$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa File: 56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa (raw, json) Hash identifier: uYlg3vu2On0uJx/XHK2BRsqf/wco641soOSiQNxX2YQ= Subject key identifier: DE:A9:BA:44:BA:32:31:36:87:44:4D:00:51:04:19:BC:17:6F:FB:7C Certificate issuer: /CN=df17821c-c81a-4f1b-baba-e8419dc81508 Certificate serial: 010D0C9F4328584F11A14C9A350354F60EC36E00 Authority key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 23307 IP address blocks: 2620:8b:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4c:9a:35:03:54:f6:0e:c3:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df17821c-c81a-4f1b-baba-e8419dc81508 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=78e35839-c670-4d00-b95a-633ebcde08d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:01:74:53:cf:b2:69:54:31:cb:b4:eb:0b: 5f:0c:01:f6:c9:03:61:12:4b:5c:e8:7d:49:c7:48: 07:23:f8:7a:af:ce:ca:fc:77:5a:4d:74:62:fd:cf: 15:83:ff:3b:80:25:4e:d7:06:49:b4:e1:8b:9c:b4: 1e:93:d2:d6:7e:6a:92:0e:7a:ee:53:51:aa:0e:2f: cb:20:55:83:77:54:e3:c3:2c:15:7e:b4:73:a6:b0: 61:88:a5:e5:9d:f0:ad:c2:2a:14:3d:9b:fc:e6:e9: 56:b6:00:98:c8:19:6a:2e:89:ad:6d:81:bc:51:96: c0:80:ff:b3:f6:fd:49:a4:1d:d9:34:d0:9d:83:18: 76:d5:3f:a2:d9:f1:7d:84:a5:50:01:74:c9:72:41: 23:e3:a5:71:76:ed:3a:d1:cf:25:b2:04:3c:d8:90: 26:21:d4:7d:5b:23:c2:b5:90:7c:21:ab:e4:2f:de: 30:b3:8f:f2:88:b8:24:83:75:b3:ed:e0:62:e9:0c: 2f:bf:2f:e5:77:5b:9e:3e:17:3c:33:62:35:91:e0: cc:50:c8:d8:58:28:34:0b:23:de:45:c8:bf:a9:94: d1:50:98:62:dc:14:17:c1:50:cf:34:a8:04:c3:c4: 08:fe:64:c7:27:a9:c3:c2:c7:71:ca:dc:5d:40:99: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A9:BA:44:BA:32:31:36:87:44:4D:00:51:04:19:BC:17:6F:FB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl X509v3 Authority Key Identifier: keyid:EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer sbgp-ipAddrBlock: critical IPv6: 2620:8b:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ea:c9:20:c7:30:61:55:88:e3:31:0c:87:c8:e8:96:82:e3: 62:a7:66:30:91:b4:7e:24:51:2b:63:76:ec:95:5c:1a:1e:ee: 8e:cd:33:e5:f1:60:f7:93:14:82:55:c5:5e:f5:11:db:92:6a: 4b:54:07:f0:11:ea:8a:ac:00:3c:ec:c6:64:f8:66:ed:97:12: 6d:16:b5:3f:a2:73:47:5b:a4:89:8c:79:87:39:66:73:de:03: 0b:0e:75:ed:96:68:84:88:f4:f5:05:bc:c6:92:d8:99:0c:53: b1:81:53:04:5e:04:37:d0:9d:fc:16:2a:a5:1e:49:7a:43:55: a4:59:85:82:74:91:d9:ef:28:2c:2d:29:2b:11:c2:02:d2:02: d3:f9:63:0d:cb:42:8b:1d:ed:65:92:aa:03:2f:40:ac:36:51: c9:f1:12:45:42:fa:76:45:2a:a0:88:dc:95:7b:c7:71:ab:8f: 24:c0:f9:68:32:1b:a9:31:03:8d:80:ea:31:8d:e8:cc:80:66: 84:fc:ff:cf:25:a7:4c:68:95:b8:c3:ce:0b:e3:3a:59:75:bb: f5:c0:e9:0c:02:a8:02:1d:d5:1a:da:f7:8a:df:98:99:45:66: f5:a0:6f:87:27:25:76:ef:8e:a0:67:f3:6a:e1:d8:c9:ca:b8: 13:5c:36:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoUyaNQNU9g7DbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNzgyMWMtYzgxYS00ZjFiLWJhYmEtZTg0MTlkYzgx NTA4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhlMzU4MzktYzY3MC00ZDAwLWI5NWEtNjMzZWJjZGUwOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+oBdFPPsmlUMcu06wtfDAH2yQNhEktc6H1J x0gHI/h6r87K/HdaTXRi/c8Vg/87gCVO1wZJtOGLnLQek9LWfmqSDnruU1GqDi/L IFWDd1TjwywVfrRzprBhiKXlnfCtwioUPZv85ulWtgCYyBlqLomtbYG8UZbAgP+z 9v1JpB3ZNNCdgxh21T+i2fF9hKVQAXTJckEj46Vxdu060c8lsgQ82JAmIdR9WyPC tZB8IavkL94ws4/yiLgkg3Wz7eBi6Qwvvy/ld1uePhc8M2I1keDMUMjYWCg0CyPe Rci/qZTRUJhi3BQXwVDPNKgEw8QI/mTHJ6nDwsdxytxdQJnR6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6pukS6MjE2h0RNAFEEGbwXb/t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3 ODIxYy1jODFhLTRmMWItYmFiYS1lODQxOWRjODE1MDgvNTZiOGQ5MWEtNGY3MC0z OWFkLWFkM2QtZjNhMjAxODlmYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGYxNzgyMWMtYzgxYS00ZjFiLWJh YmEtZTg0MTlkYzgxNTA4L2RmMTc4MjFjLWM4MWEtNGYxYi1iYWJhLWU4NDE5ZGM4 MTUwOC5jcmwwHwYDVR0jBBgwFoAU6qshJWbLBNm6o+ZieFUrt5rlFXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3ODIxYy1jODFhLTRmMWItYmFiYS1lODQx OWRjODE1MDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAi4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjqySDHMGFViOMxDIfI6JaC42KnZjCRtH4kUStjduyVXBoe7o7N M+XxYPeTFIJVxV71EduSaktUB/AR6oqsADzsxmT4Zu2XEm0WtT+ic0dbpImMeYc5 ZnPeAwsOde2WaISI9PUFvMaS2JkMU7GBUwReBDfQnfwWKqUeSXpDVaRZhYJ0kdnv KCwtKSsRwgLSAtP5Yw3LQosd7WWSqgMvQKw2UcnxEkVC+nZFKqCI3JV7x3GrjyTA +WgyG6kxA42A6jGN6MyAZoT8/88lp0xolbjDzgvjOll1u/XA6QwCqAId1Rra94rf mJlFZvWgb4cnJXbvjqBn82rh2MnKuBNcNnY= -----END CERTIFICATE-----Generated at Mon Sep 21 23:45:35 2026 by rpki-client