$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa File: 2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa (raw, json) Hash identifier: j8Q7BGpMlH/pQn8zQQiGVFHDLMVIC9ePvWNrTuK4I3w= Subject key identifier: FA:70:BC:E8:ED:FE:0A:4F:CE:10:D6:B1:E9:1A:34:02:28:08:A7:36 Certificate issuer: /CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60 Certificate serial: 010D0C9F4328584F506D5669F5B2489F007FC380 Authority key identifier: 56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 397059 IP address blocks: 2620:4a:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:56:69:f5:b2:48:9f:00:7f:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=5df8820e-4ec1-496a-bbd4-36e7dd0aedd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:27:46:74:61:9c:75:97:72:84:a6:38:e6: fd:b9:7c:01:52:5b:e4:88:06:63:0d:de:f1:9f:59: bb:80:9e:c8:41:9f:98:61:3e:da:d2:50:95:44:bd: 6c:5d:f3:89:75:de:09:e8:0d:83:2c:79:0d:99:0c: a8:c9:fc:f9:88:94:94:d4:26:50:9c:50:7b:3c:6a: 13:b8:c9:3c:67:5c:30:03:9c:8a:05:a1:9e:04:9c: f0:3a:f3:69:49:09:2a:cc:28:c2:28:81:55:1b:65: a6:f8:ba:58:8b:0d:91:24:44:3b:0f:39:95:68:2f: 01:27:e0:f1:7a:6b:0a:d5:99:20:f0:fb:ad:ec:9b: fb:05:35:ca:e0:69:f9:6e:41:46:4c:39:b1:4b:73: c2:36:38:17:25:42:b7:d0:28:0a:b8:34:ae:50:a3: 75:32:ab:0e:43:f5:36:44:7b:64:b5:fa:ed:5b:f3: ef:54:ee:8f:cd:07:2b:2e:36:24:a1:99:8e:c4:84: 63:7d:4d:95:46:83:8e:06:ce:01:72:81:24:5b:9b: 2f:99:15:f8:e7:0f:0d:94:eb:29:72:b6:6a:ea:6b: 64:13:fb:70:40:75:4a:35:f0:f6:45:cc:da:22:c2: 45:8a:44:09:8b:6f:6b:44:4c:a5:d0:7e:55:ed:95: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:70:BC:E8:ED:FE:0A:4F:CE:10:D6:B1:E9:1A:34:02:28:08:A7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl X509v3 Authority Key Identifier: keyid:56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer sbgp-ipAddrBlock: critical IPv6: 2620:4a:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:33:19:a4:4b:20:a6:e6:52:dc:b1:7f:16:8c:03:2a:79:63: 86:8e:75:17:7f:b0:df:bb:a9:68:4a:ff:37:77:68:76:02:a8: 3d:30:1d:1f:a3:86:a1:ef:78:d4:c4:ff:2d:a8:aa:f8:f5:6a: f8:80:de:c3:37:13:f6:b6:1c:5f:ff:7e:bd:37:1e:5e:ff:da: b5:bf:a9:38:09:3a:bf:5b:02:c7:b9:1b:45:35:82:29:c3:f5: 97:00:05:b9:00:da:27:0f:fe:3a:c2:83:d3:2f:73:44:5f:ae: 98:1d:5a:a2:24:13:96:c5:79:e2:e1:6d:5e:57:09:4b:e6:30: 49:d2:35:e9:ed:31:3e:aa:4e:11:f2:47:b6:b7:7d:f5:5e:37: 82:63:d7:c3:31:5a:40:52:cb:c6:0d:f8:8f:bf:19:9e:cc:d4: 9e:06:b9:de:1c:f1:a8:e2:e6:54:18:21:7f:a2:ac:31:20:e0: b7:7b:3d:10:2e:5c:2a:a3:8f:d0:41:b1:2b:9f:42:81:13:57: c4:ec:b0:08:fe:ba:b2:4c:93:be:64:8f:8d:28:b9:12:c4:62: c8:a8:e1:ca:6e:0d:c6:4f:98:f5:e3:a6:75:d7:8d:ba:74:fd: 9f:4e:b4:87:61:8e:47:3a:fa:7b:9b:c4:35:95:19:30:3e:ea: 48:55:af:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9QbVZp9bJInwB/w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjNzc2M2UtN2Y3Ni00OTkyLThhYTItZjU3MmQ1YjBi ZjYwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NWRmODgyMGUtNGVjMS00OTZhLWJiZDQtMzZlN2RkMGFlZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPsnRnRhnHWXcoSmOOb9uXwBUlvkiAZjDd7x n1m7gJ7IQZ+YYT7a0lCVRL1sXfOJdd4J6A2DLHkNmQyoyfz5iJSU1CZQnFB7PGoT uMk8Z1wwA5yKBaGeBJzwOvNpSQkqzCjCKIFVG2Wm+LpYiw2RJEQ7DzmVaC8BJ+Dx emsK1Zkg8Put7Jv7BTXK4Gn5bkFGTDmxS3PCNjgXJUK30CgKuDSuUKN1MqsOQ/U2 RHtktfrtW/PvVO6PzQcrLjYkoZmOxIRjfU2VRoOOBs4BcoEkW5svmRX45w8NlOsp crZq6mtkE/twQHVKNfD2RczaIsJFikQJi29rREyl0H5V7ZXbfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpwvOjt/gpPzhDWsekaNAIoCKc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yY2M3 NzYzZS03Zjc2LTQ5OTItOGFhMi1mNTcyZDViMGJmNjAvMmFkMWExM2YtYzFiZS0z YzlmLWJkZGEtNWUwY2YzMWU4ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmNjNzc2M2UtN2Y3Ni00OTkyLThh YTItZjU3MmQ1YjBiZjYwLzJjYzc3NjNlLTdmNzYtNDk5Mi04YWEyLWY1NzJkNWIw YmY2MC5jcmwwHwYDVR0jBBgwFoAUVn8HWBaldDIrfGjo70r+n8FG504wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yY2M3NzYzZS03Zjc2LTQ5OTItOGFhMi1mNTcy ZDViMGJmNjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAszGaRLIKbmUtyxfxaMAyp5Y4aOdRd/sN+7qWhK/zd3aHYCqD0w HR+jhqHveNTE/y2oqvj1aviA3sM3E/a2HF//fr03Hl7/2rW/qTgJOr9bAse5G0U1 ginD9ZcABbkA2icP/jrCg9Mvc0RfrpgdWqIkE5bFeeLhbV5XCUvmMEnSNentMT6q ThHyR7a3ffVeN4Jj18MxWkBSy8YN+I+/GZ7M1J4Gud4c8aji5lQYIX+irDEg4Ld7 PRAuXCqjj9BBsSufQoETV8TssAj+urJMk75kj40ouRLEYsio4cpuDcZPmPXjpnXX jbp0/Z9OtIdhjkc6+nubxDWVGTA+6khVr2E= -----END CERTIFICATE-----Generated at Sun Oct 11 14:40:00 2026 by rpki-client