$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa File: a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa (raw, json) Hash identifier: 9j+gYDMERNxJzRgTiZCPDnLNHzUOgTGSz2TtbRZDcC8= Subject key identifier: 9F:49:68:64:E6:BC:BF:1B:C3:A1:C4:D5:21:84:E2:A0:2B:9E:03:FD Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F20F7CFEE5B9F7A8C8D1CDB00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 30103 IP address blocks: 2620:123:20a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:ee:5b:9f:7a:8c:8d:1c:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=900e55cd-941c-4606-9a7c-f82065a73bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:55:05:fc:8e:6a:92:8e:9d:7e:30:5b:55: 2e:40:be:77:af:cc:8a:d0:85:71:fd:7c:3a:28:9b: ee:81:7d:3c:47:32:0a:f3:8a:69:bb:27:fa:f8:4d: 18:40:e4:9e:2e:0a:96:d8:e0:c1:2d:9f:3f:ba:90: dc:a5:4d:7e:62:a6:b0:07:b3:44:29:4b:39:bd:69: 79:9b:60:37:b7:aa:1c:51:ee:dd:4e:77:17:a5:cd: 85:4b:b2:e7:31:d3:49:5e:12:f3:1c:2a:9f:9d:13: ec:8c:ac:23:38:58:5d:fe:ed:67:7c:c0:5c:7f:15: 9a:78:a2:0d:a4:53:71:e9:0c:79:f1:8b:a2:5e:15: 04:4d:7e:3a:6a:85:f4:15:62:88:bf:21:5f:65:06: 94:a8:95:19:33:e8:6f:5a:95:ee:a7:32:c4:e5:de: 0a:b7:4b:5e:ce:83:01:f0:e5:73:9a:1e:20:1b:59: dd:60:81:23:12:e2:47:3a:e2:c6:d4:57:6d:fb:23: f5:46:8d:75:e0:f8:8b:2b:ef:79:a7:1e:e1:8e:41: e5:c7:be:de:bb:6a:fb:a5:4f:88:ec:d3:67:31:75: 84:c4:fe:9f:a9:4e:63:d0:83:da:4f:c6:ee:2b:37: 2d:22:54:11:9e:b6:ea:e2:aa:1e:3e:0d:60:59:c5: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:68:64:E6:BC:BF:1B:C3:A1:C4:D5:21:84:E2:A0:2B:9E:03:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:20a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:31:75:18:1b:dd:c5:14:b3:5b:1a:e9:e4:f8:cf:d4:9a:1e: ac:87:55:4f:4d:c2:20:d3:dd:62:bf:6e:4c:81:90:05:2e:2a: 8c:43:fb:63:ca:4d:fa:24:3c:5c:4b:66:43:ad:76:3b:c8:1c: e2:84:35:c6:84:e1:63:aa:06:8c:e2:8a:61:96:b1:65:ba:80: 1b:72:38:8e:0f:fb:58:55:a8:13:8e:44:50:0d:17:59:cc:02: 71:eb:c3:29:ee:d6:15:c6:fd:ed:00:f5:0e:79:a0:36:12:37: e6:2a:64:35:4b:58:99:2b:3d:06:11:4d:62:77:c4:2b:33:31: a0:94:a7:a7:1f:bb:d2:17:39:72:97:6c:73:cb:28:7d:6a:cc: 3a:fb:5c:cc:b5:23:d6:c0:c4:60:fe:e4:c7:52:7f:ca:6a:22: d7:91:c6:af:49:96:0a:6f:35:b0:17:e4:85:c1:36:ce:e6:fd: 50:34:88:4f:49:43:f4:db:0f:ef:65:76:63:b5:10:26:22:6d: 69:6b:6b:7a:fc:36:dd:64:46:33:c0:8e:cb:6f:29:8e:c7:5c: eb:5b:bb:dd:71:e7:2c:43:59:8c:46:92:04:73:5c:8b:5c:be: b0:d2:55:2d:1a:ce:b7:a5:8f:78:65:d5:73:77:a6:08:7c:11: d4:15:2a:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g98/uW596jI0c2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OTAwZTU1Y2QtOTQxYy00NjA2LTlhN2MtZjgyMDY1YTczYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtVBfyOapKOnX4wW1UuQL53r8yK0IVx/Xw6 KJvugX08RzIK84ppuyf6+E0YQOSeLgqW2ODBLZ8/upDcpU1+YqawB7NEKUs5vWl5 m2A3t6ocUe7dTncXpc2FS7LnMdNJXhLzHCqfnRPsjKwjOFhd/u1nfMBcfxWaeKIN pFNx6Qx58YuiXhUETX46aoX0FWKIvyFfZQaUqJUZM+hvWpXupzLE5d4Kt0tezoMB 8OVzmh4gG1ndYIEjEuJHOuLG1Fdt+yP1Ro114PiLK+95px7hjkHlx77eu2r7pU+I 7NNnMXWExP6fqU5j0IPaT8buKzctIlQRnrbq4qoePg1gWcXwTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9JaGTmvL8bw6HE1SGE4qArngP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTNmNTZmMTMtZTFlOC0z M2NmLTk0ODAtN2QzNjFhNGRkNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsxdRgb3cUUs1sa6eT4z9SaHqyHVU9NwiDT3WK/bkyBkAUuKoxD +2PKTfokPFxLZkOtdjvIHOKENcaE4WOqBoziimGWsWW6gBtyOI4P+1hVqBOORFAN F1nMAnHrwynu1hXG/e0A9Q55oDYSN+YqZDVLWJkrPQYRTWJ3xCszMaCUp6cfu9IX OXKXbHPLKH1qzDr7XMy1I9bAxGD+5MdSf8pqIteRxq9JlgpvNbAX5IXBNs7m/VA0 iE9JQ/TbD+9ldmO1ECYibWlra3r8Nt1kRjPAjstvKY7HXOtbu91x5yxDWYxGkgRz XItcvrDSVS0azrelj3hl1XN3pgh8EdQVKlk= -----END CERTIFICATE-----Generated at Fri Sep 25 00:58:06 2026 by rpki-client