$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa File: 1a27f483-55e2-3798-a805-046502b1533b.roa (raw, json) Hash identifier: Y6kUuDUoSFSRfvDG+yvJheR0iCxgISrVfkPXj4iEj0E= Subject key identifier: 90:39:59:A2:2B:15:57:40:FB:25:1E:A9:3C:36:C9:04:56:12:EA:D4 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F4328584F49765C9EA61D0DB39DEFC300 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 198949 IP address blocks: 2001:420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:5c:9e:a6:1d:0d:b3:9d:ef:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=333c3208-7d46-4a3e-a850-87a5d17f0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:cf:99:5d:31:76:e8:d4:ab:43:7e:5d:75: 69:56:4b:40:cb:0d:5e:f0:e5:b0:ad:92:28:37:49: f2:c2:f1:26:77:af:7a:a7:3b:2c:c2:af:af:d5:85: 0a:1e:bf:0b:90:8f:33:4d:6b:5d:cd:00:54:72:33: 70:a6:f5:ac:d4:11:ae:9c:5e:bb:1d:1c:82:dc:d1: e9:4c:70:aa:10:8d:ff:c6:dc:ff:a6:81:64:d6:cd: 6f:98:69:4a:2d:5f:5f:65:bf:58:59:dd:46:dc:4c: 0c:0e:00:af:9b:f4:ee:7e:92:de:58:9f:24:31:b9: 8d:b2:58:17:48:3d:8a:77:e6:04:1f:66:b9:eb:df: 1e:be:a4:d7:56:e2:a6:20:1e:60:dc:84:d7:5b:84: 45:bb:b2:13:5e:f3:db:73:f8:70:c3:71:b1:ce:5d: ff:c7:4e:4d:58:81:6a:38:6e:f2:d3:1a:f9:97:bc: 87:3b:f2:e5:61:6d:96:58:ef:58:2f:a5:14:9d:aa: de:d6:04:d7:63:2b:eb:63:98:e1:cf:ba:d8:8f:e9: 54:92:ac:fc:45:67:70:e4:7e:47:a4:36:b1:d5:6f: 97:64:26:97:33:28:ec:e1:79:dd:24:94:b1:ae:1b: ba:aa:3f:6e:64:3a:94:0d:80:78:93:6e:1e:ea:13: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:59:A2:2B:15:57:40:FB:25:1E:A9:3C:36:C9:04:56:12:EA:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv6: 2001:420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c8:2d:1a:42:42:90:d8:90:c7:54:eb:94:a4:bd:27:67:be: d4:ec:49:82:d0:75:61:a4:d9:01:a1:ce:8e:ab:be:64:42:68: fe:40:af:44:ac:eb:dc:9a:ad:98:7f:f6:18:de:e2:be:8b:c0: fc:84:89:a7:b4:08:fb:77:60:1d:41:d5:14:f4:f8:70:12:e7: 01:96:6f:97:69:ef:60:af:38:de:85:10:c6:cc:74:6b:25:41: f2:da:cd:a2:e3:f7:2f:08:ad:54:f9:2c:e2:21:1a:f7:d9:9a: 76:e6:33:a1:2e:65:be:c0:83:62:5e:6f:01:a1:71:de:bb:4c: 6d:6a:3d:ca:09:b2:8d:45:a5:8e:e3:6b:3f:84:9d:96:50:7d: 96:ba:15:4f:98:64:e9:3a:87:1c:2a:10:1c:b4:c2:bc:ac:93: 83:e6:64:37:04:2f:f8:d0:27:82:ef:d5:d7:7a:65:eb:e4:e8: b0:aa:99:fe:e5:6e:a3:a6:a5:65:a8:b8:22:a6:d4:08:23:b9: 2a:28:74:43:88:df:71:3c:84:72:c8:2f:40:dc:3f:a1:09:b9: af:3d:6c:80:81:9f:f1:ce:ac:61:18:1b:13:e9:41:28:06:e2: 88:fc:6b:7d:31:f8:28:83:ec:c7:71:68:34:8d:63:09:ba:cd: a5:49:dd:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jdlyeph0Ns53vwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzMzYzMyMDgtN2Q0Ni00YTNlLWE4NTAtODdhNWQxN2YwMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJzPmV0xdujUq0N+XXVpVktAyw1e8OWwrZIo N0nywvEmd696pzsswq+v1YUKHr8LkI8zTWtdzQBUcjNwpvWs1BGunF67HRyC3NHp THCqEI3/xtz/poFk1s1vmGlKLV9fZb9YWd1G3EwMDgCvm/TufpLeWJ8kMbmNslgX SD2Kd+YEH2a5698evqTXVuKmIB5g3ITXW4RFu7ITXvPbc/hww3Gxzl3/x05NWIFq OG7y0xr5l7yHO/LlYW2WWO9YL6UUnare1gTXYyvrY5jhz7rYj+lUkqz8RWdw5H5H pDax1W+XZCaXMyjs4XndJJSxrhu6qj9uZDqUDYB4k24e6hPJSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJA5WaIrFVdA+yUeqTw2yQRWEurUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMWEyN2Y0ODMtNTVlMi0z Nzk4LWE4MDUtMDQ2NTAyYjE1MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmyC0aQkKQ2JDHVOuUpL0nZ77U7EmC0HVhpNkBoc6Oq75kQmj+QK9E rOvcmq2Yf/YY3uK+i8D8hImntAj7d2AdQdUU9PhwEucBlm+Xae9grzjehRDGzHRr JUHy2s2i4/cvCK1U+SziIRr32Zp25jOhLmW+wINiXm8BoXHeu0xtaj3KCbKNRaWO 42s/hJ2WUH2WuhVPmGTpOoccKhActMK8rJOD5mQ3BC/40CeC79XXemXr5Oiwqpn+ 5W6jpqVlqLgiptQII7kqKHRDiN9xPIRyyC9A3D+hCbmvPWyAgZ/xzqxhGBsT6UEo BuKI/Gt9Mfgog+zHcWg0jWMJus2lSd3b -----END CERTIFICATE-----Generated at Sun Oct 4 23:07:08 2026 by rpki-client