$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa File: 1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa (raw, json) Hash identifier: bBgalNxruXx10FP4GuWpWQuktBCVFIy0dHtsyNxU4Tk= Subject key identifier: BF:1A:31:BC:5C:8C:C6:E6:07:5E:16:EB:65:AA:6C:4F:81:6A:2D:E9 Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36 Certificate serial: 010D0C9F4328584EE7BCB55391C4F0698DCB2E80 Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 6142 IP address blocks: 2620:9:a008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b5:53:91:c4:f0:69:8d:cb:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=22063fd8-7c76-42fc-938d-9ee0779fa65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:11:11:dc:e1:97:a4:09:4d:32:8f:d8:63: 03:c2:1a:6a:1a:67:19:ec:47:27:b6:7d:31:9f:bc: d1:5f:63:89:38:51:e4:c2:4a:0a:8c:f1:dd:f7:b7: 62:11:d1:00:21:2c:a5:6f:31:c2:3b:40:90:bc:b7: 36:29:15:fb:dc:87:22:5c:60:ed:21:e7:ce:74:ed: 8d:29:eb:25:0b:06:7c:b4:98:09:bb:2c:3d:26:f9: bd:21:e6:04:d5:06:ae:3a:bf:43:58:ce:a8:e8:4e: dd:d1:dc:56:af:73:97:05:2a:83:80:7f:22:c6:97: 3a:23:57:2d:ec:8a:fa:0d:22:4b:b7:5c:bd:23:11: 81:ee:71:e9:98:78:82:7d:aa:0f:27:77:df:46:cc: 1e:c4:9e:13:ae:7a:bb:82:c2:03:dd:7d:1e:56:5c: fc:a9:9f:37:23:f9:67:fa:65:95:b5:a9:46:69:d0: 72:59:79:fe:a6:64:7d:9d:bf:c9:40:5a:4d:68:ea: d3:1b:35:55:3a:40:ac:a9:6e:24:8f:4e:e4:ba:0d: a7:34:17:8a:2f:7c:4e:d3:08:c4:7b:91:af:4b:d0: 61:47:0c:6b:88:eb:24:da:20:5b:a1:60:87:12:82: 6a:e5:0b:9e:17:74:6f:32:9d:7b:06:9b:44:a9:76: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1A:31:BC:5C:8C:C6:E6:07:5E:16:EB:65:AA:6C:4F:81:6A:2D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl X509v3 Authority Key Identifier: keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer sbgp-ipAddrBlock: critical IPv6: 2620:9:a008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:88:36:49:7a:7d:7b:2f:0d:84:08:c1:c3:ae:d5:a8:41:16: 38:43:1e:3c:d2:e6:75:16:c1:5a:c4:06:9b:fb:db:7b:1a:b3: 3b:30:cf:70:42:06:cd:a2:5c:48:cb:c0:88:90:e0:c6:c3:57: 94:b6:10:fc:93:aa:6c:70:62:95:5b:25:9d:4a:94:09:33:d7: 0a:b0:80:2f:51:0a:64:08:1c:ea:ec:b4:e3:b1:51:e1:30:86: 6f:c1:d6:b9:9f:03:9a:f5:04:e1:d9:fd:04:e5:87:27:06:8a: 3a:af:0d:bb:20:10:d9:d3:ff:23:c1:d0:e9:f2:2e:f1:cd:8d: e7:34:40:85:e8:0c:83:be:9d:ab:70:f7:69:d1:dd:15:39:3f: cf:39:16:f6:63:f0:4b:58:3f:eb:c2:9b:1f:9f:d4:ab:47:27: 43:6e:87:35:ca:fd:55:a3:54:d3:b7:a7:0c:92:1e:47:03:bd: 98:1f:a8:1d:4d:d2:71:0b:d4:60:75:e8:ea:1b:46:95:51:8f: c9:22:78:e5:6d:4e:ec:64:f3:17:d6:9f:0a:a7:35:f3:dd:68: 69:1c:17:1d:57:c7:6a:71:12:98:cb:54:87:d1:94:b2:c9:9f: 5d:5c:fd:10:49:be:ba:f0:e0:2c:c0:ca:53:d0:da:02:e0:d8: a5:1b:ee:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7nvLVTkcTwaY3LLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQxMmYwMzUtYjM3Ni00ODA3LWE4YWMtZTk4NjgwYWIw ZTM2MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MjIwNjNmZDgtN2M3Ni00MmZjLTkzOGQtOWVlMDc3OWZhNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkcREdzhl6QJTTKP2GMDwhpqGmcZ7Ecntn0x n7zRX2OJOFHkwkoKjPHd97diEdEAISylbzHCO0CQvLc2KRX73IciXGDtIefOdO2N KeslCwZ8tJgJuyw9Jvm9IeYE1QauOr9DWM6o6E7d0dxWr3OXBSqDgH8ixpc6I1ct 7Ir6DSJLt1y9IxGB7nHpmHiCfaoPJ3ffRswexJ4Trnq7gsID3X0eVlz8qZ83I/ln +mWVtalGadByWXn+pmR9nb/JQFpNaOrTGzVVOkCsqW4kj07kug2nNBeKL3xO0wjE e5GvS9BhRwxriOsk2iBboWCHEoJq5QueF3RvMp17BptEqXadIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL8aMbxcjMbmB14W62WqbE+Bai3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEy ZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2ODBhYjBlMzYvMWM5ZmQ1YTAtMDVlMC0z YTdiLTk4OTItMzRlMDdhZGRjM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQxMmYwMzUtYjM3Ni00ODA3LWE4 YWMtZTk4NjgwYWIwZTM2LzA0MTJmMDM1LWIzNzYtNDgwNy1hOGFjLWU5ODY4MGFi MGUzNi5jcmwwHwYDVR0jBBgwFoAUiXGp/4PgRhbYPlvneCsT+IQp8HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEyZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2 ODBhYjBlMzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAACaAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImINkl6fXsvDYQIwcOu1ahBFjhDHjzS5nUWwVrEBpv723saszsw z3BCBs2iXEjLwIiQ4MbDV5S2EPyTqmxwYpVbJZ1KlAkz1wqwgC9RCmQIHOrstOOx UeEwhm/B1rmfA5r1BOHZ/QTlhycGijqvDbsgENnT/yPB0OnyLvHNjec0QIXoDIO+ natw92nR3RU5P885FvZj8EtYP+vCmx+f1KtHJ0NuhzXK/VWjVNO3pwySHkcDvZgf qB1N0nEL1GB16OobRpVRj8kieOVtTuxk8xfWnwqnNfPdaGkcFx1Xx2pxEpjLVIfR lLLJn11c/RBJvrrw4CzAylPQ2gLg2KUb7vk= -----END CERTIFICATE-----Generated at Sun Sep 13 14:25:55 2026 by rpki-client