$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/384c5d30-16a2-3920-b62c-553d020ee691.roa File: 384c5d30-16a2-3920-b62c-553d020ee691.roa (raw, json) Hash identifier: zfcnhdyNDqHV9lMXdndNVyU+0dFGT/6+lczPCThky9A= Subject key identifier: 5A:6D:E4:7B:AB:30:59:F6:73:24:85:BB:99:EB:BD:B0:C5:6C:64:01 Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Certificate serial: 010D0C9F4328584F3B7D2694A0CC8FD882646D00 Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/384c5d30-16a2-3920-b62c-553d020ee691.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 49 IP address blocks: 2610:20:6fca::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:26:94:a0:cc:8f:d8:82:64:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=b66d48c8-e3f5-4f28-a4c4-f6b57f2db914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:01:05:57:55:c5:2e:d3:5a:0c:42:6e:25:fe: 72:da:7d:48:45:57:ef:8e:c9:d7:67:05:2e:f3:2f: fb:bc:db:d6:d1:90:03:be:c6:01:04:e5:f6:70:0e: 35:da:77:4e:9f:01:1a:21:80:d5:ee:9a:2b:21:35: 31:9b:27:b4:13:1d:12:96:06:fc:af:1f:85:51:67: fa:bf:81:93:6d:fe:02:d6:5b:e7:95:45:76:d5:11: f4:9e:aa:de:ab:19:73:d5:05:40:e9:d1:3c:f8:23: 72:4d:37:29:9d:d8:56:a4:e5:75:44:63:80:3a:92: 35:a5:5a:d6:33:94:a9:b7:90:de:bc:bb:09:1d:38: 6d:31:cf:b9:c5:33:93:46:aa:37:27:9c:4c:7d:d4: c7:52:89:80:43:1e:99:b5:0c:98:c7:0d:03:5f:b1: f6:d8:9a:6f:84:f6:ad:45:f8:cf:60:43:52:fa:c1: 65:b8:fb:c7:74:e5:1a:e4:7e:78:bb:4c:53:4b:8c: 87:36:c7:09:6b:81:80:5e:71:3a:18:4b:4a:c1:85: 99:63:6d:55:e4:76:f9:bc:7a:e8:6e:e4:5e:33:7c: 74:e0:8e:3b:a6:a2:68:9d:0c:5f:f7:ff:ae:2c:31: 96:a0:c5:8f:0b:dd:19:2d:3d:f1:cf:6d:c9:e1:1c: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:E4:7B:AB:30:59:F6:73:24:85:BB:99:EB:BD:B0:C5:6C:64:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/384c5d30-16a2-3920-b62c-553d020ee691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl X509v3 Authority Key Identifier: keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:6fca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c3:11:ba:71:7e:16:9f:64:ef:f8:1e:db:67:86:04:90:fa: df:c6:2e:07:86:99:09:a9:1f:6d:d1:68:00:92:89:1c:0a:aa: da:66:73:c9:c6:de:b4:5b:4c:95:88:36:63:ac:88:fe:a9:e4: 2e:fa:98:e8:2a:01:e2:88:0a:cb:82:c7:4b:9a:60:9e:1c:ca: 73:64:06:49:96:1d:73:b8:d2:f9:a6:cb:3e:5c:1e:93:ca:67: 12:1a:ad:a2:49:f8:e9:c1:3c:5c:8e:1e:f0:77:40:b3:4a:75: 54:01:0b:10:64:2f:4c:bd:29:2c:07:50:2b:91:cf:28:d3:1d: c8:bf:98:0c:b7:9f:30:ac:a6:4e:38:3c:af:24:d0:8c:59:f4: 14:b6:8c:81:73:2c:f7:09:4f:21:a6:01:19:f4:a0:d9:16:3f: 03:d2:9c:c8:9f:1c:f4:a9:dd:c2:03:11:ad:40:82:7b:40:09: 68:b3:e4:37:3f:35:9b:50:c2:ac:e6:ba:bf:43:b8:92:5c:cb: 5c:dc:99:d0:c6:6a:ce:72:a9:c8:d6:e7:90:ef:df:88:26:15: 4f:de:c9:66:9e:40:d5:9f:02:08:5b:d9:e5:b0:1d:3a:3f:44: 88:6d:63:8a:41:b6:77:ad:5b:2f:a3:cb:45:bd:e8:eb:99:fb: a1:8f:47:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE87fSaUoMyP2IJkbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh N2U5MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YjY2ZDQ4YzgtZTNmNS00ZjI4LWE0YzQtZjZiNTdmMmRiOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgEFV1XFLtNaDEJuJf5y2n1IRVfvjsnXZwUu 8y/7vNvW0ZADvsYBBOX2cA412ndOnwEaIYDV7porITUxmye0Ex0Slgb8rx+FUWf6 v4GTbf4C1lvnlUV21RH0nqreqxlz1QVA6dE8+CNyTTcpndhWpOV1RGOAOpI1pVrW M5Spt5DevLsJHThtMc+5xTOTRqo3J5xMfdTHUomAQx6ZtQyYxw0DX7H22JpvhPat RfjPYENS+sFluPvHdOUa5H54u0xTS4yHNscJa4GAXnE6GEtKwYWZY21V5Hb5vHro buReM3x04I47pqJonQxf9/+uLDGWoMWPC90ZLT3xz23J4RyDOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpt5HurMFn2cySFu5nrvbDFbGQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMzg0YzVkMzAtMTZhMi0z OTIwLWI2MmMtNTUzZDAyMGVlNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4 Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh YmMxMWE3ZTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIG/K MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIfDEbpxfhafZO/4HttnhgSQ+t/GLgeGmQmpH23RaACSiRwKqtpm c8nG3rRbTJWINmOsiP6p5C76mOgqAeKICsuCx0uaYJ4cynNkBkmWHXO40vmmyz5c HpPKZxIaraJJ+OnBPFyOHvB3QLNKdVQBCxBkL0y9KSwHUCuRzyjTHci/mAy3nzCs pk44PK8k0IxZ9BS2jIFzLPcJTyGmARn0oNkWPwPSnMifHPSp3cIDEa1AgntACWiz 5Dc/NZtQwqzmur9DuJJcy1zcmdDGas5yqcjW55Dv34gmFU/eyWaeQNWfAghb2eWw HTo/RIhtY4pBtnetWy+jy0W96OuZ+6GPR3E= -----END CERTIFICATE-----Generated at Sun Sep 27 13:12:16 2026 by rpki-client