$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa File: 24e9dd65-e200-396a-9d9a-a026376581d6.roa (raw, json) Hash identifier: hm/OVJvrIuxoFRov6HeK+mqTIv3ndUORsSEczM+M5Ys= Subject key identifier: 4F:CA:E2:DA:17:82:9E:D4:AA:F2:69:26:63:F0:2D:86:9A:A2:E3:0A Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a Certificate serial: 010D0C9F4328584EC20C6BCAF4BCEF9D6E703B00 Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 42 IP address blocks: 2620:0:870::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:6b:ca:f4:bc:ef:9d:6e:70:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=982d697b-0c9d-4f2b-9495-de8d865f025c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:8a:56:dc:7d:61:30:7a:e5:6e:c3:62:06: 23:c8:47:46:d9:6c:ab:e2:29:ba:11:64:a4:16:f1: 05:6f:65:63:e2:7c:95:51:3b:47:3d:7a:95:c2:f6: a1:73:29:97:44:ea:95:64:0d:5e:cc:60:9f:23:7d: ef:7d:ac:7d:e8:89:8d:27:64:50:dc:2c:81:4f:f6: 87:c1:98:fb:c3:af:13:c4:86:eb:11:1c:f1:31:b4: 45:40:5c:b8:e6:78:d3:c8:78:5d:6d:1a:3a:d9:ca: cd:3c:b1:f1:6f:03:37:ac:4e:18:b4:44:92:24:b5: 53:c1:9f:8c:1d:66:6d:bf:73:1e:d8:7f:33:4b:96: 36:63:90:9d:13:a0:9c:3a:09:06:00:62:dc:ac:c2: a0:61:27:7f:2b:84:c9:28:1c:78:3f:58:36:60:6b: 44:e9:e4:ec:bc:cf:d7:01:b5:10:2e:2a:db:94:ab: 7b:b6:7e:cb:2c:21:ba:22:f2:d4:1a:d0:9d:38:97: 42:6a:f8:57:2b:de:09:69:c9:1b:c8:d6:e6:79:3e: e7:23:a3:e2:ae:60:7c:c3:ac:00:c1:00:fc:57:40: 10:89:ce:b7:f5:ee:48:02:f7:55:d5:c6:1f:da:c5: 5a:17:dc:77:11:e7:73:8c:fd:65:77:b6:bc:e4:9e: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:E2:DA:17:82:9E:D4:AA:F2:69:26:63:F0:2D:86:9A:A2:E3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl X509v3 Authority Key Identifier: keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:870::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3e:29:54:c1:ea:b0:6d:5e:18:ea:5e:fc:69:80:ff:3e:ba: 93:37:86:9a:ca:9c:ed:5f:e7:bb:71:37:8e:04:3c:67:7f:15: 75:71:1d:01:1d:fa:52:c3:40:e1:05:61:e0:04:ed:12:6a:ec: e4:b9:13:9f:23:5c:74:77:97:9d:e9:ca:0a:b9:76:e7:88:c5: b1:f5:ca:11:22:f8:ae:55:3f:56:2c:28:59:cc:03:ae:44:7f: 9c:f8:ef:40:ab:23:1f:4a:1a:c1:6a:ca:f2:a6:b2:5c:5a:bc: 6a:ea:fe:d2:d7:87:8b:a8:3b:b5:23:a4:b5:18:48:93:98:56: cf:19:c2:ff:a9:c9:41:39:87:02:cb:a7:36:23:e1:9a:b4:01: 87:c1:6f:89:9e:b5:70:07:4a:62:2e:3d:22:b1:4d:85:35:76: 6e:e3:93:80:85:1c:d5:05:9b:23:7d:67:28:63:95:a9:83:2f: b4:34:9d:ff:9f:96:d5:75:c3:8e:e1:88:1b:ca:c8:4f:06:20: 6b:3e:b2:20:b6:95:15:b6:bd:6c:99:ff:3c:4d:ca:4d:c7:1b: 5c:f3:49:c7:ce:32:0c:4b:a9:22:83:9b:08:91:f8:87:5b:8b: c6:a1:53:6b:80:4e:37:03:64:b7:08:83:19:a6:7d:20:1b:0e: e5:40:92:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7CDGvK9LzvnW5wOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5MTljMWUtMjRjOC00MzBlLTg4MTEtOTEzODNjMzFi OTZhMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk OTgyZDY5N2ItMGM5ZC00ZjJiLTk0OTUtZGU4ZDg2NWYwMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTWKVtx9YTB65W7DYgYjyEdG2Wyr4im6EWSk FvEFb2Vj4nyVUTtHPXqVwvahcymXROqVZA1ezGCfI33vfax96ImNJ2RQ3CyBT/aH wZj7w68TxIbrERzxMbRFQFy45njTyHhdbRo62crNPLHxbwM3rE4YtESSJLVTwZ+M HWZtv3Me2H8zS5Y2Y5CdE6CcOgkGAGLcrMKgYSd/K4TJKBx4P1g2YGtE6eTsvM/X AbUQLirblKt7tn7LLCG6IvLUGtCdOJdCavhXK94JackbyNbmeT7nI6PirmB8w6wA wQD8V0AQic639e5IAvdV1cYf2sVaF9x3EedzjP1ld7a85J7e3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/K4toXgp7UqvJpJmPwLYaaouMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkx OWMxZS0yNGM4LTQzMGUtODgxMS05MTM4M2MzMWI5NmEvMjRlOWRkNjUtZTIwMC0z OTZhLTlkOWEtYTAyNjM3NjU4MWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ5MTljMWUtMjRjOC00MzBlLTg4 MTEtOTEzODNjMzFiOTZhL2Q0OTE5YzFlLTI0YzgtNDMwZS04ODExLTkxMzgzYzMx Yjk2YS5jcmwwHwYDVR0jBBgwFoAU3yQUbb7Pe6ejeQwXRpVEgBR4KTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkxOWMxZS0yNGM4LTQzMGUtODgxMS05MTM4 M2MzMWI5NmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAAAhw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAg+KVTB6rBtXhjqXvxpgP8+upM3hprKnO1f57txN44EPGd/FXVx HQEd+lLDQOEFYeAE7RJq7OS5E58jXHR3l53pygq5dueIxbH1yhEi+K5VP1YsKFnM A65Ef5z470CrIx9KGsFqyvKmslxavGrq/tLXh4uoO7UjpLUYSJOYVs8Zwv+pyUE5 hwLLpzYj4Zq0AYfBb4metXAHSmIuPSKxTYU1dm7jk4CFHNUFmyN9ZyhjlamDL7Q0 nf+fltV1w47hiBvKyE8GIGs+siC2lRW2vWyZ/zxNyk3HG1zzScfOMgxLqSKDmwiR +Idbi8ahU2uATjcDZLcIgxmmfSAbDuVAkr0= -----END CERTIFICATE-----Generated at Mon Sep 14 09:08:00 2026 by rpki-client