$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa File: d848c8af-0652-3114-8455-08a34c4dfef3.roa (raw, json) Hash identifier: 6GZMTZq92UlTnAj4VTpmw2S5SSgMZ88NvAPn4crCBuQ= Subject key identifier: 4C:FE:91:ED:5E:D8:12:F1:83:FF:48:97:30:26:0B:C6:AD:E6:4D:51 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584F00DCC3D44D7AAFD99EC5E2C0 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 2604:1f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c3:d4:4d:7a:af:d9:9e:c5:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=9113b484-6891-41f8-a07e-eaeb0cfb4b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:7d:69:ef:f2:28:f9:92:61:56:31:30:c8: 3b:45:12:64:93:7e:8e:c7:1e:82:c4:9f:d1:aa:f0: 25:91:29:e5:a3:49:c0:21:d5:b4:39:0d:34:68:30: cf:31:0b:b0:b9:91:97:af:63:af:71:85:5e:9c:92: 8b:91:98:7f:5e:6f:5e:56:30:07:30:f9:2b:08:cd: a2:77:df:9f:13:24:be:bf:e1:18:5d:ef:1c:8c:9d: ec:6d:58:a5:d0:24:70:7a:16:a0:01:f2:f8:0e:1f: e1:da:6f:7e:b4:08:0b:1a:d5:1a:e9:8b:54:94:8e: 4c:36:ec:54:da:13:d5:8f:97:6e:64:70:25:fb:a7: d4:fa:10:0e:58:78:43:73:57:03:f3:e9:b8:b1:e5: 2a:6e:36:15:4a:ed:28:c2:dc:21:e7:e8:2a:44:46: 36:d5:f1:cf:7c:32:41:0b:f1:32:8a:99:9f:59:0d: 9a:6b:75:a1:11:a3:28:81:61:95:ea:1c:d5:9b:f7: db:08:17:8e:14:83:9d:18:f9:88:11:6b:b3:c2:72: 13:65:59:63:c3:cd:ab:1e:6c:eb:1f:db:25:20:59: b2:af:83:08:a8:c6:40:12:7d:36:b7:f7:8f:89:29: 6d:22:c8:46:b8:5a:59:cf:e8:f4:58:84:07:dd:29: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FE:91:ED:5E:D8:12:F1:83:FF:48:97:30:26:0B:C6:AD:E6:4D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c8:19:05:2b:9e:07:10:17:53:50:fb:5a:45:44:36:e7:0c: 1b:00:c4:3a:02:f9:fe:dd:33:34:b4:da:f1:5a:66:b2:bf:9b: 91:f8:ac:77:aa:8f:78:c3:1f:2a:a1:77:04:c3:9c:91:9e:d9: e0:46:62:c7:90:9e:03:8e:68:5d:11:84:f6:82:21:e6:37:12: c8:cb:29:08:ee:03:d5:f7:d8:7e:a5:b0:3c:5c:2f:1d:f8:4a: dc:4a:3d:44:68:09:a8:51:f8:5c:d5:8e:c9:01:c1:78:fc:04: 81:fc:cc:77:8c:e3:78:6e:00:7e:c5:09:3d:98:df:75:7d:a9: 47:10:8c:ef:64:3b:0d:b8:3a:46:6f:46:61:b2:66:56:0d:36: 91:49:e6:c4:eb:ce:9a:c2:9f:d6:6d:79:cd:e2:fa:78:fe:81: 7f:61:b9:1c:98:25:93:fe:bc:35:4d:70:2e:68:37:bb:27:dc: 03:4b:2b:86:b6:67:9c:c1:1b:e5:37:fe:9a:8f:fc:5c:3d:c6: e1:40:e5:45:77:7c:c0:cf:8f:8d:46:e2:39:b5:98:17:fa:3d: 03:33:82:99:d2:5f:80:ad:26:1b:d1:5c:de:44:a0:55:e5:81: f2:a3:60:d7:5b:a3:05:1d:77:b5:22:bf:0c:ff:57:65:77:2a: c4:5a:66:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8A3MPUTXqv2Z7F4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk OTExM2I0ODQtNjg5MS00MWY4LWEwN2UtZWFlYjBjZmI0YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR59ae/yKPmSYVYxMMg7RRJkk36Oxx6CxJ/R qvAlkSnlo0nAIdW0OQ00aDDPMQuwuZGXr2OvcYVenJKLkZh/Xm9eVjAHMPkrCM2i d9+fEyS+v+EYXe8cjJ3sbVil0CRwehagAfL4Dh/h2m9+tAgLGtUa6YtUlI5MNuxU 2hPVj5duZHAl+6fU+hAOWHhDc1cD8+m4seUqbjYVSu0owtwh5+gqREY21fHPfDJB C/EyipmfWQ2aa3WhEaMogWGV6hzVm/fbCBeOFIOdGPmIEWuzwnITZVljw82rHmzr H9slIFmyr4MIqMZAEn02t/ePiSltIshGuFpZz+j0WIQH3SmvTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEz+ke1e2BLxg/9IlzAmC8at5k1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvZDg0OGM4YWYtMDY1Mi0z MTE0LTg0NTUtMDhhMzRjNGRmZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzIGQUrngcQF1NQ+1pFRDbnDBsAxDoC+f7dMzS02vFaZrK/m5H4 rHeqj3jDHyqhdwTDnJGe2eBGYseQngOOaF0RhPaCIeY3EsjLKQjuA9X32H6lsDxc Lx34StxKPURoCahR+FzVjskBwXj8BIH8zHeM43huAH7FCT2Y33V9qUcQjO9kOw24 OkZvRmGyZlYNNpFJ5sTrzprCn9Ztec3i+nj+gX9huRyYJZP+vDVNcC5oN7sn3ANL K4a2Z5zBG+U3/pqP/Fw9xuFA5UV3fMDPj41G4jm1mBf6PQMzgpnSX4CtJhvRXN5E oFXlgfKjYNdbowUdd7Uivwz/V2V3KsRaZgI= -----END CERTIFICATE-----Generated at Tue Sep 22 09:33:13 2026 by rpki-client