$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45abfac7-0b86-39ad-a084-468ffd8ba20c.roa File: 45abfac7-0b86-39ad-a084-468ffd8ba20c.roa (raw, json) Hash identifier: QDICqvFDJ0IJd1Ssx37OxWYhOCuSqhrWY6AvFkYn/LY= Subject key identifier: 5B:D9:07:AE:E1:C4:BE:88:E4:FF:B2:A7:70:B7:31:06:77:31:C4:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F49865B837FCAF1ACE9E8F900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45abfac7-0b86-39ad-a084-468ffd8ba20c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 2600:100c:a222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:5b:83:7f:ca:f1:ac:e9:e8:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5435f10c-8cdf-4c09-82fa-6e271c810446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:e9:65:4b:9a:0e:32:fe:2f:d8:31:81:97: 03:ec:6b:d4:17:48:b9:7b:b3:01:1a:69:60:a1:58: 55:7b:2d:38:19:b2:46:35:28:b6:17:ec:84:90:7e: b9:64:66:bb:3a:98:86:76:9b:db:62:f2:a6:69:ac: bd:ef:6e:13:21:d0:62:88:e7:b6:22:f4:36:d7:67: f6:ae:d3:82:64:fb:06:96:47:24:21:2f:a9:97:c6: d2:8c:64:38:77:14:4b:a7:48:50:e6:cc:1a:30:7d: 37:94:1a:d6:7f:00:89:55:20:e7:66:12:48:1d:27: c2:98:8c:8d:02:8e:e0:79:53:40:4b:eb:86:b1:51: a4:05:49:17:3f:52:36:f9:8b:d9:32:46:49:58:95: d2:f1:6a:43:99:a3:d3:af:99:d5:ba:fe:af:e1:1e: 87:a9:c0:7c:b2:77:b5:44:5a:54:fb:96:1d:42:1a: 05:e5:1c:49:85:b7:24:19:67:2d:1d:ca:db:eb:97: 6e:98:3a:d6:14:f2:58:c5:94:ea:af:ab:1b:83:41: f3:52:02:1c:60:e2:82:d9:36:d2:22:86:7e:97:31: 4c:32:f8:4b:5d:cd:61:78:16:88:e0:30:33:11:92: c7:4c:8c:41:39:ee:42:60:52:3b:ad:0d:cd:d7:f5: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:07:AE:E1:C4:BE:88:E4:FF:B2:A7:70:B7:31:06:77:31:C4:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45abfac7-0b86-39ad-a084-468ffd8ba20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:a222::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:4c:5c:37:82:cb:80:c3:da:fe:b4:6f:45:dd:ce:87:3c:48: 27:07:6f:76:c8:a0:a8:1d:d8:d8:e3:53:76:c6:b4:0f:4f:cc: bb:23:3d:71:8b:82:63:32:a0:70:fa:ac:64:fe:56:1e:36:e5: 27:d9:24:a1:8f:1c:14:b8:29:98:02:71:51:fb:84:45:4e:ed: 28:70:74:c9:d8:29:a6:82:5d:0b:2e:5b:e3:4d:11:69:8e:2a: 2c:b0:a1:3b:81:79:b4:bc:0d:22:c5:85:09:e0:a2:cf:4d:29: a7:71:bf:6e:e5:53:96:7f:30:60:3c:ce:1f:e1:7b:56:ea:45: 23:50:63:eb:62:57:43:24:93:b0:e1:ab:65:69:23:87:29:7a: 1d:c7:d0:5d:35:71:db:55:68:bc:d7:62:c7:e5:78:af:8f:0d: d4:22:4c:da:84:9a:33:42:f6:e8:3f:ba:a5:bc:bc:d9:9c:5e: 43:cb:3b:25:22:c0:dc:81:7a:4a:fb:11:9a:7f:7e:83:44:da: 78:1a:54:6b:e3:52:e3:21:ee:5a:52:5a:61:ee:13:1a:3d:96: 62:f1:15:a7:08:dc:0c:b3:1a:3d:3a:5d:47:d0:08:f8:39:5e: d6:67:2d:4c:4d:40:11:cc:d2:96:8c:f1:ea:0c:9c:02:ba:61: 39:7a:bf:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhluDf8rxrOno+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTQzNWYxMGMtOGNkZi00YzA5LTgyZmEtNmUyNzFjODEwNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNfpZUuaDjL+L9gxgZcD7GvUF0i5e7MBGmlg oVhVey04GbJGNSi2F+yEkH65ZGa7OpiGdpvbYvKmaay9724TIdBiiOe2IvQ212f2 rtOCZPsGlkckIS+pl8bSjGQ4dxRLp0hQ5swaMH03lBrWfwCJVSDnZhJIHSfCmIyN Ao7geVNAS+uGsVGkBUkXP1I2+YvZMkZJWJXS8WpDmaPTr5nVuv6v4R6HqcB8sne1 RFpU+5YdQhoF5RxJhbckGWctHcrb65dumDrWFPJYxZTqr6sbg0HzUgIcYOKC2TbS IoZ+lzFMMvhLXc1heBaI4DAzEZLHTIxBOe5CYFI7rQ3N1/UuGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvZB67hxL6I5P+yp3C3MQZ3McRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDVhYmZhYzctMGI4Ni0z OWFkLWEwODQtNDY4ZmZkOGJhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDKIi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhMXDeCy4DD2v60b0Xdzoc8SCcHb3bIoKgd2NjjU3bGtA9PzLsj PXGLgmMyoHD6rGT+Vh425SfZJKGPHBS4KZgCcVH7hEVO7ShwdMnYKaaCXQsuW+NN EWmOKiywoTuBebS8DSLFhQngos9NKadxv27lU5Z/MGA8zh/he1bqRSNQY+tiV0Mk k7Dhq2VpI4cpeh3H0F01cdtVaLzXYsfleK+PDdQiTNqEmjNC9ug/uqW8vNmcXkPL OyUiwNyBekr7EZp/foNE2ngaVGvjUuMh7lpSWmHuExo9lmLxFacI3AyzGj06XUfQ CPg5XtZnLUxNQBHM0paM8eoMnAK6YTl6vyk= -----END CERTIFICATE-----Generated at Mon Sep 28 21:00:31 2026 by rpki-client