$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa File: 3af3759a-1d33-3553-bb4a-6789e2c80c41.roa (raw, json) Hash identifier: 8ayyyrIU+EPktitF+NXXtcir0DYj5ZPdGUEEhDFhz0w= Subject key identifier: C2:2A:DA:B1:A4:90:D2:0F:8B:6E:8C:D2:5C:52:3A:67:FB:A6:45:8F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F3CE29F03AC6F9D744369E200 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 30103 IP address blocks: 2620:123:200b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9f:03:ac:6f:9d:74:43:69:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=3d3d0147-8c79-4101-bf90-9982ef363004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:f2:f5:de:68:3e:99:f0:94:14:d1:d6:6e: a4:34:c6:be:c5:cb:e5:7d:0d:6b:d3:3e:b3:76:7d: 21:64:28:22:27:0a:a3:67:df:39:54:b7:52:e0:a3: c0:7f:0e:f7:74:81:37:88:d8:77:22:63:39:6d:2b: 4e:22:e4:78:d8:15:b9:70:b7:f9:64:c6:2c:c9:a0: 92:73:b6:c0:f0:ad:c6:ca:57:9c:93:20:fc:ca:33: 86:d8:85:a5:e3:2e:4a:35:a9:7b:61:3a:10:ad:86: f0:5d:a4:06:d5:84:71:09:75:4a:b1:8a:8f:00:95: c5:4c:c6:5b:49:70:70:0a:7b:1c:ff:0d:ac:42:01: 22:94:73:88:7a:54:dc:cd:04:06:35:a8:22:fa:e9: 11:74:7f:8b:c2:4a:b2:be:29:1a:50:d5:0e:d6:e2: 81:9c:1a:10:9e:83:86:55:5d:47:49:56:28:34:f9: e8:b0:e7:6b:10:db:85:ed:da:82:a5:06:78:46:d0: b6:8a:cb:3e:2e:42:e0:b5:79:85:aa:72:a7:80:26: d0:08:e8:da:3f:27:44:04:72:a1:a1:96:66:5c:d7: 19:d3:f9:bf:d7:a2:6f:11:80:58:04:eb:f7:53:df: b9:68:60:5c:08:73:32:07:76:6e:d8:d0:2b:e5:aa: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:DA:B1:A4:90:D2:0F:8B:6E:8C:D2:5C:52:3A:67:FB:A6:45:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:200b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3c:0d:e1:b5:da:2d:12:2b:6b:62:1c:95:0c:93:28:35:b5: 34:28:42:9f:45:27:c2:77:45:66:ec:29:45:f5:d6:25:61:fb: 96:cc:17:62:a4:d9:ed:6f:9a:fb:0d:3a:99:68:71:ae:20:2d: a6:52:6d:48:c6:cd:12:66:53:69:5e:54:ef:86:9d:9e:bc:05: 82:b8:d6:14:99:7c:52:a3:68:44:51:bf:7b:5e:de:11:57:f7: e5:d0:74:6e:db:68:ae:ba:aa:45:9a:9d:b5:42:43:ed:7f:80: 1b:a1:06:ef:ff:79:e1:b6:f6:8e:f8:7d:c6:ac:aa:51:c9:18: e8:57:50:7d:25:32:69:ec:ee:71:3d:85:dd:4a:31:50:3f:ad: 67:c5:30:75:43:51:eb:33:ad:48:f8:85:03:91:c4:29:3f:c2: 5f:a6:b4:8f:9f:78:a2:bf:4c:6f:eb:87:1b:e4:eb:57:61:00: 56:e3:86:72:7a:0f:49:d9:81:0e:e2:fa:bc:a7:6d:d0:aa:97: ef:e9:78:5f:ac:12:4e:d9:c3:3c:57:a3:eb:8d:24:7c:3a:c6: a1:2a:1d:ac:cf:21:61:93:e3:1b:24:9b:0c:09:aa:31:38:2e: 81:36:56:51:3e:3b:e7:4b:ae:8c:8c:27:aa:09:92:2f:0a:1c: fc:ed:d6:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884p8DrG+ddENp4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk M2QzZDAxNDctOGM3OS00MTAxLWJmOTAtOTk4MmVmMzYzMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Xy9d5oPpnwlBTR1m6kNMa+xcvlfQ1r0z6z dn0hZCgiJwqjZ985VLdS4KPAfw73dIE3iNh3ImM5bStOIuR42BW5cLf5ZMYsyaCS c7bA8K3GyleckyD8yjOG2IWl4y5KNal7YToQrYbwXaQG1YRxCXVKsYqPAJXFTMZb SXBwCnsc/w2sQgEilHOIelTczQQGNagi+ukRdH+LwkqyvikaUNUO1uKBnBoQnoOG VV1HSVYoNPnosOdrENuF7dqCpQZ4RtC2iss+LkLgtXmFqnKngCbQCOjaPydEBHKh oZZmXNcZ0/m/16JvEYBYBOv3U9+5aGBcCHMyB3Zu2NAr5aqr1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMIq2rGkkNIPi26M0lxSOmf7pkWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2FmMzc1OWEtMWQzMy0z NTUzLWJiNGEtNjc4OWUyYzgwYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKM8DeG12i0SK2tiHJUMkyg1tTQoQp9FJ8J3RWbsKUX11iVh+5bM F2Kk2e1vmvsNOploca4gLaZSbUjGzRJmU2leVO+GnZ68BYK41hSZfFKjaERRv3te 3hFX9+XQdG7baK66qkWanbVCQ+1/gBuhBu//eeG29o74fcasqlHJGOhXUH0lMmns 7nE9hd1KMVA/rWfFMHVDUeszrUj4hQORxCk/wl+mtI+feKK/TG/rhxvk61dhAFbj hnJ6D0nZgQ7i+rynbdCql+/peF+sEk7ZwzxXo+uNJHw6xqEqHazPIWGT4xskmwwJ qjE4LoE2VlE+O+dLroyMJ6oJki8KHPzt1i0= -----END CERTIFICATE-----Generated at Mon Sep 28 11:27:28 2026 by rpki-client