$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa File: fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa (raw, json) Hash identifier: RHA2Lkd6cTOp3WvwCQOcLMugXEnH4wLg/BdnLL6G4as= Subject key identifier: 37:97:3B:C9:FD:F7:4C:F3:43:3E:D8:12:E2:54:63:AD:D2:8F:74:E7 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584FA2C889092C8C6C2E88E32300 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 16509 IP address blocks: 2604:1f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:89:09:2c:8c:6c:2e:88:e3:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=b2fbd21c-0cad-4e58-b1a5-8fbb14d75474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:2d:b7:9a:f0:94:2c:f6:1a:6b:f0:7b:8c: 92:6f:3d:ef:9a:4b:ac:4f:15:b2:72:1d:58:93:44: a1:13:fe:02:57:a2:66:16:fd:32:7a:42:2c:50:fe: 12:86:30:d7:19:06:53:b3:74:56:08:2f:aa:35:11: 0d:df:a9:18:8b:e0:d9:f3:b1:87:37:f9:cb:85:8c: e8:11:3f:0c:82:c1:df:5f:f7:72:57:fd:03:fd:fb: 92:07:93:c5:03:86:4a:f3:2c:de:86:17:ab:39:52: f2:81:88:55:1d:bd:8c:89:6a:e9:75:1c:c9:ec:41: 75:a5:c5:09:d6:cb:77:23:fa:dc:f0:92:66:11:ab: b2:b8:df:41:c0:36:67:c2:91:e8:ac:c1:69:82:19: dc:e2:26:59:40:b0:ec:a5:e1:ee:fb:6c:97:91:b5: 37:f7:71:42:d0:61:30:93:0d:51:5c:63:a7:93:82: 11:c4:8e:67:51:22:6b:95:4d:a2:38:b3:c4:31:e6: be:9b:8c:f8:6a:de:69:36:4a:80:fd:40:55:47:f8: b1:45:1d:2c:47:54:a2:97:9e:f4:b3:35:67:0c:7c: 6e:80:d4:00:93:11:fb:fc:6a:65:ba:7e:69:5f:b5: 30:08:63:b6:91:57:ea:44:af:b3:67:7f:34:da:4e: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:97:3B:C9:FD:F7:4C:F3:43:3E:D8:12:E2:54:63:AD:D2:8F:74:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/fc8e5b05-a9fb-3681-af38-50a24bc1328a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:30:89:75:ef:d5:5d:0b:29:e8:0f:e3:91:5a:c5:7d:df:61: 28:04:98:50:1e:3a:77:c2:6d:2c:42:cb:87:f5:f3:20:35:ae: d0:e4:84:9e:55:88:2f:d3:9b:81:b4:75:4b:3f:cd:e5:e4:d4: 7d:5f:0c:f1:fb:07:9c:52:74:a4:31:1c:c6:54:53:33:ee:3b: e9:14:74:d5:72:8c:de:be:de:fb:93:10:11:d5:f3:61:4c:55: c0:94:8a:ab:58:95:0a:7a:fd:be:b1:81:31:7d:71:9d:8a:a1: 50:62:56:8d:3b:c2:61:7a:49:21:3c:d7:de:c2:0b:1c:14:b0: a6:35:8e:4c:af:4f:22:9b:16:fb:6f:21:f5:d8:a5:b6:ad:05: 76:d3:6d:ea:bc:d7:ff:db:e1:1d:1d:93:73:be:2b:91:42:21: d8:56:9c:ba:fd:1c:4a:75:f2:f6:86:83:5d:19:75:6c:ae:2f: 22:05:3e:40:08:79:a1:e9:5e:63:5c:7d:52:e3:21:d0:4b:80: 70:5d:db:81:e4:d6:d2:f1:98:21:87:1e:a7:73:d4:69:b9:7c: 3e:ae:e5:77:ac:95:92:70:fd:dc:64:b2:15:b0:1c:b1:d5:44: 3d:35:78:39:23:44:8c:aa:8d:3f:48:a2:b2:3a:f4:de:f6:60: cc:9f:d0:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+iyIkJLIxsLojjIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk YjJmYmQyMWMtMGNhZC00ZTU4LWIxYTUtOGZiYjE0ZDc1NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEtt5rwlCz2Gmvwe4ySbz3vmkusTxWych1Y k0ShE/4CV6JmFv0yekIsUP4ShjDXGQZTs3RWCC+qNREN36kYi+DZ87GHN/nLhYzo ET8MgsHfX/dyV/0D/fuSB5PFA4ZK8yzehherOVLygYhVHb2MiWrpdRzJ7EF1pcUJ 1st3I/rc8JJmEauyuN9BwDZnwpHorMFpghnc4iZZQLDspeHu+2yXkbU393FC0GEw kw1RXGOnk4IRxI5nUSJrlU2iOLPEMea+m4z4at5pNkqA/UBVR/ixRR0sR1Sil570 szVnDHxugNQAkxH7/Gplun5pX7UwCGO2kVfqRK+zZ3802k5IyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDeXO8n990zzQz7YEuJUY63Sj3TnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvZmM4ZTViMDUtYTlmYi0z NjgxLWFmMzgtNTBhMjRiYzEzMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwwiXXv1V0LKegP45FaxX3fYSgEmFAeOnfCbSxCy4f18yA1rtDk hJ5ViC/Tm4G0dUs/zeXk1H1fDPH7B5xSdKQxHMZUUzPuO+kUdNVyjN6+3vuTEBHV 82FMVcCUiqtYlQp6/b6xgTF9cZ2KoVBiVo07wmF6SSE8197CCxwUsKY1jkyvTyKb FvtvIfXYpbatBXbTbeq81//b4R0dk3O+K5FCIdhWnLr9HEp18vaGg10ZdWyuLyIF PkAIeaHpXmNcfVLjIdBLgHBd24Hk1tLxmCGHHqdz1Gm5fD6u5XeslZJw/dxkshWw HLHVRD01eDkjRIyqjT9IorI69N72YMyf0Mg= -----END CERTIFICATE-----Generated at Sun Nov 15 21:17:50 2026 by rpki-client