$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: 93803ND1qm/JNes3WETA6copnqLkRjQEIbeLLYPuEVk= Subject key identifier: E8:13:2F:8F:59:8B:58:1E:46:8A:83:78:0F:03:2A:32:CA:BE:E9:E5 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F4328584F49760110E7D2FB6661F9E560 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:01:10:e7:d2:fb:66:61:f9:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8986d26-4534-4538-ba81-f63a9c1d469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:7e:24:df:67:ce:e5:39:e3:34:81:1f:5b: a9:a7:27:ca:7e:8e:9f:bb:fb:f0:31:a0:17:88:c4: d7:72:c2:16:35:b7:8f:6c:e3:93:4a:9b:bd:aa:f2: de:b4:c8:ef:10:c3:d8:3b:03:e4:12:87:60:5c:c2: 3c:66:b1:d7:84:48:18:d1:c7:d1:07:81:12:da:00: 46:9b:bb:0c:30:66:14:b9:85:a5:c4:ef:9c:1f:d5: 67:1e:bc:6c:9b:10:ab:17:48:b0:b9:20:5b:68:b2: e5:07:bd:34:66:29:f6:da:2c:47:02:ff:3a:56:18: 29:db:72:0f:26:dd:a7:a7:39:f8:e8:e6:7c:b4:0d: 11:08:06:e0:b1:55:f7:e6:66:34:8b:15:02:ac:80: 9d:61:b4:59:16:53:8c:7b:93:f9:48:f6:e5:9c:16: 5c:c8:26:d8:22:5d:39:3d:06:29:ca:a8:0d:d5:38: 7b:62:96:f9:a2:9d:c0:0a:87:ef:1d:55:dc:4d:6f: 12:70:09:12:6f:54:d5:c8:d0:f6:dc:bd:17:89:1e: 62:b9:8d:a0:93:f3:e4:22:18:c1:1b:ec:f4:27:3e: 23:14:ed:4c:e3:bb:09:12:a7:a2:3a:63:0e:6d:7f: 43:40:ae:e5:74:3e:66:a3:c0:2c:00:6a:9a:22:2d: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:13:2F:8F:59:8B:58:1E:46:8A:83:78:0F:03:2A:32:CA:BE:E9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a0:e7:da:71:2a:b8:27:f3:a7:71:03:c6:85:30:4c:31:7e: f3:85:36:60:58:22:ee:cd:d5:9e:06:2a:d2:30:81:84:93:a8: 85:d6:46:f0:e3:b8:10:1d:56:fa:3e:03:5b:60:a5:41:f1:c7: 4d:59:fd:6a:16:ce:e6:3d:48:cb:5a:d8:6b:d1:92:62:35:0c: a9:27:80:5e:37:1d:18:50:0c:87:15:1f:cd:21:ad:32:1e:ac: f1:81:2f:34:e0:73:93:fa:a7:a8:93:6c:0c:63:f7:f3:0f:66: d2:ac:d3:e3:54:2a:05:7c:34:62:ad:d3:12:78:38:ee:10:0a: a5:4e:f7:09:33:cd:bf:4f:c2:d2:ad:1d:eb:d2:ad:07:1e:ff: 0d:61:2b:b7:0d:27:78:b1:cf:e4:c5:5f:47:e0:6a:1a:65:b3: 40:24:31:7b:95:0f:17:51:34:96:06:24:17:e0:4a:4a:6d:cc: 13:7b:7f:76:70:1f:b8:e6:c1:da:cb:31:57:20:69:2d:a8:6a: da:8d:86:f0:07:f3:cb:5d:90:18:6b:c3:08:24:c2:79:c4:2e: 5b:70:52:c9:67:13:2d:0f:31:ee:df:c0:59:37:b6:b6:66:c8: e2:ea:c6:e9:41:d5:8b:d9:1d:75:e9:44:d7:b4:e3:b7:90:5c: 99:4a:cf:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdgEQ59L7ZmH55WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTg5ODZkMjYtNDUzNC00NTM4LWJhODEtZjYzYTljMWQ0NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaV+JN9nzuU54zSBH1uppyfKfo6fu/vwMaAX iMTXcsIWNbePbOOTSpu9qvLetMjvEMPYOwPkEodgXMI8ZrHXhEgY0cfRB4ES2gBG m7sMMGYUuYWlxO+cH9VnHrxsmxCrF0iwuSBbaLLlB700Zin22ixHAv86Vhgp23IP Jt2npzn46OZ8tA0RCAbgsVX35mY0ixUCrICdYbRZFlOMe5P5SPblnBZcyCbYIl05 PQYpyqgN1Th7Ypb5op3ACofvHVXcTW8ScAkSb1TVyND23L0XiR5iuY2gk/PkIhjB G+z0Jz4jFO1M47sJEqeiOmMObX9DQK7ldD5mo8AsAGqaIi3UUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOgTL49Zi1geRoqDeA8DKjLKvunlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIag59pxKrgn86dxA8aFMEwxfvOFNmBYIu7N1Z4GKtIwgYSTqIXW RvDjuBAdVvo+A1tgpUHxx01Z/WoWzuY9SMta2GvRkmI1DKkngF43HRhQDIcVH80h rTIerPGBLzTgc5P6p6iTbAxj9/MPZtKs0+NUKgV8NGKt0xJ4OO4QCqVO9wkzzb9P wtKtHevSrQce/w1hK7cNJ3ixz+TFX0fgahpls0AkMXuVDxdRNJYGJBfgSkptzBN7 f3ZwH7jmwdrLMVcgaS2oatqNhvAH88tdkBhrwwgkwnnELltwUslnEy0PMe7fwFk3 trZmyOLqxulB1YvZHXXpRNe047eQXJlKz2E= -----END CERTIFICATE-----Generated at Fri Sep 25 14:04:17 2026 by rpki-client