$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa File: cde4ef19-0ad5-390d-95c9-95ab139449fd.roa (raw, json) Hash identifier: EcsbXTvkRGthky0Q2v0vcvPZONsFjXFNPYZSio+gcyc= Subject key identifier: 41:6B:4F:07:53:83:A2:13:E7:D1:05:F2:C0:CC:8A:4F:6B:39:38:80 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F49763804FFE9FA8BDD3E2500 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 2620:101:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:38:04:ff:e9:fa:8b:dd:3e:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e9aed04-5012-4bf7-bdeb-f768413a03e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:66:04:f9:47:c0:1d:49:5e:6a:95:48:3d: 41:d6:7f:46:b3:24:95:cc:b7:fd:06:ce:58:bd:9a: e6:89:36:04:72:67:e6:bf:40:77:41:bf:6b:b0:76: 44:d8:9e:f1:52:aa:db:65:01:09:f5:e0:fd:2f:d4: d1:16:e9:d3:94:32:12:bd:89:14:00:4c:64:ce:30: 27:a0:ff:dc:de:83:89:35:b0:d2:a4:d1:db:c1:d9: 75:db:86:9d:b8:68:2d:24:9f:25:bc:fc:11:6e:77: 95:c6:5a:a5:19:de:32:2e:99:13:b4:e9:a9:8e:86: f0:16:85:f3:83:a3:b2:3b:07:fe:4b:e6:6d:f2:07: 23:bc:d2:95:a0:62:37:0c:67:33:1c:46:f0:13:76: 0d:d3:36:86:7a:3f:7d:78:c2:d6:da:5a:f3:ff:1b: 80:ce:e3:dc:b5:c7:fd:62:07:0b:07:d3:0e:4e:19: 26:4a:8a:7c:20:76:b9:fa:1b:a7:ac:f2:75:dd:f0: d1:d2:0c:b5:21:7b:d3:ef:a1:d7:e8:57:23:95:7f: cc:36:a4:e1:4d:7d:e1:e8:73:8d:23:1d:92:84:eb: 97:c2:93:20:3a:09:08:88:ca:82:86:04:56:70:25: dd:e3:14:1d:25:4d:d6:32:8d:83:df:4d:3c:de:48: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:4F:07:53:83:A2:13:E7:D1:05:F2:C0:CC:8A:4F:6B:39:38:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:96:33:c9:67:c5:d7:62:f9:e8:8a:85:b8:88:a1:65:85:c9: 19:ed:75:15:5f:35:07:f3:4b:57:04:04:f4:bd:ce:ed:17:09: 9d:d1:7f:83:d5:79:c6:4c:14:35:69:6e:8b:dc:3f:cc:50:51: 65:ba:a8:e9:d6:3b:45:ce:7a:e7:6e:2d:d0:94:52:0b:fb:88: 49:d9:c9:85:57:eb:ed:5c:1f:f2:5a:0f:06:3a:5c:3d:67:c3: 13:f6:ed:c2:f2:78:83:16:17:1b:8b:3e:79:f2:b8:15:72:19: 1b:be:ec:f9:9a:19:9c:1e:90:2e:77:7d:9f:85:f2:fd:29:35: 78:46:ab:37:e6:32:39:df:af:72:0a:41:49:55:d7:df:d1:11: 78:68:5e:ad:01:68:22:66:d3:1f:34:47:21:11:73:d5:84:e7: c0:39:ca:54:37:8b:d8:4e:32:d9:a1:54:d9:d2:5b:10:b6:6c: 69:34:20:92:a2:3e:c3:f5:3f:bb:20:46:83:c6:51:58:93:f4: 19:3d:89:38:a9:00:f1:f9:fb:50:69:01:be:e9:d2:6d:34:84: 55:17:c7:0c:4f:9e:ee:22:88:71:f4:b7:4b:8b:9b:f0:dd:b3: 9c:9a:c5:cc:68:33:94:d2:f0:b6:16:a7:2c:15:89:cc:68:3e: 67:c9:66:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdjgE/+n6i90+JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGU5YWVkMDQtNTAxMi00YmY3LWJkZWItZjc2ODQxM2EwM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9mBPlHwB1JXmqVSD1B1n9GsySVzLf9Bs5Y vZrmiTYEcmfmv0B3Qb9rsHZE2J7xUqrbZQEJ9eD9L9TRFunTlDISvYkUAExkzjAn oP/c3oOJNbDSpNHbwdl124aduGgtJJ8lvPwRbneVxlqlGd4yLpkTtOmpjobwFoXz g6OyOwf+S+Zt8gcjvNKVoGI3DGczHEbwE3YN0zaGej99eMLW2lrz/xuAzuPctcf9 YgcLB9MOThkmSop8IHa5+hunrPJ13fDR0gy1IXvT76HX6FcjlX/MNqThTX3h6HON Ix2ShOuXwpMgOgkIiMqChgRWcCXd4xQdJU3WMo2D30083kg5owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFrTwdTg6IT59EF8sDMik9rOTiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2RlNGVmMTktMGFkNS0z OTBkLTk1YzktOTVhYjEzOTQ0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2WM8lnxddi+eiKhbiIoWWFyRntdRVfNQfzS1cEBPS9zu0XCZ3R f4PVecZMFDVpbovcP8xQUWW6qOnWO0XOeuduLdCUUgv7iEnZyYVX6+1cH/JaDwY6 XD1nwxP27cLyeIMWFxuLPnnyuBVyGRu+7PmaGZwekC53fZ+F8v0pNXhGqzfmMjnf r3IKQUlV19/REXhoXq0BaCJm0x80RyERc9WE58A5ylQ3i9hOMtmhVNnSWxC2bGk0 IJKiPsP1P7sgRoPGUViT9Bk9iTipAPH5+1BpAb7p0m00hFUXxwxPnu4iiHH0t0uL m/Dds5yaxcxoM5TS8LYWpywVicxoPmfJZk0= -----END CERTIFICATE-----Generated at Sun Oct 11 08:50:44 2026 by rpki-client