$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a4cc1cda-b6ac-338c-9c8b-f1185b64000c.roa File: a4cc1cda-b6ac-338c-9c8b-f1185b64000c.roa (raw, json) Hash identifier: NFPuA4fVHZtncHdbNkc5K5lYVzB13d9y31S148EhJD4= Subject key identifier: 64:12:31:69:19:5E:63:DD:6F:04:A2:05:17:C9:45:66:32:5E:93:F8 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584F0AA23175B8BD6AD495FE3E80 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a4cc1cda-b6ac-338c-9c8b-f1185b64000c.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 3209 IP address blocks: 2620:11a:a056::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:31:75:b8:bd:6a:d4:95:fe:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=2dffc513-f3e3-4f96-bbaf-d036a6452bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:b4:6b:b8:9a:f1:73:6e:d8:91:30:ef:b0: db:42:cc:ea:64:01:bb:9e:c2:a8:fa:96:49:34:54: df:81:5c:6d:d5:39:9b:9e:f0:2a:b5:4f:96:39:e3: 44:68:6e:df:5d:73:90:d5:e2:3f:9b:12:ca:cc:be: 75:55:74:90:b8:0d:a8:fd:cd:29:0b:a8:ed:7a:f2: 0f:eb:8b:c2:4a:90:f8:e6:19:2f:bd:19:6f:97:cf: d1:a5:2b:63:bd:85:bc:d4:f5:71:c3:2f:e9:74:f4: 17:c9:ef:95:c8:d8:a6:5d:0a:bd:45:03:2f:c9:81: 06:8f:5b:b1:db:2a:09:d2:73:1d:9c:6c:b5:35:8e: 89:68:41:c1:af:01:e1:40:59:77:6c:fe:5f:8b:d9: fa:89:c7:5a:db:b1:6e:55:80:45:2c:39:06:57:29: ff:fd:a1:6a:2a:a9:e8:e7:14:99:12:7c:a1:87:29: ca:b0:e2:d3:d7:9b:f9:e4:83:ba:7c:1a:44:29:0c: 55:b1:99:60:30:ec:17:60:33:78:ff:81:33:83:53: a7:5a:e2:60:ae:64:da:7d:4a:e1:1c:36:cf:64:54: 59:72:a3:4a:6d:c6:89:bf:ad:9e:4c:12:c5:0e:ba: c6:fd:c3:25:de:f1:ff:10:23:51:9b:66:b4:57:66: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:12:31:69:19:5E:63:DD:6F:04:A2:05:17:C9:45:66:32:5E:93:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a4cc1cda-b6ac-338c-9c8b-f1185b64000c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:a056::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:41:16:9e:5c:a4:d5:46:b7:f8:a4:73:c9:07:35:b3:a1:4d: f9:40:10:aa:47:ad:98:2d:e5:e5:12:6c:bd:e3:63:f4:29:c1: 11:e4:66:c9:89:60:46:76:91:52:e2:08:db:71:2e:8d:db:e1: 28:49:ff:d0:fd:2d:91:7f:38:96:ca:97:c6:d0:3f:de:b1:94: 05:4b:8c:a4:da:52:27:bd:3d:7d:8d:66:f6:43:2e:ba:f3:4f: ab:02:71:eb:d8:0c:56:a8:d8:f3:1e:c5:48:0f:72:9d:68:f6: 46:65:09:eb:fa:13:be:b5:4c:ed:4a:a3:5e:bf:f3:e5:96:3c: 53:0c:59:82:08:03:1c:92:28:39:14:03:32:d3:b2:9d:52:60: 8a:41:c4:13:06:35:6b:82:04:47:ff:96:ac:38:0c:99:67:91: 68:fe:8c:d6:2b:d1:0e:a2:e5:68:d6:74:5f:3a:d1:bb:79:e4: fb:ee:74:3b:e7:5e:0b:da:04:8e:3e:0b:52:78:27:54:34:08: f1:95:84:0a:b5:c0:ac:4c:fd:93:06:a4:e4:e4:5b:cc:15:be: 2c:5a:4f:c7:3e:e5:f7:37:bc:5c:7a:0f:fd:94:5c:5b:9d:e9: 79:95:72:94:4c:c0:b2:07:97:65:11:9b:9f:e6:84:27:8c:42: 60:c6:b2:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8KojF1uL1q1JX+PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MmRmZmM1MTMtZjNlMy00Zjk2LWJiYWYtZDAzNmE2NDUyYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMu0a7ia8XNu2JEw77DbQszqZAG7nsKo+pZJ NFTfgVxt1TmbnvAqtU+WOeNEaG7fXXOQ1eI/mxLKzL51VXSQuA2o/c0pC6jtevIP 64vCSpD45hkvvRlvl8/RpStjvYW81PVxwy/pdPQXye+VyNimXQq9RQMvyYEGj1ux 2yoJ0nMdnGy1NY6JaEHBrwHhQFl3bP5fi9n6icda27FuVYBFLDkGVyn//aFqKqno 5xSZEnyhhynKsOLT15v55IO6fBpEKQxVsZlgMOwXYDN4/4Ezg1OnWuJgrmTafUrh HDbPZFRZcqNKbcaJv62eTBLFDrrG/cMl3vH/ECNRm2a0V2ajIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGQSMWkZXmPdbwSiBRfJRWYyXpP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTRjYzFjZGEtYjZhYy0z MzhjLTljOGItZjExODViNjQwMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGqBW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxBFp5cpNVGt/ikc8kHNbOhTflAEKpHrZgt5eUSbL3jY/QpwRHk ZsmJYEZ2kVLiCNtxLo3b4ShJ/9D9LZF/OJbKl8bQP96xlAVLjKTaUie9PX2NZvZD LrrzT6sCcevYDFao2PMexUgPcp1o9kZlCev6E761TO1Ko16/8+WWPFMMWYIIAxyS KDkUAzLTsp1SYIpBxBMGNWuCBEf/lqw4DJlnkWj+jNYr0Q6i5WjWdF860bt55Pvu dDvnXgvaBI4+C1J4J1Q0CPGVhAq1wKxM/ZMGpOTkW8wVvixaT8c+5fc3vFx6D/2U XFud6XmVcpRMwLIHl2URm5/mhCeMQmDGsnM= -----END CERTIFICATE-----Generated at Thu Sep 10 22:48:46 2026 by rpki-client