$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/1092368f-0f35-3e78-bc81-8cd7f39a1181.roa File: 1092368f-0f35-3e78-bc81-8cd7f39a1181.roa (raw, json) Hash identifier: wPTO6s4+t6CSG0vmrWj6hbXjcrrhiXGViIBSZ/cgsDI= Subject key identifier: 20:A3:1B:D4:26:FD:41:81:6A:E1:02:C9:97:B3:CB:97:A8:E3:42:A9 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584F498AB787CBE4D2181DF2FAC0 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/1092368f-0f35-3e78-bc81-8cd7f39a1181.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399728 IP address blocks: 2620:98:e003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:b7:87:cb:e4:d2:18:1d:f2:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=573486a7-65c1-40d9-a8c7-49aef54c5b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:85:07:a4:da:db:79:ff:bb:16:43:1f:a7: 4b:b2:c0:59:e8:78:c8:4e:91:57:80:b5:7a:cb:71: e5:93:d3:cc:1d:1b:c4:c8:25:93:7d:18:59:88:fd: bc:c5:2d:58:da:40:bc:cb:cc:12:37:7a:74:65:91: 3c:f0:ae:3a:51:86:9c:da:ad:3d:98:d4:d4:3d:a5: 8b:10:18:af:62:44:09:fe:15:49:7a:6a:c3:c6:26: 5b:af:7c:50:0a:a0:52:41:92:ad:11:0e:00:8d:52: 2b:8f:63:91:36:94:28:5c:49:1d:68:9b:47:fb:97: d1:24:eb:0d:9a:8e:7e:dd:c1:44:b7:4a:3b:4e:03: 4c:cd:1b:d4:ed:39:c1:38:09:26:dd:a0:7e:0a:47: 62:52:5c:cd:51:f9:1e:24:cb:cf:13:52:5c:96:73: 42:f9:b1:a4:87:63:80:15:99:de:5d:62:20:29:9f: f1:4a:72:f2:a4:ce:f0:ba:ba:68:00:b4:82:62:df: 19:1f:9a:00:e1:2d:3c:9b:af:5a:6e:42:b8:db:c1: e0:e0:4d:70:b0:b7:a1:0a:4c:fe:25:a1:12:a3:e7: 9a:69:04:5e:f5:de:f0:ac:de:f9:cf:23:ea:02:48: 20:b5:fb:89:39:05:c1:88:d0:6c:02:a3:f0:8b:c9: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:1B:D4:26:FD:41:81:6A:E1:02:C9:97:B3:CB:97:A8:E3:42:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/1092368f-0f35-3e78-bc81-8cd7f39a1181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:15:aa:d7:d7:bd:7c:7b:48:44:66:d1:f1:0f:84:e9:37:ac: c3:63:31:bd:6c:75:4d:33:06:62:02:4f:ef:a4:3f:3f:74:97: fb:3c:14:40:20:60:a9:0b:07:64:6b:ad:ab:e7:1f:24:7f:ce: f3:1d:8b:48:0d:b7:58:2f:ef:3f:ba:2e:dc:18:2b:a6:bc:e3: 6d:4f:97:02:45:54:d0:98:f9:8a:a5:82:3a:27:a4:34:78:ff: 84:71:69:8b:70:49:28:e5:a8:a3:bd:29:f3:55:55:25:e5:c7: 70:80:cf:c5:a2:ec:77:ac:d0:85:0d:c6:1f:1d:46:45:74:16: 5c:39:76:b4:af:43:56:4b:95:d1:3c:38:fa:02:05:2a:a4:66: 2e:20:c3:0b:94:e5:52:99:8a:c5:6c:31:99:b0:e3:0d:f8:98: 49:f9:cc:ca:36:69:cd:af:f9:54:ca:40:59:0a:77:8c:40:47: b7:90:d1:32:68:95:a7:a8:d8:1f:86:27:d9:fc:a7:46:df:55: 0a:98:3a:32:05:22:ba:0f:52:dd:cd:a2:d0:8b:7a:ad:75:13: df:c1:a5:d1:b0:fa:8a:4e:cc:92:db:6a:14:a0:7f:f1:46:d7: f0:e5:b6:55:ce:db:3d:2d:ce:2c:78:70:6b:4a:94:f7:14:cf: d6:aa:e1:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JireHy+TSGB3y+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTczNDg2YTctNjVjMS00MGQ5LWE4YzctNDlhZWY1NGM1YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGuFB6Ta23n/uxZDH6dLssBZ6HjITpFXgLV6 y3Hlk9PMHRvEyCWTfRhZiP28xS1Y2kC8y8wSN3p0ZZE88K46UYac2q09mNTUPaWL EBivYkQJ/hVJemrDxiZbr3xQCqBSQZKtEQ4AjVIrj2ORNpQoXEkdaJtH+5fRJOsN mo5+3cFEt0o7TgNMzRvU7TnBOAkm3aB+CkdiUlzNUfkeJMvPE1JclnNC+bGkh2OA FZneXWIgKZ/xSnLypM7wurpoALSCYt8ZH5oA4S08m69abkK428Hg4E1wsLehCkz+ JaESo+eaaQRe9d7wrN75zyPqAkggtfuJOQXBiNBsAqPwi8mJFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCjG9Qm/UGBauECyZezy5eo40KpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvMTA5MjM2OGYtMGYzNS0z ZTc4LWJjODEtOGNkN2YzOWExMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIVqtfXvXx7SERm0fEPhOk3rMNjMb1sdU0zBmICT++kPz90l/s8 FEAgYKkLB2RrravnHyR/zvMdi0gNt1gv7z+6LtwYK6a8421PlwJFVNCY+Yqlgjon pDR4/4RxaYtwSSjlqKO9KfNVVSXlx3CAz8Wi7Hes0IUNxh8dRkV0Flw5drSvQ1ZL ldE8OPoCBSqkZi4gwwuU5VKZisVsMZmw4w34mEn5zMo2ac2v+VTKQFkKd4xAR7eQ 0TJolaeo2B+GJ9n8p0bfVQqYOjIFIroPUt3NotCLeq11E9/BpdGw+opOzJLbahSg f/FG1/DltlXO2z0tzix4cGtKlPcUz9aq4S8= -----END CERTIFICATE-----Generated at Mon Sep 28 20:10:38 2026 by rpki-client