$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa File: ddb106cb-5166-390c-ae06-ee99129ea34e.roa (raw, json) Hash identifier: hV+jxKrMsZwClmDf2ZxJcf5pKPnaxdl4PmfmK6jSKP8= Subject key identifier: 43:36:64:00:E6:2E:4B:B6:0B:85:09:86:9A:7F:30:7C:0D:BF:72:94 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584F119CF401F94E9EF127794700 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 394354 IP address blocks: 2620:10a:801f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f4:01:f9:4e:9e:f1:27:79:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=90c316e7-cc05-4306-a8aa-1b19999ebea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:66:9a:ec:47:b3:24:bc:d3:cc:61:1f:f5: 1a:6c:c9:7a:66:83:4b:96:60:13:55:4b:89:55:a7: bf:9c:7e:c4:fa:83:3a:e3:ba:32:b7:67:78:4e:85: cd:a4:6e:d6:f5:4b:90:db:29:71:02:29:99:88:a9: 16:e0:94:7d:10:4b:99:ef:dc:ee:33:19:68:ef:b2: 87:9b:4a:ec:b4:74:be:2f:db:20:02:df:e4:7d:da: 0f:68:95:a5:12:3b:a8:25:63:c9:b1:6a:c1:bf:d8: ec:77:ab:d4:2b:3a:57:a4:09:eb:5c:96:72:b0:d2: 00:61:cc:1a:87:dc:3a:ec:18:0c:97:42:fd:16:e4: 8c:11:83:57:c1:b1:81:6c:24:ba:96:52:4d:67:b2: 9a:c1:48:a5:33:02:07:67:b7:a7:a8:9d:47:2a:9f: a9:db:07:34:a5:8e:96:4f:ca:13:4b:65:50:e3:00: c3:31:3f:f2:dd:3e:3e:8e:56:26:93:5c:78:2e:7d: 39:e4:cd:7c:a0:2d:ba:31:ec:f3:be:d3:4f:c8:be: 71:e5:fe:30:3b:4e:d1:4b:06:14:92:d5:60:ca:93: 6e:30:0f:8b:75:94:01:3b:45:37:5c:ae:9f:8a:af: 9b:f9:79:ae:bc:2c:bd:52:ab:56:96:2c:2b:b9:30: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:64:00:E6:2E:4B:B6:0B:85:09:86:9A:7F:30:7C:0D:BF:72:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:801f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d4:59:98:d6:3b:88:a0:e4:0e:b4:be:4e:86:eb:88:d0:32: 9b:6f:78:bb:0e:18:d1:7b:c3:ed:44:d8:14:3b:96:ef:6e:36: 94:04:2d:12:98:20:c5:8e:26:d7:d9:86:69:32:ab:88:5f:78: af:db:2e:06:12:52:90:e4:fa:ef:ed:91:e2:35:f6:b0:0f:c2: da:e5:01:07:f2:7e:12:7e:ad:b1:06:90:bc:b8:2b:b8:60:a9: d6:ba:12:38:cb:f7:17:6f:8c:25:85:36:02:fc:49:9c:43:d1: ab:a1:97:81:5a:57:99:39:47:8b:85:ce:eb:dc:93:98:61:1b: 90:93:9c:9b:bd:81:c7:b5:f7:35:ba:4e:81:2e:10:a9:6d:a2: 64:80:5c:8c:d4:25:7c:48:a8:dd:6b:5e:66:95:e8:f9:fa:b6: 29:52:79:7f:fd:e1:9b:83:08:36:ed:a8:dd:14:13:4b:37:d6: 1e:47:73:c7:d0:ed:88:2c:43:fc:f8:6d:04:b0:d7:38:98:69: 0b:16:4e:f7:15:bc:40:5c:29:72:05:a4:8c:59:b6:4f:75:39: b5:3a:d4:09:47:47:a4:77:a4:1e:68:bf:fc:a5:ed:21:6f:79: 61:2d:31:1b:95:9b:9d:3a:34:4e:d9:ee:ae:22:fc:e8:82:f0: 9d:8d:65:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnPQB+U6e8Sd5RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBjMzE2ZTctY2MwNS00MzA2LWE4YWEtMWIxOTk5OWViZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBtmmuxHsyS808xhH/UabMl6ZoNLlmATVUuJ Vae/nH7E+oM647oyt2d4ToXNpG7W9UuQ2ylxAimZiKkW4JR9EEuZ79zuMxlo77KH m0rstHS+L9sgAt/kfdoPaJWlEjuoJWPJsWrBv9jsd6vUKzpXpAnrXJZysNIAYcwa h9w67BgMl0L9FuSMEYNXwbGBbCS6llJNZ7KawUilMwIHZ7enqJ1HKp+p2wc0pY6W T8oTS2VQ4wDDMT/y3T4+jlYmk1x4Ln055M18oC26MezzvtNPyL5x5f4wO07RSwYU ktVgypNuMA+LdZQBO0U3XK6fiq+b+XmuvCy9UqtWliwruTCXGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEM2ZADmLku2C4UJhpp/MHwNv3KUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZGRiMTA2Y2ItNTE2Ni0z OTBjLWFlMDYtZWU5OTEyOWVhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDUWZjWO4ig5A60vk6G64jQMptveLsOGNF7w+1E2BQ7lu9uNpQE LRKYIMWOJtfZhmkyq4hfeK/bLgYSUpDk+u/tkeI19rAPwtrlAQfyfhJ+rbEGkLy4 K7hgqda6EjjL9xdvjCWFNgL8SZxD0auhl4FaV5k5R4uFzuvck5hhG5CTnJu9gce1 9zW6ToEuEKltomSAXIzUJXxIqN1rXmaV6Pn6tilSeX/94ZuDCDbtqN0UE0s31h5H c8fQ7YgsQ/z4bQSw1ziYaQsWTvcVvEBcKXIFpIxZtk91ObU61AlHR6R3pB5ov/yl 7SFveWEtMRuVm506NE7Z7q4i/OiC8J2NZec= -----END CERTIFICATE-----Generated at Sun Sep 27 05:14:59 2026 by rpki-client