e:3b:64:ce:44:1a:0c:3e:d9:ae:ec:74:0b:b6:17:e2:ab: b6:92:6a:16:c9:04:b3:61:87:59:da:46:7b:3b:06:5a:0a:3c: 95:0d:21:66:8d:ea:6a:7b:d8:60:85:5e:2f:68:b8:b7:c3:f4: 54:c3:b8:55:99:0b:e9:5c:8d:6a:ad:d3:b8:91:9d:98:bc:31: ee:2b:34:12:6c:7a:1b:6a:97:2d:23:cd:b3:77:59:f7:2c:ae: 2d:8d:ca:1a:6c:d9:d0:08:e7:ad:40:e9:9f:f7:3a:74:e0:87: f8:a7:f8:21:7d:6a:e7:fe:7c:f6:e2:23:29:b8:45:66:8b:f2: d2:37:d9:bc:e4:c1:67:51:b8:a4:f7:a6:d5:41:41:08:42:85: e0:8b:96:f7:b2:44:86:35:cc:5a:8f:1b:46:13:8b:a3:6f:45: 14:56:6e:4e:fa:05:56:17:54:6c:0d:12:07:44:0c:4d:e5:39: 6e:15:7d:b3:47:68:24:4d:37:6c:55:4b:e7:8c:0b:f7:b0:05: af:de:97:a1:9d:71:2c:7d:2c:21:db:a2:59:b7:e8:a6:d0:80: 3c:5d:2a:3a:5d:c0:6a:4c:88:7a:e2:0c:c3:99:d7:ea:9e:f3: 9b:9f:66:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7W9aGvpDbHmjKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDlmYTM0YWEtYTliYS00ZDkyLWI4MzctZDM2MWIwMmM1ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld/G08Xeu6hGCAGrffgC0MuWE7BIX+8I/gIO TyhUl5KRe5jVzifxHZOCyjNW56d4XhwzQexEVX1p9y+68bSQ3XDbkKspnEEutuwt H+geY9wGZ3JFKUxlA0xnUJwx4XM44IIgtKbiMX39hw4RPuiKH+LAtKooAbfQxY6G FypFDvYmTyieXxn7v4yEAILIp1HLsFZZyLM1hdztzu5efkDI3LjWlOzZUaCfkvBA Uao0j4F+6m7CT+m8v11rK4F+UJAbFaI63Hnx4UTErKXAwW1LNEW0X98au+YJuiRa 3cbD3SXY25tkHoy8miKqkjnBSRG4cCV/F1leIcAiqx1P5fVEMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmKLfGNeD6MchkvmONeTHotScGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTU1NmFkYzUtNGY4Yi0z YjhmLTlhM2ItM2UyYTA3ZTVhODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINKQ6+KmXPArYoFvV4ackGsWNwOO2TORBoMPtmu7HQLthfiq7aS ahbJBLNhh1naRns7BloKPJUNIWaN6mp72GCFXi9ouLfD9FTDuFWZC+lcjWqt07iR nZi8Me4rNBJsehtqly0jzbN3Wfcsri2Nyhps2dAI561A6Z/3OnTgh/in+CF9auf+ fPbiIym4RWaL8tI32bzkwWdRuKT3ptVBQQhCheCLlveyRIY1zFqPG0YTi6NvRRRW bk76BVYXVGwNEgdEDE3lOW4VfbNHaCRNN2xVS+eMC/ewBa/el6GdcSx9LCHbolm3 6KbQgDxdKjpdwGpMiHriDMOZ1+qe85ufZn8= -----END CERTIFICATE-----Generated at Tue Sep 22 22:09:18 2026 by rpki-client