$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa File: b20be8f7-0638-3370-8715-f0aae40447c9.roa (raw, json) Hash identifier: cyqe8uxfgpsEyQxsFzR9Bnw6+jL+NYIVhFB4vpwbgzI= Subject key identifier: AC:49:5B:37:6D:5A:0B:7A:F3:8E:A0:4A:9D:F7:2C:0C:92:92:01:C3 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F45428C4492D255184D355300 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 399275 IP address blocks: 2602:fcc0:4444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:8c:44:92:d2:55:18:4d:35:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=ced05852-1ee7-4a3a-b1a1-286a0a9b2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:5b:54:83:39:42:11:83:ce:90:17:8a:68: b7:3f:fc:e3:af:bc:ad:21:e1:4b:f1:1a:d6:02:9d: f2:66:de:4b:ae:29:d1:17:8e:7a:2b:ea:4e:70:16: 7e:ea:82:ef:a9:31:5c:ed:25:4c:db:b6:20:18:62: a7:7a:78:ba:b7:bd:d5:ed:bc:69:74:c3:83:db:30: ac:fa:18:17:5c:66:84:22:15:54:1b:fa:d1:85:c6: f6:72:36:42:c2:bb:3b:64:02:90:3d:1b:d1:c6:15: 71:9c:71:20:e6:2f:0c:22:33:c1:26:3c:62:56:06: da:f5:e1:4d:30:81:3a:76:c3:82:54:da:48:63:49: 9d:9f:c4:03:28:63:7d:aa:5b:bc:c8:fe:79:ff:96: cd:74:db:c1:1f:f6:ce:6c:3f:82:6e:4e:23:c8:0f: 51:e6:4d:a4:d5:98:7e:a5:85:12:67:50:5b:9c:30: 08:74:cb:d6:97:cc:4b:c5:eb:3b:a9:f1:38:14:28: 90:93:08:55:4e:29:f5:04:cc:8b:63:43:99:04:ae: b4:df:ed:5b:ea:3e:cc:f1:f7:5f:d0:42:ec:4c:fc: c9:de:b2:ef:a9:28:e9:14:13:10:9e:1a:44:42:ea: 06:ce:f7:31:42:3d:02:a3:14:7b:32:eb:cf:e4:0d: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:5B:37:6D:5A:0B:7A:F3:8E:A0:4A:9D:F7:2C:0C:92:92:01:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:4444::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4d:9f:3e:42:ef:38:f8:28:24:9c:6e:0c:b2:59:2e:15:a6: 35:6a:02:6a:15:a1:eb:fa:38:9a:5b:3b:d8:07:0e:9c:bc:1f: 18:90:68:8d:cf:cb:1b:92:27:68:91:d1:d9:d0:11:d5:c1:a5: 1f:8c:9d:57:78:58:61:d8:bc:89:bf:30:65:d9:dd:bc:4c:6f: 01:ad:5d:f9:68:07:6e:a8:04:71:f7:32:b6:4c:24:4b:31:30: a5:ec:3f:d0:30:b9:50:c2:b6:94:b0:2d:57:d1:ba:72:b0:8a: 9e:9c:c2:8c:60:f2:77:e8:07:95:e7:cb:84:fc:dd:e4:95:ca: 55:e4:b4:af:22:67:80:93:57:cf:ce:2e:68:16:1f:6c:b7:35: 7d:8d:88:dc:85:61:47:b8:f4:da:1f:b2:16:5e:3e:36:b7:87: c0:83:64:56:2d:4b:ac:0c:55:b4:16:84:4d:46:73:02:bf:32: 45:6c:43:f1:47:08:88:dc:5b:04:89:70:57:8e:76:e6:76:e8: 01:ba:49:0c:86:57:a0:63:b6:72:19:59:57:1e:c3:d4:c4:f7: 8a:26:4c:01:68:43:ee:ad:f6:06:85:54:0f:de:e1:fa:87:9b: 3c:fe:a8:2d:30:c4:8d:49:70:88:f4:ab:49:f6:ca:48:40:74: d4:6b:e8:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FQoxEktJVGE01UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk Y2VkMDU4NTItMWVlNy00YTNhLWIxYTEtMjg2YTBhOWIyZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyxbVIM5QhGDzpAXimi3P/zjr7ytIeFL8RrW Ap3yZt5LrinRF456K+pOcBZ+6oLvqTFc7SVM27YgGGKneni6t73V7bxpdMOD2zCs +hgXXGaEIhVUG/rRhcb2cjZCwrs7ZAKQPRvRxhVxnHEg5i8MIjPBJjxiVgba9eFN MIE6dsOCVNpIY0mdn8QDKGN9qlu8yP55/5bNdNvBH/bObD+Cbk4jyA9R5k2k1Zh+ pYUSZ1BbnDAIdMvWl8xLxes7qfE4FCiQkwhVTin1BMyLY0OZBK603+1b6j7M8fdf 0ELsTPzJ3rLvqSjpFBMQnhpEQuoGzvcxQj0CoxR7MuvP5A3wfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKxJWzdtWgt6846gSp33LAySkgHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYjIwYmU4ZjctMDYzOC0z MzcwLTg3MTUtZjBhYWU0MDQ0N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wERE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtNnz5C7zj4KCScbgyyWS4VpjVqAmoVoev6OJpbO9gHDpy8HxiQ aI3PyxuSJ2iR0dnQEdXBpR+MnVd4WGHYvIm/MGXZ3bxMbwGtXfloB26oBHH3MrZM JEsxMKXsP9AwuVDCtpSwLVfRunKwip6cwoxg8nfoB5Xny4T83eSVylXktK8iZ4CT V8/OLmgWH2y3NX2NiNyFYUe49NofshZePja3h8CDZFYtS6wMVbQWhE1GcwK/MkVs Q/FHCIjcWwSJcFeOduZ26AG6SQyGV6BjtnIZWVcew9TE94omTAFoQ+6t9gaFVA/e 4fqHmzz+qC0wxI1JcIj0q0n2ykhAdNRr6GE= -----END CERTIFICATE-----Generated at Tue Sep 29 01:55:26 2026 by rpki-client