$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa File: b2248719-73d6-3a59-a50f-c57913ea0f77.roa (raw, json) Hash identifier: eqYcbkWs6/Enn2x6089+eSM+4lwL0qD70dLqObkGCig= Subject key identifier: 96:EB:FC:6B:23:B2:50:0E:26:D1:1C:88:AA:35:BE:D6:E0:DD:78:32 Certificate issuer: /CN=5f4c623c-0d0c-4995-9560-0507df4828e8 Certificate serial: 010D0C9F4328584F225D06AC587FCF43B1B34E00 Authority key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 54900 IP address blocks: 2620:91:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:06:ac:58:7f:cf:43:b1:b3:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4c623c-0d0c-4995-9560-0507df4828e8 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=9eaf25d8-4c31-433d-ae3f-a0b44c7bcb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:c8:c7:08:4c:bf:f6:0f:89:4a:c3:e0:c9: 9a:81:9f:56:1e:df:14:07:5d:0e:3e:99:cf:92:88: ec:ba:62:3d:70:d9:50:b8:58:92:3e:06:a6:c4:83: 45:ff:f3:0f:3e:a4:c1:41:b9:20:30:9d:ed:eb:f5: 50:a9:cc:36:00:4b:f0:91:cf:fe:e2:35:e4:0a:10: 5d:2d:b7:7f:a8:ba:9a:be:19:68:b1:dd:27:d9:17: 00:49:98:b4:58:77:0f:21:e3:f5:22:6c:62:74:72: 88:4e:11:48:a5:1d:5c:bb:0e:c7:74:d0:62:41:89: 32:ce:ef:67:a1:58:3e:ba:9c:92:32:2a:52:46:36: 5d:37:91:fd:5a:d2:27:20:47:5b:9d:c4:d2:ad:34: 26:e0:29:af:39:89:22:ae:80:81:8a:b5:6a:56:65: f7:1a:0e:a7:cd:fe:3a:ed:3b:7e:14:95:a4:e0:74: b0:e3:48:02:7d:16:f5:8d:d2:21:92:52:b3:a7:51: 3d:8e:ff:4c:b8:4d:a1:87:d1:aa:45:b3:84:ce:22: 31:0a:89:44:46:92:3a:e7:b1:8c:2a:37:8d:7c:f2: e0:13:02:0c:a4:1c:e3:5a:0a:37:a7:90:52:b7:ed: bd:3c:b2:ce:8e:cb:ad:11:74:01:ee:05:70:41:77: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:FC:6B:23:B2:50:0E:26:D1:1C:88:AA:35:BE:D6:E0:DD:78:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl X509v3 Authority Key Identifier: keyid:0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:91:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d1:ac:b1:95:1d:0f:64:a4:4a:3c:9c:95:f7:da:b7:b8:e1: 4b:c1:91:ba:5c:f7:c3:b5:6f:e2:52:2b:89:8f:88:97:e4:c1: e2:11:e2:37:98:bd:dc:72:34:a1:4c:50:a8:63:4e:99:02:82: e2:d2:9a:f2:5e:9c:e1:56:69:76:6a:f7:f0:c0:38:39:95:f1: 81:8a:51:52:2a:01:fb:ca:74:7b:d9:7a:20:03:09:07:b9:23: 61:45:94:b3:79:8f:ae:57:09:69:8d:0a:26:b4:cd:ec:ff:ca: d6:dd:cf:bb:9b:91:cb:5d:97:0c:0a:c3:1c:95:a1:95:47:16: aa:49:28:59:9a:26:ac:c2:75:22:66:e7:74:25:f0:86:5e:98: 00:96:fd:1b:f9:4f:ac:96:41:fc:bb:5f:6e:e7:db:29:38:15: a3:b3:f0:e4:2f:99:04:e1:a4:c3:f3:26:69:df:de:19:5b:dd: 4d:32:1c:9a:f6:81:11:ce:36:40:21:02:8b:cb:f5:da:aa:11: ca:23:20:21:0f:43:0f:43:29:b4:6c:dd:c8:2a:24:83:8a:fe: ff:4e:6c:33:d9:6c:74:21:74:6d:f1:77:25:4f:90:2f:40:0e: b1:05:4d:bf:5c:ea:3d:28:68:64:10:23:e0:9a:ab:b0:58:5f: ed:10:97:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXQasWH/PQ7GzTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgy OGU4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk OWVhZjI1ZDgtNGMzMS00MzNkLWFlM2YtYTBiNDRjN2JjYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjvIxwhMv/YPiUrD4MmagZ9WHt8UB10OPpnP kojsumI9cNlQuFiSPgamxINF//MPPqTBQbkgMJ3t6/VQqcw2AEvwkc/+4jXkChBd Lbd/qLqavhlosd0n2RcASZi0WHcPIeP1ImxidHKIThFIpR1cuw7HdNBiQYkyzu9n oVg+upySMipSRjZdN5H9WtInIEdbncTSrTQm4CmvOYkiroCBirVqVmX3Gg6nzf46 7Tt+FJWk4HSw40gCfRb1jdIhklKzp1E9jv9MuE2hh9GqRbOEziIxColERpI657GM KjeNfPLgEwIMpBzjWgo3p5BSt+29PLLOjsutEXQB7gVwQXdKIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbr/GsjslAOJtEciKo1vtbg3XgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRj NjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvYjIyNDg3MTktNzNkNi0z YTU5LWE1MGYtYzU3OTEzZWEwZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWY0YzYyM2MtMGQwYy00OTk1LTk1 NjAtMDUwN2RmNDgyOGU4LzVmNGM2MjNjLTBkMGMtNDk5NS05NTYwLTA1MDdkZjQ4 MjhlOC5jcmwwHwYDVR0jBBgwFoAUCgchVVWtwwY0D+sfIO2yvzQTZ3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3 ZGY0ODI4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAkcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTRrLGVHQ9kpEo8nJX32re44UvBkbpc98O1b+JSK4mPiJfkweIR 4jeYvdxyNKFMUKhjTpkCguLSmvJenOFWaXZq9/DAODmV8YGKUVIqAfvKdHvZeiAD CQe5I2FFlLN5j65XCWmNCia0zez/ytbdz7ubkctdlwwKwxyVoZVHFqpJKFmaJqzC dSJm53Ql8IZemACW/Rv5T6yWQfy7X27n2yk4FaOz8OQvmQThpMPzJmnf3hlb3U0y HJr2gRHONkAhAovL9dqqEcojICEPQw9DKbRs3cgqJIOK/v9ObDPZbHQhdG3xdyVP kC9ADrEFTb9c6j0oaGQQI+Caq7BYX+0Qlx0= -----END CERTIFICATE-----Generated at Tue Sep 22 23:52:21 2026 by rpki-client