$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa File: 9aa1d08a-932f-3361-a443-5cd240a7b52f.roa (raw, json) Hash identifier: zBLZ3bQqEJmdrPdmDuvwtr8dQCV8LInOhGr4UVmeEnQ= Subject key identifier: 88:75:C9:D5:C3:92:E1:C3:C5:4F:1E:0B:78:AC:18:36:54:FB:36:19 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584F497404AA078B8716536D1F20 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55195 IP address blocks: 2620:10a:80eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:04:aa:07:8b:87:16:53:6d:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df5d6c65-1c6a-43eb-843c-ee8f698d044b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:0e:d3:a6:be:c9:9e:1a:8f:f5:85:eb:2d: 9d:75:1f:69:5c:00:e0:a7:af:05:b4:67:81:19:9c: 05:fc:da:8b:8c:d9:e9:9b:48:93:7a:99:22:4a:79: 67:d9:a8:40:3e:99:a5:42:17:7c:a0:77:22:8f:c0: fa:51:31:b2:fa:9b:58:bf:8c:ee:6b:87:7b:0b:8e: ac:2e:c6:7f:50:1f:0d:54:12:0a:aa:b9:81:d7:75: 60:c2:ed:ab:10:b9:15:39:77:68:2b:24:2c:fb:6f: b1:d5:3e:1b:27:6f:62:45:38:a4:ff:1b:a4:2e:51: 63:cb:c9:ba:a0:e3:8d:48:8a:de:5d:e9:fc:b0:44: 49:7e:81:3c:83:a8:5e:24:5b:76:d2:78:d5:e2:90: fb:9d:96:d7:d4:4d:61:8d:20:a5:bd:98:76:fc:0b: a8:71:43:c8:49:78:ad:dc:0e:a9:41:fa:7e:67:e4: 4b:a5:11:00:93:b7:f7:e9:d5:c0:c6:08:40:b3:a1: ce:10:ec:6e:63:32:2f:cc:70:8f:55:ed:92:92:42: 6c:23:cf:41:e5:18:33:c2:8f:24:b1:c0:66:41:3c: f5:8a:da:58:8e:58:a7:77:3d:fb:1a:5a:31:80:04: 17:a6:4d:3a:0a:55:28:a3:0b:2d:cf:2d:88:81:fd: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:75:C9:D5:C3:92:E1:C3:C5:4F:1E:0B:78:AC:18:36:54:FB:36:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9aa1d08a-932f-3361-a443-5cd240a7b52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:80eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0a:b7:7e:2a:b1:72:c8:70:88:41:79:24:e8:8a:b1:88:c5: ad:4c:0b:d3:0d:7a:09:9d:2d:10:e2:85:de:05:51:b4:cf:b6: ac:33:65:3a:de:21:e3:90:b9:70:02:7e:19:41:d9:9b:1f:c7: a0:1a:f5:55:20:20:ee:d9:4d:c6:32:72:c8:08:65:44:87:fc: 4f:45:b6:57:5e:51:5b:57:a2:da:ab:c1:48:2f:b9:22:b6:fc: 6a:2c:a1:e8:1a:1b:5d:8f:bd:b6:73:7a:77:95:e5:c8:68:07: dc:b9:be:1f:11:9b:5a:93:f0:df:20:a9:47:33:d7:2c:5f:04: d8:96:ad:73:c5:0a:47:24:4f:bb:ab:06:3e:7f:5f:da:6d:27: 36:fc:13:98:43:66:43:a0:a4:c9:ee:6f:0a:5c:7a:64:26:0c: 4d:be:19:61:33:a1:38:27:1e:04:c2:42:9f:b0:b8:25:99:a2: b3:e5:39:eb:b1:15:13:0a:ea:ea:ac:39:ab:9e:10:52:c8:f4: 10:13:05:be:48:b1:e7:79:a2:1d:fc:81:d4:34:ce:e9:de:e7: 9d:69:1d:d9:4c:e8:94:57:c4:3e:38:a5:30:e9:fd:d7:ea:a5: df:c9:2f:58:d8:97:66:cf:8a:09:7e:38:4e:3b:4a:66:18:b5: da:c0:49:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdASqB4uHFlNtHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY1ZDZjNjUtMWM2YS00M2ViLTg0M2MtZWU4ZjY5OGQwNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVEO06a+yZ4aj/WF6y2ddR9pXADgp68FtGeB GZwF/NqLjNnpm0iTepkiSnln2ahAPpmlQhd8oHcij8D6UTGy+ptYv4zua4d7C46s LsZ/UB8NVBIKqrmB13Vgwu2rELkVOXdoKyQs+2+x1T4bJ29iRTik/xukLlFjy8m6 oOONSIreXen8sERJfoE8g6heJFt20njV4pD7nZbX1E1hjSClvZh2/AuocUPISXit 3A6pQfp+Z+RLpREAk7f36dXAxghAs6HOEOxuYzIvzHCPVe2SkkJsI89B5Rgzwo8k scBmQTz1itpYjlindz37GloxgAQXpk06ClUoowstzy2Igf1lFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIh1ydXDkuHDxU8eC3isGDZU+zYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvOWFhMWQwOGEtOTMyZi0z MzYxLWE0NDMtNWNkMjQwYTdiNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoDr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEKt34qsXLIcIhBeSToirGIxa1MC9MNegmdLRDihd4FUbTPtqwz ZTreIeOQuXACfhlB2Zsfx6Aa9VUgIO7ZTcYycsgIZUSH/E9FtldeUVtXotqrwUgv uSK2/GosoegaG12PvbZzeneV5choB9y5vh8Rm1qT8N8gqUcz1yxfBNiWrXPFCkck T7urBj5/X9ptJzb8E5hDZkOgpMnubwpcemQmDE2+GWEzoTgnHgTCQp+wuCWZorPl OeuxFRMK6uqsOaueEFLI9BATBb5Ised5oh38gdQ0zune551pHdlM6JRXxD44pTDp /dfqpd/JL1jYl2bPigl+OE47SmYYtdrASdc= -----END CERTIFICATE-----Generated at Sat Sep 26 03:32:09 2026 by rpki-client