$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa File: f4918535-93c7-36cc-9434-fa54520d5721.roa (raw, json) Hash identifier: FflAOPtdTWxlKk1aUuWFxcH5xgKspAKKCz12Nv9wlX0= Subject key identifier: 2F:FA:30:2D:0D:3A:02:F4:1A:7D:B3:A2:1D:63:E8:DD:B6:60:2C:F7 Certificate issuer: /CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Certificate serial: 010D0C9F4328584F63F8174A2C827BAF281D8440 Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 46792 IP address blocks: 2620:139:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:17:4a:2c:82:7b:af:28:1d:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=653f7c5e-12d7-4177-a8d0-7557b04baf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:a0:39:f2:be:4a:83:18:4e:e2:80:a8:06: 2c:39:98:97:e1:0f:a8:05:55:54:b4:c1:7a:98:de: 2f:b0:ab:af:e0:24:bc:b8:18:33:15:7e:0a:9b:fa: 63:e9:48:5c:d2:bc:2b:88:c4:ed:f4:0c:1b:76:d4: f5:a4:cb:29:a7:3c:3e:0b:ca:36:73:23:6e:d4:60: 82:c9:bf:d4:20:41:b0:83:15:cc:52:65:75:f1:20: 6b:62:7b:57:01:d0:38:ee:13:61:35:1c:ff:7c:16: 91:02:99:65:eb:39:67:6f:48:75:2f:bb:9d:f3:40: c4:12:90:0d:1e:c2:f1:fa:b6:a1:94:de:84:22:7f: a8:58:54:a3:d7:87:f9:29:23:64:2e:e6:0b:46:ca: f5:96:aa:fd:ce:7c:aa:a5:48:d1:e0:d0:d3:d8:ff: 1e:39:7b:e0:67:4b:08:3b:c8:f2:f7:d9:d9:0c:29: 54:78:ab:6a:f7:ae:64:ef:a7:c0:ed:8b:4b:fb:ae: ae:3a:fb:c4:09:7c:2e:a7:35:71:e9:ac:c3:ab:3b: b6:e4:ec:dc:26:13:8b:15:cf:1e:00:12:9d:0c:60: 3e:48:66:5d:ed:26:7e:2e:dc:b8:8b:ec:28:89:9c: 23:ea:30:4f:ac:c0:df:ca:11:e6:f6:14:4b:af:41: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:30:2D:0D:3A:02:F4:1A:7D:B3:A2:1D:63:E8:DD:B6:60:2C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f4918535-93c7-36cc-9434-fa54520d5721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl X509v3 Authority Key Identifier: keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer sbgp-ipAddrBlock: critical IPv6: 2620:139:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:22:1b:fb:5a:67:f5:df:b0:31:a4:20:24:52:92:b1:4c:40: 53:7d:1a:0e:bd:e7:24:12:3f:e2:a4:59:7a:68:05:9d:c6:bd: c0:91:e3:c5:00:a1:64:1e:60:e7:84:df:0a:9c:e3:b6:94:d7: 81:ca:9c:bd:e2:d8:cf:d0:f4:37:a8:62:f6:27:65:f0:2c:64: ce:a0:02:25:5a:e2:0f:e0:67:f0:1c:e9:92:fa:f9:0a:ad:b8: 45:29:06:4b:eb:69:bd:4c:34:a7:fe:f8:d7:57:5f:57:0a:94: df:da:c9:94:fe:f7:ea:61:cb:dd:5e:74:9e:12:89:d3:26:55: f8:30:5c:9e:34:32:7b:53:7c:d3:ae:43:2a:5b:6d:5d:b8:ee: b9:9a:c7:2f:e8:f5:7e:91:72:33:67:16:ca:ac:48:80:e4:74: 43:0a:5a:a5:fd:a1:51:c3:5c:43:b9:b3:7a:0f:3d:1c:e7:b1: 08:f2:73:0e:db:b2:d8:e4:6a:0c:cc:79:3e:47:09:73:7f:38: ee:2d:35:81:c7:d8:9e:d0:ae:8b:a3:1a:1d:13:48:e4:19:ec: ee:78:bb:8b:84:d2:ef:eb:19:7a:91:5f:09:90:f3:7b:a4:13: f6:f1:59:a5:25:d6:4c:9f:ae:b2:a0:fe:16:41:21:4b:ff:b1: 84:f4:fe:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9j+BdKLIJ7rygdhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1N2UzNDEtOWQyNi00MTI5LWI1ZTgtYzIzYzA5NDcx ZWU3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NjUzZjdjNWUtMTJkNy00MTc3LWE4ZDAtNzU1N2IwNGJhZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y+gOfK+SoMYTuKAqAYsOZiX4Q+oBVVUtMF6 mN4vsKuv4CS8uBgzFX4Km/pj6Uhc0rwriMTt9AwbdtT1pMsppzw+C8o2cyNu1GCC yb/UIEGwgxXMUmV18SBrYntXAdA47hNhNRz/fBaRApll6zlnb0h1L7ud80DEEpAN HsLx+rahlN6EIn+oWFSj14f5KSNkLuYLRsr1lqr9znyqpUjR4NDT2P8eOXvgZ0sI O8jy99nZDClUeKtq965k76fA7YtL+66uOvvECXwupzVx6azDqzu25OzcJhOLFc8e ABKdDGA+SGZd7SZ+Lty4i+woiZwj6jBPrMDfyhHm9hRLr0EM9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/6MC0NOgL0Gn2zoh1j6N22YCz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3 ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNjMDk0NzFlZTcvZjQ5MTg1MzUtOTNjNy0z NmNjLTk0MzQtZmE1NDUyMGQ1NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM1N2UzNDEtOWQyNi00MTI5LWI1 ZTgtYzIzYzA5NDcxZWU3L2YzNTdlMzQxLTlkMjYtNDEyOS1iNWU4LWMyM2MwOTQ3 MWVlNy5jcmwwHwYDVR0jBBgwFoAU6Ja+UmWeBnjfZa34pwMgpE79fy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzU3ZTM0MS05ZDI2LTQxMjktYjVlOC1jMjNj MDk0NzFlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABOVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKIiG/taZ/XfsDGkICRSkrFMQFN9Gg695yQSP+KkWXpoBZ3GvcCR 48UAoWQeYOeE3wqc47aU14HKnL3i2M/Q9DeoYvYnZfAsZM6gAiVa4g/gZ/Ac6ZL6 +QqtuEUpBkvrab1MNKf++NdXX1cKlN/ayZT+9+phy91edJ4SidMmVfgwXJ40MntT fNOuQypbbV247rmaxy/o9X6RcjNnFsqsSIDkdEMKWqX9oVHDXEO5s3oPPRznsQjy cw7bstjkagzMeT5HCXN/OO4tNYHH2J7QroujGh0TSOQZ7O54u4uE0u/rGXqRXwmQ 83ukE/bxWaUl1kyfrrKg/hZBIUv/sYT0/rg= -----END CERTIFICATE-----Generated at Fri Oct 9 20:24:28 2026 by rpki-client