$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa File: cd942d33-d988-3945-ba55-c98341144167.roa (raw, json) Hash identifier: vemv1pw6+e/AoYX4yuZ3G9H1t6YOhodBl3jPVUYeyQg= Subject key identifier: 3C:48:E3:55:0C:1C:85:A2:3B:5A:23:35:40:BF:78:45:3A:55:CC:08 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F4976476A0BDBB3726FC5F9C0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30103 IP address blocks: 2620:123:2086::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:47:6a:0b:db:b3:72:6f:c5:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49238801-2334-495d-b9c9-d59add001c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:d0:72:fa:9a:4d:7c:62:bd:a7:45:dd:82: d6:5b:5a:18:3a:68:6b:ff:5e:2c:8f:a4:77:6f:82: d7:0a:45:e4:9b:da:4c:88:5c:d2:1f:44:17:27:79: 3f:64:57:a8:b5:19:f8:4b:1b:a9:ae:be:10:97:fb: 58:62:49:04:03:65:91:9c:51:11:bf:94:88:60:9d: 63:bc:74:d8:93:c1:77:35:a0:9a:87:b1:b2:4a:0f: 8a:ee:ac:a2:62:f6:ef:7e:f2:a2:a1:e6:9a:af:99: cd:cc:8f:e1:67:dc:4e:7e:ad:c1:8b:97:3d:f2:60: 86:8d:61:f8:d9:b0:08:42:49:1f:46:66:90:ab:8e: d5:57:ad:ba:f0:80:5d:53:10:cf:0a:7c:63:ef:ae: 4e:7a:25:4a:65:b6:30:96:32:39:cb:af:ca:b8:be: 0d:eb:58:80:59:97:2c:37:4c:3b:3c:c9:40:b8:ef: 30:9a:de:a3:6e:aa:46:ac:dd:7a:67:aa:b3:4f:73: 91:5d:07:77:8f:12:d0:45:5c:ba:14:d8:d8:6a:9e: 8d:6e:e5:ad:4c:cd:0e:3c:63:64:0c:2f:63:49:c0: 73:e3:e6:f8:7d:18:b8:41:fd:af:6c:b7:ab:02:a5: fa:af:71:fa:97:59:ae:80:53:b1:54:fe:43:0b:3e: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:E3:55:0C:1C:85:A2:3B:5A:23:35:40:BF:78:45:3A:55:CC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2086::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c1:62:4d:4f:a0:08:bc:89:f7:4c:fc:db:1a:9a:2b:c7:a9: d7:57:38:cf:b8:db:5e:78:2e:ac:36:f8:98:e1:b4:09:32:92: c2:19:38:3b:b1:15:4f:44:bf:45:39:a5:ee:62:e9:ef:32:4d: 81:3d:f2:14:b6:aa:56:ce:74:9d:94:5a:cc:84:4c:d3:7e:f8: 47:95:c7:71:04:21:9b:56:40:7d:77:36:9a:7c:39:c7:72:1c: fe:21:4e:f3:9f:99:13:65:a0:27:eb:25:ab:4d:db:a0:5a:a3: a3:0d:a7:a9:0d:9b:b6:61:37:42:6c:1d:73:5b:6e:51:ca:8c: 43:1d:dd:8a:b1:cd:ef:f1:7a:4d:8d:23:57:6d:27:b4:fa:37: 52:92:18:b6:36:c3:d7:73:1e:9e:4d:b1:b6:2f:fb:bb:8a:4f: fb:71:d8:b0:60:d8:d1:ac:0e:4b:b1:b7:3f:19:fa:0a:ff:be: e7:a3:9f:07:77:fb:36:95:d8:5c:2e:e5:85:a7:c0:06:82:f0: 55:d4:e6:41:3e:60:59:7a:93:c8:2f:77:93:5f:16:ec:9d:70: 65:de:7d:78:ad:64:d3:64:41:42:d3:94:91:72:36:11:3f:20: 50:de:5f:45:a2:a6:60:23:d6:09:4e:51:6f:95:4d:70:42:28: 37:2e:ba:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdkdqC9uzcm/F+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkyMzg4MDEtMjMzNC00OTVkLWI5YzktZDU5YWRkMDAxYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CTQcvqaTXxivadF3YLWW1oYOmhr/14sj6R3 b4LXCkXkm9pMiFzSH0QXJ3k/ZFeotRn4Sxuprr4Ql/tYYkkEA2WRnFERv5SIYJ1j vHTYk8F3NaCah7GySg+K7qyiYvbvfvKioeaar5nNzI/hZ9xOfq3Bi5c98mCGjWH4 2bAIQkkfRmaQq47VV6268IBdUxDPCnxj765OeiVKZbYwljI5y6/KuL4N61iAWZcs N0w7PMlAuO8wmt6jbqpGrN16Z6qzT3ORXQd3jxLQRVy6FNjYap6NbuWtTM0OPGNk DC9jScBz4+b4fRi4Qf2vbLerAqX6r3H6l1mugFOxVP5DCz5NcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxI41UMHIWiO1ojNUC/eEU6VcwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvY2Q5NDJkMzMtZDk4OC0z OTQ1LWJhNTUtYzk4MzQxMTQ0MTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALBYk1PoAi8ifdM/NsamivHqddXOM+42154Lqw2+JjhtAkyksIZ ODuxFU9Ev0U5pe5i6e8yTYE98hS2qlbOdJ2UWsyETNN++EeVx3EEIZtWQH13Npp8 OcdyHP4hTvOfmRNloCfrJatN26Bao6MNp6kNm7ZhN0JsHXNbblHKjEMd3Yqxze/x ek2NI1dtJ7T6N1KSGLY2w9dzHp5NsbYv+7uKT/tx2LBg2NGsDkuxtz8Z+gr/vuej nwd3+zaV2Fwu5YWnwAaC8FXU5kE+YFl6k8gvd5NfFuydcGXefXitZNNkQULTlJFy NhE/IFDeX0WipmAj1glOUW+VTXBCKDcuupQ= -----END CERTIFICATE-----Generated at Sun Sep 27 00:56:08 2026 by rpki-client