$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa File: 47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa (raw, json) Hash identifier: /EdwNkGMHY5ZX1euXnitaaYUbpq4Bc4RqkZKl/k0bYk= Subject key identifier: D4:CB:14:99:E9:AF:2D:8D:55:BC:5A:FD:B8:4A:4E:F8:1B:83:28:64 Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Certificate serial: 010D0C9F4328584EFF77814082E78AD6DBC68D40 Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 49 IP address blocks: 2610:20:6fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:81:40:82:e7:8a:d6:db:c6:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=ed3932c5-5515-4962-9c91-5412d7231a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:d1:75:bc:7a:c3:35:3f:73:01:ac:10:82: 7e:1f:72:20:2f:ba:59:ac:41:2a:f5:64:94:fb:69: 5a:ae:eb:78:c5:f2:4c:97:a1:0f:ce:7b:4a:b8:2c: 14:7c:0c:ce:28:71:63:75:1d:14:2c:cc:08:f2:22: 48:b9:53:f2:09:04:62:bb:56:9d:35:74:ec:91:61: af:a2:a6:77:77:65:0d:24:79:6d:0f:f0:42:6e:1f: 74:22:b6:34:1e:c6:de:2a:73:71:33:34:01:ff:6c: 69:64:28:7d:20:3d:b2:b2:37:01:f3:df:a2:3b:36: 3c:16:a4:c1:62:95:5e:08:4b:e3:6f:50:63:4e:3f: e5:68:16:21:b6:de:e2:0b:2b:a0:08:9b:70:9d:c4: 43:fb:ab:71:f5:23:b8:ae:2a:d1:24:f5:a8:fa:c2: 0e:e5:34:ba:ca:7e:42:c6:86:f7:5c:e4:ee:06:1b: 79:fd:ad:00:b5:4c:8a:d6:ec:fe:77:92:ed:5c:19: 3c:30:1d:ea:f0:da:c1:db:60:66:16:63:a2:45:4c: 57:3e:13:8e:c4:47:46:f5:8a:da:03:43:9f:ca:81: c9:5a:5c:88:a2:9a:4a:19:24:6d:54:c7:f6:22:14: 67:65:39:44:f4:cc:28:56:00:ab:0e:cb:e8:b8:c4: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CB:14:99:E9:AF:2D:8D:55:BC:5A:FD:B8:4A:4E:F8:1B:83:28:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl X509v3 Authority Key Identifier: keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:6fce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fb:a5:37:d4:1b:7e:de:1f:c3:5d:49:f0:d8:21:17:a9:bc: 84:37:6f:bc:6d:e4:ca:fd:1a:f1:f1:8b:59:71:9b:f3:73:a6: 1b:50:f6:08:8c:71:17:47:26:b5:c2:37:8d:17:79:9c:39:ce: aa:2c:ca:1b:11:b8:f5:0e:f0:9b:5a:6e:90:51:f7:ba:9a:af: 48:34:a2:57:8d:a5:63:15:1c:52:45:64:00:40:ce:87:ef:cc: 36:cb:9b:e1:ee:1b:f3:b7:b7:f8:60:60:e8:f0:98:3e:cc:b0: a6:c0:c7:6b:bc:8d:4f:08:57:53:1e:55:8a:e0:90:98:fc:1c: ed:45:d8:d2:81:af:11:97:cf:99:f9:ed:24:34:67:be:9d:f5: 0a:0a:df:8c:20:5c:f9:a9:74:4d:1e:b5:c9:cc:a4:8b:6b:e0: 25:76:e1:b5:d8:66:fa:db:5f:53:13:06:57:d7:e4:ed:1a:6d: 5f:e4:9c:95:27:ba:1f:f1:65:5e:88:aa:d6:11:56:c0:fd:0d: 56:6c:22:ff:ef:75:08:ba:2e:bc:35:a0:ec:fa:93:ad:a4:41: 38:23:3e:1d:d6:3b:1d:68:9f:36:26:54:55:31:11:ef:7e:b9: b8:5c:89:3c:55:d7:67:58:94:14:2c:da:30:e7:a4:6c:9c:bb: 7e:a6:11:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7/d4FAgueK1tvGjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh N2U5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk ZWQzOTMyYzUtNTUxNS00OTYyLTljOTEtNTQxMmQ3MjMxYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkDRdbx6wzU/cwGsEIJ+H3IgL7pZrEEq9WSU +2larut4xfJMl6EPzntKuCwUfAzOKHFjdR0ULMwI8iJIuVPyCQRiu1adNXTskWGv oqZ3d2UNJHltD/BCbh90IrY0HsbeKnNxMzQB/2xpZCh9ID2ysjcB89+iOzY8FqTB YpVeCEvjb1BjTj/laBYhtt7iCyugCJtwncRD+6tx9SO4rirRJPWo+sIO5TS6yn5C xob3XOTuBht5/a0AtUyK1uz+d5LtXBk8MB3q8NrB22BmFmOiRUxXPhOOxEdG9Yra A0OfyoHJWlyIoppKGSRtVMf2IhRnZTlE9MwoVgCrDsvouMQJDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTLFJnpry2NVbxa/bhKTvgbgyhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvNDdjMjA4OWYtYThkOS0z YWIwLTkwMzMtZmYxM2QyMmUwYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4 Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh YmMxMWE3ZTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIG/O MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC37pTfUG37eH8NdSfDYIRepvIQ3b7xt5Mr9GvHxi1lxm/NzphtQ 9giMcRdHJrXCN40XeZw5zqosyhsRuPUO8JtabpBR97qar0g0oleNpWMVHFJFZABA zofvzDbLm+HuG/O3t/hgYOjwmD7MsKbAx2u8jU8IV1MeVYrgkJj8HO1F2NKBrxGX z5n57SQ0Z76d9QoK34wgXPmpdE0etcnMpItr4CV24bXYZvrbX1MTBlfX5O0abV/k nJUnuh/xZV6IqtYRVsD9DVZsIv/vdQi6Lrw1oOz6k62kQTgjPh3WOx1onzYmVFUx Ee9+ubhciTxV12dYlBQs2jDnpGycu36mEdE= -----END CERTIFICATE-----Generated at Wed Sep 23 00:20:14 2026 by rpki-client