$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa File: 15d81619-7dda-31a8-a0ce-5b5ababa717e.roa (raw, json) Hash identifier: M0N3gneb0vzJNBuThuuAycEXDOxs1pPBKHFiZFjfRMg= Subject key identifier: DA:8F:0E:36:1C:DC:E5:1E:76:87:D2:00:B4:AF:0C:88:41:53:42:1B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F31B7C2AEB84730E85C06D280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30215 IP address blocks: 2620:101:200d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c2:ae:b8:47:30:e8:5c:06:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=3a03847f-0eb2-4edc-bfbe-e84631970c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:59:8c:c6:ed:1a:2a:65:32:27:08:dc:09: e3:2c:54:63:29:bf:2f:b1:53:7d:f8:b7:09:d4:e6: d4:5f:73:4b:d1:21:f2:10:f8:37:f5:36:31:5e:1e: 23:d1:3c:4b:73:28:8b:05:f7:55:4a:28:f6:4e:61: 2b:97:5b:22:36:1f:02:ae:ba:a5:4b:fe:a1:f5:c0: 56:89:d2:dc:c6:0b:8e:19:27:c1:d4:f3:7c:5b:1c: c5:48:3f:7b:05:6d:92:f2:e9:a9:8a:55:a8:65:a8: 95:86:ba:2c:1f:b9:62:26:23:41:de:3e:e0:a2:99: eb:76:3a:ad:97:6a:3d:22:dc:52:fe:ef:a5:67:87: e1:f1:6c:5d:91:7f:d2:39:5e:e8:33:aa:4c:a3:3c: c9:bf:07:77:8c:aa:e4:b6:98:95:cd:56:34:3d:42: 33:b4:e8:ba:b4:de:46:89:ab:2e:04:e4:6c:9d:ba: b2:00:2a:ec:b7:52:ad:93:15:a8:e3:ee:2f:10:1b: e8:0c:39:c2:f3:f4:55:14:99:5a:22:2b:9b:3f:59: eb:06:27:96:a7:44:70:73:df:0d:7a:00:58:10:c8: 12:62:b6:5d:73:6b:f7:5c:5a:fe:fc:8f:8d:f5:4f: f5:b5:7d:a8:13:be:ba:28:0a:d9:df:d6:31:db:ee: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8F:0E:36:1C:DC:E5:1E:76:87:D2:00:B4:AF:0C:88:41:53:42:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/15d81619-7dda-31a8-a0ce-5b5ababa717e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:200d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0d:23:78:3f:89:fc:e7:e5:f2:35:f5:2e:cd:07:fb:df:05: bb:8d:7b:1d:36:90:6c:41:f5:2c:38:47:d9:44:2e:cf:dc:fb: cc:9d:d0:f4:e3:f4:a9:b7:a0:4b:f9:29:3c:fe:ce:2a:30:1b: d9:4e:11:72:db:1b:44:d9:a2:1a:6b:b4:bf:a2:3a:cd:62:3a: 04:ce:d4:59:5c:a8:4e:64:2a:90:94:a2:38:57:3d:ca:da:8b: 06:6d:ad:98:4c:d6:65:d0:58:d8:99:8e:cb:38:01:5f:bc:df: eb:95:f3:f4:ef:c2:46:c5:ba:a5:45:ce:bf:eb:e8:23:90:81: d8:0c:e9:5c:2a:1d:a3:12:0b:e5:18:d4:f4:c0:7d:2e:f5:50: b9:88:94:34:85:43:e8:32:74:37:34:d8:91:ec:12:10:c4:55: c1:fa:9c:37:fb:a8:ef:de:27:82:cc:bb:5f:f4:d3:34:e6:46: 3b:78:0a:70:63:6b:f8:e8:95:35:a6:dc:d1:d8:02:fb:4f:ce: d9:19:06:aa:52:86:7e:d4:6d:3f:cb:ae:05:22:b6:9b:82:02: 59:b0:5e:53:1e:ec:ec:a8:12:b8:15:e2:ec:2a:3f:ee:f6:5d: 0c:03:db:47:c2:c5:cf:4f:ac:1d:64:8d:b6:a0:e0:9c:c6:e8: 1f:31:bd:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8xt8KuuEcw6FwG0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk M2EwMzg0N2YtMGViMi00ZWRjLWJmYmUtZTg0NjMxOTcwYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitlZjMbtGiplMicI3AnjLFRjKb8vsVN9+LcJ 1ObUX3NL0SHyEPg39TYxXh4j0TxLcyiLBfdVSij2TmErl1siNh8CrrqlS/6h9cBW idLcxguOGSfB1PN8WxzFSD97BW2S8umpilWoZaiVhrosH7liJiNB3j7gopnrdjqt l2o9ItxS/u+lZ4fh8WxdkX/SOV7oM6pMozzJvwd3jKrktpiVzVY0PUIztOi6tN5G iasuBORsnbqyACrst1KtkxWo4+4vEBvoDDnC8/RVFJlaIiubP1nrBieWp0Rwc98N egBYEMgSYrZdc2v3XFr+/I+N9U/1tX2oE766KArZ39Yx2+4VCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqPDjYc3OUedofSALSvDIhBU0IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTVkODE2MTktN2RkYS0z MWE4LWEwY2UtNWI1YWJhYmE3MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALwNI3g/ifzn5fI19S7NB/vfBbuNex02kGxB9Sw4R9lELs/c+8yd 0PTj9Km3oEv5KTz+ziowG9lOEXLbG0TZohprtL+iOs1iOgTO1FlcqE5kKpCUojhX PcraiwZtrZhM1mXQWNiZjss4AV+83+uV8/TvwkbFuqVFzr/r6COQgdgM6VwqHaMS C+UY1PTAfS71ULmIlDSFQ+gydDc02JHsEhDEVcH6nDf7qO/eJ4LMu1/00zTmRjt4 CnBja/jolTWm3NHYAvtPztkZBqpShn7UbT/LrgUitpuCAlmwXlMe7OyoErgV4uwq P+72XQwD20fCxc9PrB1kjbag4JzG6B8xvc4= -----END CERTIFICATE-----Generated at Tue Sep 29 13:02:55 2026 by rpki-client