$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa File: 063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json) Hash identifier: pNcQf/FEbzJZMcy+XSAY401zFkfvw2/YhuW7LEYmTR0= Subject key identifier: D4:B0:08:3C:9A:81:67:04:B0:C9:25:BB:9C:37:4E:BD:DC:87:5C:60 Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584F4973D5FC7DFA1ABF4E6E9380 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21922 IP address blocks: 2604:c040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d5:fc:7d:fa:1a:bf:4e:6e:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=877fa4b7-0948-4b19-8836-cb1c1e1c18c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:de:cf:4b:73:5e:6d:4c:b8:29:a0:a7:86: 5f:cf:cb:23:31:70:ff:66:c8:f0:75:83:5b:cb:b9: 0d:d7:09:83:0b:8e:15:bc:8f:71:66:dc:6b:f5:c1: be:81:a8:f1:a0:1d:ca:cd:22:65:79:3f:bd:18:ea: 2f:5a:86:81:45:be:94:91:6b:44:b9:7a:f1:c6:88: 2a:02:a6:9d:5d:3c:8f:fb:10:ed:d4:3c:32:0f:f7: a3:88:f1:f1:d6:e3:1a:c7:31:99:35:b8:17:b0:67: 84:99:14:a3:2d:51:66:7c:16:36:59:c2:36:ab:17: be:b3:f1:19:df:47:0e:90:cf:e5:75:bd:8c:08:46: db:33:66:a8:07:1f:a7:fa:f0:36:41:7a:5a:18:fc: 6e:c0:97:fa:cb:c8:99:7e:74:cf:8f:31:3a:bd:af: cd:d7:87:b8:f2:62:49:2e:b5:b2:56:37:86:af:55: 27:c6:0a:fd:dc:68:c3:b5:73:c4:25:32:d4:1c:f8: d1:0f:cb:c8:2b:04:7d:5e:96:0a:a3:24:82:73:02: 34:ec:e1:34:95:b5:d9:86:e1:cf:3c:ab:d0:f5:de: 42:a4:d1:a7:48:33:8f:6a:7f:11:7d:9b:95:c4:0d: 91:a9:71:ea:35:8c:d6:56:55:3b:2d:51:cc:a8:9a: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B0:08:3C:9A:81:67:04:B0:C9:25:BB:9C:37:4E:BD:DC:87:5C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv6: 2604:c040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:26:24:6d:07:53:34:d8:de:5b:83:f8:34:87:2c:4d:0b:a7: f2:16:58:57:52:08:92:60:a3:ea:77:a7:84:22:f1:d6:fc:89: 43:a6:7b:36:ac:7b:8e:03:af:d0:5b:06:cd:e8:78:c8:53:dc: e1:c6:8e:d6:8c:e5:c7:6d:8e:7f:10:9a:b9:8a:04:fd:4d:58: 20:1f:25:80:93:84:61:48:a0:02:28:30:fe:2f:e8:69:be:e6: 8b:44:a4:4e:97:43:21:86:f2:cd:15:ed:bb:ad:ea:89:5f:46: 81:80:67:e1:65:da:b4:a2:a1:15:5f:84:c4:70:fc:bc:ee:32: 3e:42:57:54:a5:06:e7:03:7a:ca:f0:23:83:1a:c5:1e:d4:d0: 15:10:16:71:c0:79:ce:c1:a6:62:56:0c:6c:a7:82:b6:18:f3: 7a:f8:89:53:4d:66:fe:fc:a6:3b:44:dd:40:97:e4:30:2c:b2: fb:26:df:b8:82:a1:d5:06:98:70:4c:dc:6c:64:82:5b:17:45: 96:1f:f1:c8:b4:ae:c6:d1:e1:8e:b3:94:14:e5:88:17:b5:30: 0b:f4:f2:15:41:3f:ce:e8:e2:3c:3d:c8:7b:2a:d7:3c:9d:11: 8b:d7:7c:81:a0:ac:e3:88:d5:a3:06:42:de:01:d2:78:0d:30: b9:1c:ef:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc9X8ffoav05uk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc3ZmE0YjctMDk0OC00YjE5LTg4MzYtY2IxYzFlMWMxOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E7ez0tzXm1MuCmgp4Zfz8sjMXD/ZsjwdYNb y7kN1wmDC44VvI9xZtxr9cG+gajxoB3KzSJleT+9GOovWoaBRb6UkWtEuXrxxogq AqadXTyP+xDt1DwyD/ejiPHx1uMaxzGZNbgXsGeEmRSjLVFmfBY2WcI2qxe+s/EZ 30cOkM/ldb2MCEbbM2aoBx+n+vA2QXpaGPxuwJf6y8iZfnTPjzE6va/N14e48mJJ LrWyVjeGr1Unxgr93GjDtXPEJTLUHPjRD8vIKwR9XpYKoySCcwI07OE0lbXZhuHP PKvQ9d5CpNGnSDOPan8RfZuVxA2RqXHqNYzWVlU7LVHMqJrgowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNSwCDyagWcEsMklu5w3Tr3ch1xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvMDYzYmUyMjgtMTVjZC0z NzkyLTk1ODctOGVkOGE5Y2IwNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJJiRtB1M02N5bg/g0hyxNC6fyFlhXUgiSYKPqd6eEIvHW/IlDpns2 rHuOA6/QWwbN6HjIU9zhxo7WjOXHbY5/EJq5igT9TVggHyWAk4RhSKACKDD+L+hp vuaLRKROl0MhhvLNFe27reqJX0aBgGfhZdq0oqEVX4TEcPy87jI+QldUpQbnA3rK 8CODGsUe1NAVEBZxwHnOwaZiVgxsp4K2GPN6+IlTTWb+/KY7RN1Al+QwLLL7Jt+4 gqHVBphwTNxsZIJbF0WWH/HItK7G0eGOs5QU5YgXtTAL9PIVQT/O6OI8Pch7Ktc8 nRGL13yBoKzjiNWjBkLeAdJ4DTC5HO/z -----END CERTIFICATE-----Generated at Mon Sep 28 23:43:58 2026 by rpki-client