$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa File: 3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa (raw, json) Hash identifier: qA+jMIOy822N44ZJW057FB6lABDmW5cILiZC0zISaUQ= Subject key identifier: BB:F3:A7:01:D6:68:F5:EE:FB:23:27:4A:F7:3C:90:88:D7:7E:42:6B Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584F549D6BD8A24AC25BBFD00900 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 32771 IP address blocks: 2620:111:8003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6b:d8:a2:4a:c2:5b:bf:d0:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=62689db6-5a42-4e3b-8586-25d60f180def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:9b:0b:95:b9:e4:79:59:be:e6:de:89:0e: b4:20:39:5e:7a:39:38:26:ef:cf:67:df:09:83:27: 5e:54:b1:07:5e:fd:13:e8:cd:86:1f:9b:0f:e2:c5: cd:18:85:67:29:c7:bb:cc:9b:1c:87:fb:db:f1:c3: e8:9a:4e:b2:ab:bd:2e:b2:d3:9e:57:7c:cd:8c:38: 46:8e:f4:a4:59:c9:a1:dc:27:32:14:9d:42:b0:43: b0:15:cc:51:61:89:c1:4a:d0:87:c8:88:ad:14:19: c5:43:90:76:4e:4e:b7:87:f5:f0:c7:e9:89:64:1c: 58:50:52:a6:e6:fd:05:93:68:19:96:1d:64:ce:7b: 98:a6:4e:64:e4:b9:29:b1:6e:a4:5c:40:f5:2e:7b: 57:f2:82:a0:80:04:09:fa:2f:0a:f6:98:e9:5e:6f: cc:40:eb:9c:14:1c:09:a3:62:18:d6:47:6a:18:de: c9:1a:1f:48:e4:02:44:65:2a:0a:f5:05:a1:f4:4b: 19:5b:7a:1d:ce:4c:bb:40:bc:b1:c5:6f:a0:31:27: ca:59:90:55:f0:ca:1a:c2:c6:86:c9:73:86:fa:23: f9:fe:9c:12:d6:86:d9:d1:dc:62:52:47:3d:f9:38: d2:c1:ab:01:f7:0e:46:48:8b:d8:76:80:f2:7d:64: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F3:A7:01:D6:68:F5:EE:FB:23:27:4A:F7:3C:90:88:D7:7E:42:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/3682c857-a1e9-33d2-bd0f-a4d95df88f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:cc:ac:58:f7:b2:77:c0:af:de:a2:90:ee:f2:e2:89:20:31: 22:f9:18:aa:d0:92:85:73:b6:3e:10:87:e2:33:4e:6d:3e:60: c5:47:6b:9b:65:1b:35:32:88:db:89:b8:fb:93:a3:0f:d9:20: e9:d5:c7:f1:f8:b0:cb:4e:39:39:80:48:38:97:c2:b1:88:27: 78:f5:11:80:74:f7:48:4b:44:92:cd:84:c7:98:35:4d:fd:6d: 9b:3f:93:82:26:4a:50:1e:98:ca:4b:73:fd:1c:49:b9:62:d3: 8b:bc:55:d7:a1:f6:b5:73:3f:d6:d8:48:55:49:cb:d4:24:e9: d3:27:3f:d2:61:51:c8:a1:47:b7:9b:07:1c:3c:bf:00:98:bf: 14:7f:f1:a6:3f:0d:d5:7a:21:b5:7e:6c:c0:a7:d9:12:33:48: f9:04:9c:94:a7:30:47:c7:f3:35:93:87:8e:c8:cf:fd:f1:20: 8c:ac:6f:30:d0:f3:89:fa:4b:6e:07:f7:6b:ae:d4:4e:f6:83: f4:9d:c8:20:90:f5:87:f9:be:2d:9a:35:51:7b:8e:04:fe:9b: fe:6a:ad:2c:32:e0:83:52:05:2d:8a:cf:ef:5b:86:88:ab:76: ae:2d:2a:a3:47:8f:02:5f:7e:37:10:bf:53:e7:07:f4:fc:6c: a7:0a:02:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnWvYokrCW7/QCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjI2ODlkYjYtNWE0Mi00ZTNiLTg1ODYtMjVkNjBmMTgwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipmbC5W55HlZvubeiQ60IDleejk4Ju/PZ98J gydeVLEHXv0T6M2GH5sP4sXNGIVnKce7zJsch/vb8cPomk6yq70ustOeV3zNjDhG jvSkWcmh3CcyFJ1CsEOwFcxRYYnBStCHyIitFBnFQ5B2Tk63h/Xwx+mJZBxYUFKm 5v0Fk2gZlh1kznuYpk5k5LkpsW6kXED1LntX8oKggAQJ+i8K9pjpXm/MQOucFBwJ o2IY1kdqGN7JGh9I5AJEZSoK9QWh9EsZW3odzky7QLyxxW+gMSfKWZBV8MoawsaG yXOG+iP5/pwS1obZ0dxiUkc9+TjSwasB9w5GSIvYdoDyfWRRrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvzpwHWaPXu+yMnSvc8kIjXfkJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzY4MmM4NTctYTFlOS0z M2QyLWJkMGYtYTRkOTVkZjg4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/MrFj3snfAr96ikO7y4okgMSL5GKrQkoVztj4Qh+IzTm0+YMVH a5tlGzUyiNuJuPuTow/ZIOnVx/H4sMtOOTmASDiXwrGIJ3j1EYB090hLRJLNhMeY NU39bZs/k4ImSlAemMpLc/0cSbli04u8Vdeh9rVzP9bYSFVJy9Qk6dMnP9JhUcih R7ebBxw8vwCYvxR/8aY/DdV6IbV+bMCn2RIzSPkEnJSnMEfH8zWTh47Iz/3xIIys bzDQ84n6S24H92uu1E72g/SdyCCQ9Yf5vi2aNVF7jgT+m/5qrSwy4INSBS2Kz+9b hoirdq4tKqNHjwJffjcQv1PnB/T8bKcKAsA= -----END CERTIFICATE-----Generated at Fri Oct 2 13:19:55 2026 by rpki-client