$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa File: a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa (raw, json) Hash identifier: mUEY5m6hXXspH3t0xDHCoi7R8MgT6vvrXsfQ+ezUcH0= Subject key identifier: 59:71:8D:5B:09:B8:8B:67:1D:58:45:45:40:A7:AD:C8:6D:DB:D3:6F Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F612D75CCC3E4205459D4AC00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 55286 IP address blocks: 2607:4300:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:75:cc:c3:e4:20:54:59:d4:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d9c14912-a36c-46d1-b23e-bddd31f61666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:fd:b8:29:9c:65:f9:4c:da:b1:be:10:1a: 03:25:cb:aa:32:0c:3a:0e:db:c6:a7:f5:a1:1e:d1: 8d:e1:fe:0d:20:48:1e:e1:67:cd:b3:90:5a:43:17: ca:47:be:a9:a6:9a:fa:01:fd:21:23:d3:d5:58:ec: 10:55:ea:35:5b:3d:ff:07:06:2d:0d:ad:70:b4:d6: 56:1c:9e:91:b9:5d:89:2c:f3:0f:a1:88:cc:59:9c: 71:ef:53:7a:7b:a0:09:18:a4:a4:4e:e8:06:4c:ac: 5e:c2:2e:6f:2a:f6:81:bb:5c:41:71:aa:74:17:56: 9c:37:3e:47:74:fe:ef:0b:ee:1a:56:60:eb:a7:00: 08:a5:ce:29:af:e6:9d:0b:9c:35:bf:ec:58:0c:06: 46:72:11:5f:fb:48:c3:ab:55:fb:c0:9b:d9:85:5c: ac:ef:1c:5d:5b:36:3b:a6:87:40:83:d0:69:a6:80: 27:c0:dc:2c:3b:0b:83:01:54:ee:ab:92:72:74:de: f2:d8:fb:9c:e5:14:9e:51:94:47:6a:e9:0a:71:2b: e9:90:65:06:a3:0f:37:8f:b2:f8:e2:be:88:44:cc: b1:67:54:81:17:40:cd:20:b6:9a:3f:6c:dc:9e:6e: f3:04:68:a2:b8:08:8e:ef:3b:f7:b7:4d:df:79:53: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:8D:5B:09:B8:8B:67:1D:58:45:45:40:A7:AD:C8:6D:DB:D3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv6: 2607:4300:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:48:5f:dd:bc:40:07:10:c4:af:ec:35:d2:d4:bf:f8:2e:f7: a0:f5:02:b5:3f:94:64:02:12:9a:b8:86:d4:e7:13:78:4f:42: ce:a3:2f:55:50:c4:c6:d3:09:0d:a4:85:b0:50:c7:93:e1:a0: 92:c0:b1:e6:b4:19:f6:d4:65:a2:c4:4e:7a:3d:ca:80:98:45: d3:f7:d2:f1:70:d7:64:0b:6a:20:7b:9e:15:08:9f:72:2a:c8: cd:26:1f:d3:c2:08:3d:31:6a:2b:ea:40:e5:ce:11:29:fb:00: 88:5f:8c:0e:9b:0a:16:af:7c:fb:ef:9d:90:ff:3b:bc:76:d7: 11:e5:25:11:ca:9f:ed:a2:a6:1a:ec:24:a8:47:8a:51:c5:8d: e1:59:05:f5:a9:1b:e3:65:bd:ab:c5:07:4e:99:57:7a:b4:8b: 41:08:ec:34:9f:f6:ca:d8:4a:06:a1:e7:dd:b8:33:bc:00:4d: d0:87:b0:ef:1e:17:4d:d1:47:71:01:a6:85:34:33:dd:f8:d4: 69:b2:cb:1a:c3:a7:a3:0d:86:ba:6c:76:31:58:91:42:8d:06: cf:ea:a6:41:0b:a2:e6:79:51:ca:17:62:c5:53:a3:bb:7f:44: ae:1c:11:d3:6f:2a:39:70:3e:93:da:1e:4c:94:54:5a:e8:83: 35:a3:f4:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9hLXXMw+QgVFnUrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDljMTQ5MTItYTM2Yy00NmQxLWIyM2UtYmRkZDMxZjYxNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEv9uCmcZflM2rG+EBoDJcuqMgw6DtvGp/Wh HtGN4f4NIEge4WfNs5BaQxfKR76pppr6Af0hI9PVWOwQVeo1Wz3/BwYtDa1wtNZW HJ6RuV2JLPMPoYjMWZxx71N6e6AJGKSkTugGTKxewi5vKvaBu1xBcap0F1acNz5H dP7vC+4aVmDrpwAIpc4pr+adC5w1v+xYDAZGchFf+0jDq1X7wJvZhVys7xxdWzY7 podAg9BppoAnwNwsOwuDAVTuq5JydN7y2Puc5RSeUZRHaukKcSvpkGUGow83j7L4 4r6IRMyxZ1SBF0DNILaaP2zcnm7zBGiiuAiO7zv3t03feVNmkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlxjVsJuItnHVhFRUCnrcht29NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTIwNjI1ZjktNDdiNi0z YWExLWFkMjktNDNlODI4M2FhODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdDAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRIX928QAcQxK/sNdLUv/gu96D1ArU/lGQCEpq4htTnE3hPQs6j L1VQxMbTCQ2khbBQx5PhoJLAsea0GfbUZaLETno9yoCYRdP30vFw12QLaiB7nhUI n3IqyM0mH9PCCD0xaivqQOXOESn7AIhfjA6bChavfPvvnZD/O7x21xHlJRHKn+2i phrsJKhHilHFjeFZBfWpG+NlvavFB06ZV3q0i0EI7DSf9srYSgah5924M7wATdCH sO8eF03RR3EBpoU0M9341GmyyxrDp6MNhrpsdjFYkUKNBs/qpkELouZ5UcoXYsVT o7t/RK4cEdNvKjlwPpPaHkyUVFrogzWj9EA= -----END CERTIFICATE-----Generated at Sun Oct 4 01:32:35 2026 by rpki-client