$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/52a4a591-07f6-3496-81c2-5241865097b8.roa File: 52a4a591-07f6-3496-81c2-5241865097b8.roa (raw, json) Hash identifier: r03jGvtqHXawFlLuvZR0Kd4shS11dFnB3dTGrjlXaFc= Subject key identifier: 6D:54:83:01:7B:96:0F:20:85:03:DB:45:8E:1F:85:FF:C1:24:7F:B0 Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9 Certificate serial: 010D0C9F4328584F4974A1B2A2ACB29D20CD8180 Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/52a4a591-07f6-3496-81c2-5241865097b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401671 IP address blocks: 2604:c20:c014::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a1:b2:a2:ac:b2:9d:20:cd:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57fdcae5-aba4-49e6-bf92-b389188c19cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:6f:06:a5:09:b1:7d:15:78:d2:2e:d5:d5: 17:c8:ec:4f:c8:aa:9f:4e:48:8c:04:6c:22:52:59: e6:7c:b8:23:28:77:22:73:6d:dd:08:38:37:13:70: ba:84:eb:45:a1:ec:a8:4c:27:af:69:8e:74:51:58: a3:48:da:1b:00:77:df:e3:be:37:d9:39:7b:b1:f4: 21:28:de:d9:18:b2:30:89:79:73:0b:27:9f:8a:84: 6f:9b:fc:2a:1e:25:78:c6:9e:c2:3c:f0:2d:07:ea: 44:43:74:d1:97:0b:52:5c:4c:ab:fd:ba:c0:89:79: 26:03:fb:b4:b0:a7:f9:f8:c4:1b:c9:31:2e:2d:ae: f7:69:54:3e:95:3b:ea:d1:bf:25:45:af:5f:64:20: a2:b2:f9:0b:d3:70:d5:ca:73:f6:1e:f4:60:d4:5c: 79:81:f9:c1:65:3b:e7:7f:73:ef:48:4d:82:4f:f5: a0:c4:c9:56:8f:8a:ce:63:31:2a:59:0c:9a:7a:7b: 48:a9:b2:60:5e:88:3b:74:0a:5f:87:4c:02:d7:28: f3:2c:15:ed:7f:46:d5:a3:b9:f8:db:b2:57:c0:b3: e1:26:dd:9d:f5:35:a6:51:64:e9:37:31:1e:36:d1: e5:cf:2e:e1:4f:0d:7e:49:1c:3a:47:70:76:16:2a: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:54:83:01:7B:96:0F:20:85:03:DB:45:8E:1F:85:FF:C1:24:7F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/52a4a591-07f6-3496-81c2-5241865097b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl X509v3 Authority Key Identifier: keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer sbgp-ipAddrBlock: critical IPv6: 2604:c20:c014::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:34:52:7f:0d:c2:81:7b:d4:de:f5:05:23:57:f8:c7:12:e4: 0f:b1:05:5c:ba:bd:a2:47:61:ee:f5:64:a9:8b:20:3e:b9:4f: 12:5b:4a:ee:dd:84:e6:75:70:5a:fb:f2:2f:9f:3d:6f:70:a5: 79:a2:af:47:06:89:12:14:ed:ce:05:0a:21:fc:c6:45:f1:20: 31:28:ed:28:8a:e4:b1:03:dd:69:00:e3:ca:88:1c:c0:db:e3: 83:4a:98:42:d0:82:08:4b:8e:04:55:66:95:3c:9a:c5:40:53: 53:cc:b2:12:c6:71:de:7f:4d:f4:4f:4a:94:6d:d7:d2:5c:4a: b4:ee:6d:68:25:a5:80:de:9e:22:73:28:4d:8e:50:4c:39:88: 5a:a6:64:0d:c5:ce:3b:72:7b:82:ec:d9:6d:9b:a1:ba:f0:10: 7b:9f:7c:6b:e7:ab:c3:79:e9:65:55:dd:4f:a1:02:51:6a:71: 0f:29:ee:b0:d9:c9:03:ac:7c:2a:b9:71:73:78:aa:0b:73:5f: c6:cd:d8:e8:bf:25:fd:7d:77:ca:d9:3e:b0:47:11:43:94:98: 75:74:6f:a3:63:23:a4:8d:91:ea:b4:3c:64:6e:db:6a:61:b0: b7:a4:f4:f8:45:c6:4d:53:43:36:db:d4:a4:64:86:5a:ce:d7: a1:0a:eb:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdKGyoqyynSDNgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2 YmQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdmZGNhZTUtYWJhNC00OWU2LWJmOTItYjM4OTE4OGMxOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjhvBqUJsX0VeNIu1dUXyOxPyKqfTkiMBGwi UlnmfLgjKHcic23dCDg3E3C6hOtFoeyoTCevaY50UVijSNobAHff47432Tl7sfQh KN7ZGLIwiXlzCyefioRvm/wqHiV4xp7CPPAtB+pEQ3TRlwtSXEyr/brAiXkmA/u0 sKf5+MQbyTEuLa73aVQ+lTvq0b8lRa9fZCCisvkL03DVynP2HvRg1Fx5gfnBZTvn f3PvSE2CT/WgxMlWj4rOYzEqWQyaentIqbJgXog7dApfh0wC1yjzLBXtf0bVo7n4 27JXwLPhJt2d9TWmUWTpNzEeNtHlzy7hTw1+SRw6R3B2FipzAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1UgwF7lg8ghQPbRY4fhf/BJH+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvNTJhNGE1OTEtMDdmNi0z NDk2LTgxYzItNTI0MTg2NTA5N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1 NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIMAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIE0Un8NwoF71N71BSNX+McS5A+xBVy6vaJHYe71ZKmLID65TxJb Su7dhOZ1cFr78i+fPW9wpXmir0cGiRIU7c4FCiH8xkXxIDEo7SiK5LED3WkA48qI HMDb44NKmELQgghLjgRVZpU8msVAU1PMshLGcd5/TfRPSpRt19JcSrTubWglpYDe niJzKE2OUEw5iFqmZA3Fzjtye4Ls2W2bobrwEHuffGvnq8N56WVV3U+hAlFqcQ8p 7rDZyQOsfCq5cXN4qgtzX8bN2Oi/Jf19d8rZPrBHEUOUmHV0b6NjI6SNkeq0PGRu 22phsLek9PhFxk1TQzbb1KRkhlrO16EK6+8= -----END CERTIFICATE-----Generated at Fri Sep 25 22:58:18 2026 by rpki-client