$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa File: fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa (raw, json) Hash identifier: QrbOUg1/G4KMF2b9WP0++ZRlM8PlP2TJvgSo6mWSncE= Subject key identifier: B0:AA:DB:50:1A:F6:6D:42:00:5F:5E:7A:0A:87:12:A2:9E:E0:53:37 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584F00DCD2EB4BEB52252220AAE7 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2604:1f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d2:eb:4b:eb:52:25:22:20:aa:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=842a0643-1230-4fa3-a456-c929d5a52ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:db:1b:8c:34:e5:eb:18:a1:d7:f5:f5:4a: 18:a8:6b:1f:37:70:60:c0:f5:b9:b4:aa:ba:92:6c: 1c:d7:c0:1c:4a:2e:cb:4e:23:e8:c7:e7:6b:9e:57: 7d:12:c8:a9:01:85:41:b6:de:4d:d0:2f:bc:84:47: d7:c5:6d:81:eb:84:d8:72:0a:c0:9c:40:1f:29:28: 8f:4e:e0:c1:37:cc:1c:89:09:34:c6:72:c6:c7:d4: df:fc:5e:c4:70:24:2f:b5:c3:7b:1a:d0:01:ce:0f: 4c:27:56:20:9c:b6:fa:8f:88:e9:b2:12:b7:40:8c: ce:5f:58:99:d3:3b:27:9a:6f:13:d2:75:80:dd:3f: d8:bc:08:58:26:c2:56:ea:7e:6d:cb:42:b0:c6:54: 05:59:68:c8:18:c7:bc:f0:01:ce:8e:80:7a:c0:2e: 3f:3c:c3:64:90:be:99:a0:76:7d:0f:73:d7:70:51: db:7e:41:a1:9c:5d:66:24:ba:11:78:ba:59:a3:c8: 60:61:0b:da:8a:ee:aa:55:e2:9e:d9:22:b2:93:ba: 70:66:43:e6:a9:ba:25:3c:97:32:3c:ff:36:ca:5b: f4:28:b7:e3:31:33:8b:73:bc:53:c3:f3:df:bb:79: 06:ee:42:98:5f:7f:45:f4:82:73:4e:18:af:7d:ef: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AA:DB:50:1A:F6:6D:42:00:5F:5E:7A:0A:87:12:A2:9E:E0:53:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:df:af:a5:08:0f:cf:7f:6d:59:0b:af:dd:87:ce:87:57:c8: b6:e4:25:5d:25:8e:80:7b:95:0b:6a:60:81:6f:b3:9f:8c:58: 02:66:a6:b8:cb:30:df:36:40:f1:40:27:22:37:c2:9b:22:34: e4:b6:94:9e:b0:7c:71:6f:87:4f:f2:51:7d:ff:9f:ba:9a:d8: 80:dd:76:c3:d5:67:4f:be:b2:98:0c:6a:66:c0:6c:e8:a0:92: f1:12:60:1f:80:6c:86:9f:b2:b4:58:34:76:19:a8:48:18:5a: 02:83:74:dc:d3:c8:3f:88:73:2d:1f:8c:de:42:8d:19:e8:d4: 96:ea:9d:a0:3c:71:66:97:aa:b4:cb:83:15:e5:08:cd:36:35: b6:f8:9e:0f:61:35:dc:6a:33:95:e0:b3:8a:53:43:6b:88:16: f2:1a:35:16:de:7a:b5:b4:80:df:1c:af:96:88:ad:fd:a5:a4: 8f:28:b8:db:84:5e:ab:a2:e4:92:35:cb:73:03:e5:25:d5:ba: 4a:a3:d0:7a:4c:45:98:0a:80:a7:47:99:e3:30:8f:02:9a:9a: 8d:da:e7:27:d9:14:cb:f7:7a:db:d0:7c:60:a8:94:23:bc:86: c1:b2:ac:55:a8:57:ef:3a:7e:86:94:28:cb:32:1e:58:9e:a4: 77:28:b8:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8A3NLrS+tSJSIgqucwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ODQyYTA2NDMtMTIzMC00ZmEzLWE0NTYtYzkyOWQ1YTUyZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEjbG4w05esYodf19UoYqGsfN3BgwPW5tKq6 kmwc18AcSi7LTiPox+drnld9EsipAYVBtt5N0C+8hEfXxW2B64TYcgrAnEAfKSiP TuDBN8wciQk0xnLGx9Tf/F7EcCQvtcN7GtABzg9MJ1YgnLb6j4jpshK3QIzOX1iZ 0zsnmm8T0nWA3T/YvAhYJsJW6n5ty0KwxlQFWWjIGMe88AHOjoB6wC4/PMNkkL6Z oHZ9D3PXcFHbfkGhnF1mJLoReLpZo8hgYQvaiu6qVeKe2SKyk7pwZkPmqbolPJcy PP82ylv0KLfjMTOLc7xTw/Pfu3kG7kKYX39F9IJzThivfe+cGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLCq21Aa9m1CAF9eegqHEqKe4FM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvZmM4ZTViMDUtYTlmYi0z NjgxLWFmMzgtNTBhMjRiYzEzMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHfr6UID89/bVkLr92HzodXyLbkJV0ljoB7lQtqYIFvs5+MWAJm prjLMN82QPFAJyI3wpsiNOS2lJ6wfHFvh0/yUX3/n7qa2IDddsPVZ0++spgMambA bOigkvESYB+AbIafsrRYNHYZqEgYWgKDdNzTyD+Icy0fjN5CjRno1JbqnaA8cWaX qrTLgxXlCM02Nbb4ng9hNdxqM5Xgs4pTQ2uIFvIaNRbeerW0gN8cr5aIrf2lpI8o uNuEXqui5JI1y3MD5SXVukqj0HpMRZgKgKdHmeMwjwKamo3a5yfZFMv3etvQfGCo lCO8hsGyrFWoV+86foaUKMsyHliepHcouDo= -----END CERTIFICATE-----Generated at Tue Sep 22 14:36:12 2026 by rpki-client