$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa File: d79d7629-9142-3f29-862b-ddcdc0b89870.roa (raw, json) Hash identifier: 3cVHl4X/VmH39L8ZyndYfkupdW6ebQrfAXG4D3jPXiw= Subject key identifier: C8:47:D3:76:AA:4A:80:70:DA:52:6F:9F:EC:AD:F3:7A:6A:31:3A:A7 Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F4328584F06722FCED04D1D33E08E0E00 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 26457 IP address blocks: 2620:135:5004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2f:ce:d0:4d:1d:33:e0:8e:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=24089d48-0847-4a76-a5a4-33bd099d9aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:e8:81:6b:7a:cd:31:45:4b:8a:1b:90:fe: 82:3a:d7:6e:92:9a:93:6a:22:61:86:8a:2e:66:e5: 0a:95:a7:80:8e:37:59:75:92:03:c1:e7:64:02:09: da:9e:86:83:17:78:33:b0:76:ba:c4:eb:15:61:48: 6f:f1:7c:14:0d:54:61:74:9a:bc:74:24:1a:1d:3f: 3a:88:d1:c8:1a:a5:e9:1d:5c:a9:52:61:7f:09:38: bd:ea:b7:8a:c6:3b:df:33:a7:88:d8:dc:94:96:2f: 25:1b:1f:17:fa:72:43:34:54:7d:1e:7e:31:97:1f: c2:c2:74:23:da:38:a4:f4:49:b5:9f:ff:cc:5f:79: db:c5:53:dd:57:e0:26:be:04:df:aa:fb:f1:34:11: 80:1b:94:5c:30:ec:cf:d7:ad:20:0b:0c:50:6c:0b: 77:dc:23:0e:7c:89:d0:a9:30:62:e6:aa:6b:9e:bb: b8:96:8b:c0:9a:c1:7f:b3:82:6a:94:80:6c:8f:8b: 5b:8c:88:62:0b:02:1b:cb:56:9b:b6:0a:c7:f0:d7: a1:b9:3a:43:d8:01:dd:b0:d2:40:40:33:a1:74:99: e0:d6:83:62:a3:2b:5d:91:09:05:2e:2f:6f:d4:9f: ff:46:35:6f:68:74:cd:5e:81:f4:80:d4:19:6b:27: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:D3:76:AA:4A:80:70:DA:52:6F:9F:EC:AD:F3:7A:6A:31:3A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:5004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ac:ab:50:de:9f:58:a8:dc:4e:bd:59:d5:86:70:f6:04:c2: e6:2c:a2:7a:ce:45:c2:16:8f:0e:db:06:74:ef:a9:f0:bd:e0: 7f:38:81:27:2a:58:25:93:dc:cc:6d:12:74:a4:20:97:d7:e1: af:ad:2e:9a:2b:84:13:e8:60:b5:8a:25:b9:66:f4:38:e2:99: 5f:4b:ce:46:ef:18:f4:f6:85:53:4d:1b:f3:98:c4:cd:05:20: c2:9a:eb:41:9d:66:c2:69:55:a8:f9:b9:7b:6e:d8:0b:1e:b0: 40:46:58:14:a9:00:1c:a2:cd:bf:fb:b8:32:81:99:1d:4c:3a: 8f:01:e2:3d:c4:98:21:be:e8:92:26:8f:ba:6f:52:bb:44:92: 31:bb:99:da:c1:eb:74:2f:93:1b:c5:09:bc:2a:65:e0:27:e7: cf:b5:e2:63:3b:d7:60:43:75:de:f2:b0:2d:ca:98:99:33:49: 37:a0:bc:61:9c:fd:fb:99:73:f6:01:56:9b:30:07:39:ff:fc: 4d:69:b4:58:77:b6:84:7f:51:f8:12:fe:5f:60:ce:1f:36:b2: b5:62:2f:c2:4a:f6:ba:e8:43:7d:08:03:54:cd:6f:6f:f7:63: 5f:10:6b:e5:50:04:d4:e0:3d:f0:52:a1:c9:27:21:26:d3:79: 45:4d:93:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Gci/O0E0dM+CODgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjQwODlkNDgtMDg0Ny00YTc2LWE1YTQtMzNiZDA5OWQ5YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgXogWt6zTFFS4obkP6COtdukpqTaiJhhoou ZuUKlaeAjjdZdZIDwedkAgnanoaDF3gzsHa6xOsVYUhv8XwUDVRhdJq8dCQaHT86 iNHIGqXpHVypUmF/CTi96reKxjvfM6eI2NyUli8lGx8X+nJDNFR9Hn4xlx/CwnQj 2jik9Em1n//MX3nbxVPdV+AmvgTfqvvxNBGAG5RcMOzP160gCwxQbAt33CMOfInQ qTBi5qprnru4lovAmsF/s4JqlIBsj4tbjIhiCwIby1abtgrH8NehuTpD2AHdsNJA QDOhdJng1oNioytdkQkFLi9v1J//RjVvaHTNXoH0gNQZayeZEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhH03aqSoBw2lJvn+yt83pqMTqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvZDc5ZDc2MjktOTE0Mi0z ZjI5LTg2MmItZGRjZGMwYjg5ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNVAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqsq1Den1io3E69WdWGcPYEwuYsonrORcIWjw7bBnTvqfC94H84 gScqWCWT3MxtEnSkIJfX4a+tLporhBPoYLWKJblm9DjimV9LzkbvGPT2hVNNG/OY xM0FIMKa60GdZsJpVaj5uXtu2AsesEBGWBSpAByizb/7uDKBmR1MOo8B4j3EmCG+ 6JImj7pvUrtEkjG7mdrB63QvkxvFCbwqZeAn58+14mM712BDdd7ysC3KmJkzSTeg vGGc/fuZc/YBVpswBzn//E1ptFh3toR/UfgS/l9gzh82srViL8JK9rroQ30IA1TN b2/3Y18Qa+VQBNTgPfBSocknISbTeUVNk2I= -----END CERTIFICATE-----Generated at Sat Sep 26 09:08:44 2026 by rpki-client