$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa File: 9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json) Hash identifier: NROjLClUWpuiFczFvj7USTCeliE9mmmm55CzUkh2WDg= Subject key identifier: 22:5C:46:52:31:ED:89:BA:A7:86:C7:B7:12:6A:26:97:1E:53:D2:71 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584F093CE7EFD98F339E239DC500 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2620:20:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e7:ef:d9:8f:33:9e:23:9d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=4a466626-a3cb-419d-a500-65ed3befa579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:3a:12:5e:2a:94:b3:b3:e1:b3:b2:55:e3: d4:e2:aa:30:a9:39:ae:7e:ee:f7:e4:7e:ba:75:11: e4:93:a7:9f:b2:1c:ed:79:7b:40:b4:54:f2:64:70: 1f:7d:c7:e1:b9:d1:f6:e4:c3:bc:b1:11:16:c8:dc: 1b:e3:db:fd:e0:d9:24:8c:0e:53:8e:1f:b4:aa:e6: b3:e5:0c:9a:57:3d:f4:da:f1:89:c0:3a:dc:d4:d8: 5a:c8:2a:38:44:b4:2b:00:a7:c8:a3:7c:c6:a7:9d: 81:40:4f:5a:d7:7a:b8:5c:d6:4e:db:e1:79:87:40: 6b:07:77:ff:03:ed:e8:28:ee:1f:f7:eb:df:4f:99: 78:43:a5:68:92:3d:bc:32:bb:e5:fb:b5:8f:4e:1a: da:3e:a2:28:b2:46:e3:66:5a:f4:8d:07:c6:9a:90: 7b:22:45:f9:11:52:90:c0:8f:c6:00:b2:87:7e:7e: 2f:0c:1a:1d:cc:e1:0b:4c:45:99:3d:24:f2:e5:c4: f6:19:44:01:23:e6:00:b7:b2:45:1e:b1:b5:be:41: 76:f2:c1:9d:8e:8f:b5:7c:01:3e:21:0d:f7:08:3e: 2d:56:cb:21:c9:19:b6:75:aa:38:7f:18:13:47:b7: b5:9d:26:b0:45:21:18:7f:50:26:48:90:62:84:8c: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:46:52:31:ED:89:BA:A7:86:C7:B7:12:6A:26:97:1E:53:D2:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:31:7a:ae:46:09:49:ca:cb:56:e5:e2:de:be:1c:e6:42:3e: 4e:d1:f9:f4:57:f7:4b:b8:4b:62:10:c0:ec:d3:36:88:dd:05: 86:4d:de:72:7c:52:c8:11:d9:fd:03:47:b9:40:e9:f3:c9:ca: 57:da:60:1a:d5:36:59:87:fd:ea:7a:5f:0d:4c:f9:db:06:6d: 2f:b4:db:16:87:94:9a:97:c8:3c:3d:68:2a:bb:6b:5a:03:db: 51:ff:b4:a1:25:87:ca:b9:e3:09:84:f5:20:db:00:4e:ed:85: 30:d7:4d:1d:23:9f:6e:40:6d:73:86:54:79:79:00:f2:a1:6a: f4:89:93:69:9f:dc:60:29:36:f2:ff:cc:0c:20:77:8c:22:7e: b8:ac:12:09:a3:11:ab:80:ba:ce:5c:65:f6:26:e5:c7:5d:2a: 0b:b0:fb:77:09:2b:b4:28:c3:71:39:9f:07:25:9c:be:4c:b0: 67:13:1b:a1:48:bc:d8:76:3c:99:98:41:53:98:8a:dc:03:7e: 9c:2c:43:fa:2a:a6:f3:ac:64:80:a9:1e:a8:3e:f3:7e:3e:0c: 5e:8d:d0:3b:16:19:cd:e1:54:01:a5:48:4f:e7:43:a5:01:30: 71:73:17:0a:68:55:4d:f9:95:01:2d:44:51:d1:c2:99:df:3d: 70:92:46:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPOfv2Y8zniOdxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NGE0NjY2MjYtYTNjYi00MTlkLWE1MDAtNjVlZDNiZWZhNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNw6El4qlLOz4bOyVePU4qowqTmufu735H66 dRHkk6efshzteXtAtFTyZHAffcfhudH25MO8sREWyNwb49v94NkkjA5Tjh+0quaz 5QyaVz302vGJwDrc1NhayCo4RLQrAKfIo3zGp52BQE9a13q4XNZO2+F5h0BrB3f/ A+3oKO4f9+vfT5l4Q6Vokj28Mrvl+7WPThraPqIoskbjZlr0jQfGmpB7IkX5EVKQ wI/GALKHfn4vDBodzOELTEWZPSTy5cT2GUQBI+YAt7JFHrG1vkF28sGdjo+1fAE+ IQ33CD4tVsshyRm2dao4fxgTR7e1nSawRSEYf1AmSJBihIw/YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJcRlIx7Ym6p4bHtxJqJpceU9JxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvOTAxMmVkNjMtODc4YS0z ODE0LWFiMzItZGI3ZDc1NzhiNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4xeq5GCUnKy1bl4t6+HOZCPk7R+fRX90u4S2IQwOzTNojdBYZN 3nJ8UsgR2f0DR7lA6fPJylfaYBrVNlmH/ep6Xw1M+dsGbS+02xaHlJqXyDw9aCq7 a1oD21H/tKElh8q54wmE9SDbAE7thTDXTR0jn25AbXOGVHl5APKhavSJk2mf3GAp NvL/zAwgd4wifrisEgmjEauAus5cZfYm5cddKguw+3cJK7Qow3E5nwclnL5MsGcT G6FIvNh2PJmYQVOYitwDfpwsQ/oqpvOsZICpHqg+834+DF6N0DsWGc3hVAGlSE/n Q6UBMHFzFwpoVU35lQEtRFHRwpnfPXCSRjM= -----END CERTIFICATE-----Generated at Sun Oct 11 09:18:45 2026 by rpki-client