$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa File: 9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa (raw, json) Hash identifier: TqiuDm1EbemZqp47TKN78wZXxzY8b4mcwM98VctGWHk= Subject key identifier: 24:D6:75:CB:84:76:CB:83:DB:0B:35:DB:83:F4:A5:E4:9D:69:3A:59 Certificate issuer: /CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Certificate serial: 010D0C9F4328584F323993A7E60612357C0BC6E0 Authority key identifier: 45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa Signing time: Wed 16 Sep 2026 17:21:53 +0000 ROA not before: Wed 16 Sep 2026 17:21:53 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 40591 IP address blocks: 2620:0:d90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:39:93:a7:e6:06:12:35:7c:0b:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Validity Not Before: Sep 16 17:21:53 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=38e49b28-8ae0-4b8b-8d24-afbd5bf3b6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:04:27:82:9e:04:f8:48:1f:c1:a2:0d:7b: 82:75:40:52:5f:68:49:bc:be:08:0a:f1:9e:c8:76: 44:69:45:af:9a:03:5d:cd:70:82:65:3f:8d:56:4b: 90:48:d1:92:71:6d:95:96:31:51:6e:76:03:75:26: a6:50:0a:83:29:f0:a9:cb:ea:e8:6e:a8:7d:b5:07: f8:24:c6:09:4b:4e:df:03:8c:81:0e:bd:4f:03:3d: f9:ab:e3:0b:8b:10:2d:2c:24:fa:04:15:78:3b:b8: 04:0f:5e:d6:f1:3a:16:67:34:f8:a2:55:c2:73:db: 3b:60:b2:3f:cc:c6:2b:9b:f1:29:ec:aa:99:56:08: ea:20:57:cd:db:87:e0:d7:72:41:3c:05:7c:7c:b6: 10:29:b4:40:47:8c:ce:35:08:43:08:e3:f9:2f:90: 9d:93:16:84:06:94:9f:e7:c6:f1:ad:79:51:89:0e: d7:d6:1c:6d:fe:de:c2:52:d0:9d:ff:85:52:86:f0: 03:1d:cb:d2:b0:ef:df:5a:a8:68:3a:45:14:18:8d: 5f:61:9c:61:e7:8e:ba:5e:95:1e:bb:e6:eb:a3:e4: cb:48:fa:73:e5:7d:81:aa:84:40:b1:83:e1:bc:4b: 30:71:10:11:b8:ad:69:2e:46:9f:2b:ed:bf:31:6d: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:75:CB:84:76:CB:83:DB:0B:35:DB:83:F4:A5:E4:9D:69:3A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl X509v3 Authority Key Identifier: keyid:45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:d90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:89:28:f9:c0:63:90:6f:c8:e9:af:ab:7c:0a:ac:bd:d8:57: 20:60:88:e2:ab:81:4d:cc:3b:ca:f2:3a:9d:ed:6b:d7:2a:02: 15:fd:4d:df:13:00:12:e7:9c:61:0a:82:1a:8a:26:d7:1b:a4: d0:b1:38:76:fb:4a:be:f7:e0:c1:87:d7:78:3d:ef:44:fb:38: c2:eb:71:0d:fa:fc:e0:d9:b8:e4:18:40:91:cb:4b:0c:b6:81: 34:c2:3d:a7:69:b7:57:1e:fd:d1:8b:4a:8d:62:d6:80:8d:41: 89:4b:c8:a5:b1:3c:87:04:4a:7b:1b:eb:1a:64:84:99:45:07: a5:41:b4:20:90:6c:3f:42:56:a9:7a:06:93:dd:5a:17:6e:a3: 80:74:d6:eb:7d:95:75:3d:86:b4:bd:14:f6:93:8e:6a:ac:9e: 91:32:5d:50:b5:88:0e:af:98:72:e6:b5:78:72:8a:0f:24:21: 39:e7:d5:40:da:03:92:e8:c7:59:8e:95:0d:ef:2d:fb:71:e2: 96:85:94:ae:e2:e0:2d:63:9e:f5:94:9d:70:88:5a:08:25:16: 67:a1:f5:c0:82:19:e1:a0:08:7c:2b:2d:39:35:f7:18:d3:52: 52:28:c5:28:f1:c3:39:16:2a:21:4b:d3:39:5b:4c:d2:fb:2c: 9c:10:4a:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8yOZOn5gYSNXwLxuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkNGYxN2ItM2Q4Yy00YmNkLWE0NTQtOTY0N2U2NjNj MDkzMB4XDTI2MDkxNjE3MjE1M1oXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzhlNDliMjgtOGFlMC00YjhiLThkMjQtYWZiZDViZjNiNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjwEJ4KeBPhIH8GiDXuCdUBSX2hJvL4ICvGe yHZEaUWvmgNdzXCCZT+NVkuQSNGScW2VljFRbnYDdSamUAqDKfCpy+robqh9tQf4 JMYJS07fA4yBDr1PAz35q+MLixAtLCT6BBV4O7gED17W8ToWZzT4olXCc9s7YLI/ zMYrm/Ep7KqZVgjqIFfN24fg13JBPAV8fLYQKbRAR4zONQhDCOP5L5CdkxaEBpSf 58bxrXlRiQ7X1hxt/t7CUtCd/4VShvADHcvSsO/fWqhoOkUUGI1fYZxh5466XpUe u+bro+TLSPpz5X2BqoRAsYPhvEswcRARuK1pLkafK+2/MW1A5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTWdcuEdsuD2ws124P0peSdaTpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0 ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3ZTY2M2MwOTMvOWFmZDFiOWEtZjI4OC0z N2MxLWE5YTktNjYzMTQ4MWQ5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWJkNGYxN2ItM2Q4Yy00YmNkLWE0 NTQtOTY0N2U2NjNjMDkzLzliZDRmMTdiLTNkOGMtNGJjZC1hNDU0LTk2NDdlNjYz YzA5My5jcmwwHwYDVR0jBBgwFoAURcFKwzOsmOe+7hpj4X3o9O5uT/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3 ZTY2M2MwOTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA2Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFiJKPnAY5BvyOmvq3wKrL3YVyBgiOKrgU3MO8ryOp3ta9cqAhX9 Td8TABLnnGEKghqKJtcbpNCxOHb7Sr734MGH13g970T7OMLrcQ36/ODZuOQYQJHL Swy2gTTCPadpt1ce/dGLSo1i1oCNQYlLyKWxPIcESnsb6xpkhJlFB6VBtCCQbD9C Vql6BpPdWhduo4B01ut9lXU9hrS9FPaTjmqsnpEyXVC1iA6vmHLmtXhyig8kITnn 1UDaA5Lox1mOlQ3vLftx4paFlK7i4C1jnvWUnXCIWgglFmeh9cCCGeGgCHwrLTk1 9xjTUlIoxSjxwzkWKiFL0zlbTNL7LJwQShk= -----END CERTIFICATE-----Generated at Thu Sep 24 11:51:27 2026 by rpki-client