$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa File: 520fa190-52d0-3cd6-8a3c-8938820698fe.roa (raw, json) Hash identifier: jCOfV4y1aj2z8cGYXXwRXwRkI1KqV1mwidMPxgRKZyI= Subject key identifier: C5:B1:D3:DD:45:04:0D:ED:D0:A1:BF:E8:0D:0A:EE:D6:56:B7:1E:DE Certificate issuer: /CN=a3095f6b-9f71-441b-8acd-bc18272b938d Certificate serial: 010D0C9F4328584F576817861C072BDB0F28F060 Authority key identifier: D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 20473 IP address blocks: 2620:1d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:17:86:1c:07:2b:db:0f:28:f0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3095f6b-9f71-441b-8acd-bc18272b938d Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=5484be85-a8db-49b0-bd37-43f415f5d174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:70:2a:e1:15:ae:d6:14:09:d1:0b:1e:a2: b8:a0:d1:bd:62:0e:39:0e:ca:66:ae:5f:82:97:79: b7:56:08:8f:4a:43:e6:67:34:48:28:76:d5:b7:b3: 81:96:eb:c3:a2:19:8f:55:7a:60:9f:68:b9:a8:0f: cb:82:35:f7:e5:1a:5d:c9:a7:84:58:a4:f6:4a:35: 01:9b:d3:bc:60:1b:a2:d7:f8:b0:c2:09:4c:48:24: 78:a6:e0:f8:29:31:14:c3:a4:e6:e2:32:61:28:52: 98:6e:7e:f9:a8:f3:ed:e9:36:3f:e0:8b:c5:34:1a: 69:7c:3b:2a:04:44:75:4d:ca:7c:83:dd:f9:1a:cc: 38:a1:01:0f:df:6d:e0:5c:7a:df:2c:f5:4f:b2:b0: 86:2b:ac:ed:58:cb:5c:4b:eb:2f:50:31:fc:db:dd: 9c:f2:83:2c:fb:a0:bf:38:c4:39:ca:39:87:83:88: 62:3f:f7:46:24:ab:8e:88:f7:4a:c5:23:fc:76:a7: 4f:7d:0a:79:e8:dc:02:44:95:03:db:71:20:6d:c6: ea:11:5a:37:58:fc:d2:31:71:f7:e9:84:89:29:e3: d7:e9:79:87:b4:f0:f7:e9:2e:30:eb:e1:11:77:fe: 82:5b:45:c5:0c:fe:22:98:37:a9:c8:76:f4:0f:a2: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:D3:DD:45:04:0D:ED:D0:A1:BF:E8:0D:0A:EE:D6:56:B7:1E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl X509v3 Authority Key Identifier: keyid:D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:52:2f:0f:f2:9d:f2:ba:72:98:8f:1e:0b:be:6b:44:13: 72:40:0f:08:f9:5d:f4:6b:84:67:35:30:b5:ec:94:cb:5d:0c: bc:b4:0f:13:5f:80:9b:99:64:10:9e:51:27:d8:53:b5:6e:66: 07:aa:b9:8b:f6:89:98:09:38:aa:43:d2:70:50:b6:9c:ae:6b: 68:bc:4c:6c:94:fc:20:c3:ce:45:71:d3:33:38:ab:d2:fc:54: d9:27:45:2e:1d:fd:c9:af:ae:bb:ad:15:10:9c:2b:5e:65:32: 6b:b0:23:1c:1d:83:97:fd:00:c9:0f:e0:23:a6:a6:44:e9:7c: b2:f6:80:5c:56:1b:03:60:d3:de:18:c3:6a:31:16:06:04:8a: 98:72:09:0d:83:b9:62:9e:63:cf:b6:20:96:62:27:ca:db:57: 88:75:3e:27:1e:3b:f4:04:b9:4b:d5:57:b5:e4:1c:a3:57:2b: 95:66:65:4d:03:4a:a7:a0:7b:9b:ed:6e:b8:74:da:b0:64:a8: b1:a2:ee:73:f3:62:02:72:22:9b:9f:92:dc:49:8b:9d:91:f3: 85:e1:08:32:97:65:75:98:30:38:a6:e8:6a:00:ab:61:fa:52: 03:96:b3:00:b7:7a:7a:6b:ba:91:89:0f:96:41:46:75:9d:d1: 01:5d:10:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBeGHAcr2w8o8GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwOTVmNmItOWY3MS00NDFiLThhY2QtYmMxODI3MmI5 MzhkMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NTQ4NGJlODUtYThkYi00OWIwLWJkMzctNDNmNDE1ZjVkMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqpwKuEVrtYUCdELHqK4oNG9Yg45Dspmrl+C l3m3VgiPSkPmZzRIKHbVt7OBluvDohmPVXpgn2i5qA/LgjX35RpdyaeEWKT2SjUB m9O8YBui1/iwwglMSCR4puD4KTEUw6Tm4jJhKFKYbn75qPPt6TY/4IvFNBppfDsq BER1Tcp8g935Gsw4oQEP323gXHrfLPVPsrCGK6ztWMtcS+svUDH8292c8oMs+6C/ OMQ5yjmHg4hiP/dGJKuOiPdKxSP8dqdPfQp56NwCRJUD23EgbcbqEVo3WPzSMXH3 6YSJKePX6XmHtPD36S4w6+ERd/6CW0XFDP4imDepyHb0D6LYzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMWx091FBA3t0KG/6A0K7tZWtx7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzA5 NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4MjcyYjkzOGQvNTIwZmExOTAtNTJkMC0z Y2Q2LThhM2MtODkzODgyMDY5OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMwOTVmNmItOWY3MS00NDFiLThh Y2QtYmMxODI3MmI5MzhkL2EzMDk1ZjZiLTlmNzEtNDQxYi04YWNkLWJjMTgyNzJi OTM4ZC5jcmwwHwYDVR0jBBgwFoAU2WvBwum2LmiOusYSScwG5/HB04MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hMzA5NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4 MjcyYjkzOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAHaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArsUi8P8p3yunKYjx4LvmtEE3JADwj5XfRrhGc1MLXslMtdDLy0 DxNfgJuZZBCeUSfYU7VuZgequYv2iZgJOKpD0nBQtpyua2i8TGyU/CDDzkVx0zM4 q9L8VNknRS4d/cmvrrutFRCcK15lMmuwIxwdg5f9AMkP4COmpkTpfLL2gFxWGwNg 094Yw2oxFgYEiphyCQ2DuWKeY8+2IJZiJ8rbV4h1PiceO/QEuUvVV7XkHKNXK5Vm ZU0DSqege5vtbrh02rBkqLGi7nPzYgJyIpufktxJi52R84XhCDKXZXWYMDim6GoA q2H6UgOWswC3enprupGJD5ZBRnWd0QFdEOY= -----END CERTIFICATE-----Generated at Mon Oct 26 03:53:48 2026 by rpki-client