$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/20a1831c-d2ad-3b16-bd32-94bd2711a111.roa File: 20a1831c-d2ad-3b16-bd32-94bd2711a111.roa (raw, json) Hash identifier: vCnNr4zYOnCiYC7qmJA9Yy5i6uxP0ssllp6lZp4HBbs= Subject key identifier: B2:81:87:80:F5:36:78:01:86:6F:CC:6D:87:56:6B:E4:AB:80:B8:23 Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Certificate serial: 010D0C9F4328584F655D60C05AFA4E95F49D1E80 Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/20a1831c-d2ad-3b16-bd32-94bd2711a111.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 18934 IP address blocks: 2605:9a40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:60:c0:5a:fa:4e:95:f4:9d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=d4971298-8721-4e68-b3e4-fb717daee5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:90:7c:98:67:6f:a6:c8:9b:03:33:38:7c: 7a:c5:fe:a9:db:8c:9c:69:ce:27:11:af:04:8f:1d: 3a:ab:21:a2:8b:68:3b:ca:8d:61:ff:5b:8e:50:f2: f9:ed:b9:8d:40:11:9d:ab:f8:30:1d:1c:e6:21:df: ef:b6:f3:95:62:4c:20:ba:22:3a:36:4e:ba:a2:0f: 5d:65:01:ab:4e:bc:11:d7:5e:8d:33:09:4e:91:2e: a0:d8:ca:7e:89:1c:84:17:63:9e:0f:be:48:24:84: d6:39:8b:a7:d8:6e:13:a1:ef:aa:22:8c:96:1d:9f: 68:a7:88:b8:83:6b:53:80:50:07:de:7a:5c:94:70: cd:98:68:89:75:5a:96:bf:ac:26:4a:44:47:23:4d: 75:0c:bc:81:b3:f7:b5:61:c3:a1:f7:06:02:3a:a0: 88:f6:a3:9e:39:ce:5b:77:fa:53:9d:20:56:09:4f: 4b:30:02:7b:07:b4:01:63:3a:9b:34:b9:fb:2e:9e: 68:f1:e3:89:87:78:7b:11:06:18:22:83:fa:2c:cc: 3b:f6:d3:41:fc:bd:d4:16:92:f2:10:cc:ca:9b:89: c3:28:5c:27:7f:23:f8:c6:a2:c5:2c:64:7d:92:6a: 4f:b1:82:5e:83:7f:16:29:b0:79:76:4a:b3:cf:16: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:87:80:F5:36:78:01:86:6F:CC:6D:87:56:6B:E4:AB:80:B8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/20a1831c-d2ad-3b16-bd32-94bd2711a111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl X509v3 Authority Key Identifier: keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer sbgp-ipAddrBlock: critical IPv6: 2605:9a40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ec:0e:7e:d1:5e:e5:f0:5a:ad:d8:a6:66:02:24:3f:b9:1c: 52:8a:f6:52:64:25:fc:c1:0c:c9:ec:1a:c7:47:fe:55:d2:2d: cd:70:28:99:25:1b:5f:fb:1e:98:77:ce:d5:45:f0:b0:29:a7: 3c:8c:8f:f9:d3:a4:40:66:3c:36:e4:f0:6a:59:d6:73:01:79: f0:3b:52:2b:5d:2a:ae:6c:fd:1f:97:bb:90:2c:8d:a6:29:88: 4d:cb:b8:d8:92:b1:39:8c:bf:e5:76:52:e7:bf:4a:2c:7a:4d: 30:19:a5:2a:81:93:b7:2f:67:c3:74:65:68:00:1d:59:c6:b5: a4:9d:be:a3:c6:3b:81:b8:7b:8c:4a:d2:29:9a:0d:7f:3b:2c: 25:43:4c:a6:85:bd:8d:90:d2:d5:14:2a:10:b0:23:6b:70:9a: f9:b2:45:e2:cc:0d:8c:af:fc:fd:f3:6c:c6:d2:89:bc:30:e8: 50:64:63:d1:2a:e5:f7:1b:25:1c:61:32:57:fe:a8:64:f3:0a: 35:4f:5d:d0:06:1e:3e:27:a4:ef:d2:1a:00:68:39:43:ee:a7: 10:57:a7:d3:53:90:fc:a5:9c:72:a4:31:81:27:8a:1b:ef:1d: 9a:9d:05:9e:d8:64:2b:76:c5:61:72:d3:65:17:d2:44:bb:40: 95:b8:04:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9lXWDAWvpOlfSdHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk YjdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZDQ5NzEyOTgtODcyMS00ZTY4LWIzZTQtZmI3MTdkYWVlNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWQfJhnb6bImwMzOHx6xf6p24ycac4nEa8E jx06qyGii2g7yo1h/1uOUPL57bmNQBGdq/gwHRzmId/vtvOVYkwguiI6Nk66og9d ZQGrTrwR116NMwlOkS6g2Mp+iRyEF2OeD75IJITWOYun2G4Toe+qIoyWHZ9op4i4 g2tTgFAH3npclHDNmGiJdVqWv6wmSkRHI011DLyBs/e1YcOh9wYCOqCI9qOeOc5b d/pTnSBWCU9LMAJ7B7QBYzqbNLn7Lp5o8eOJh3h7EQYYIoP6LMw79tNB/L3UFpLy EMzKm4nDKFwnfyP4xqLFLGR9kmpPsYJeg38WKbB5dkqzzxbTjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKBh4D1NngBhm/MbYdWa+SrgLgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvMjBhMTgzMWMtZDJhZC0z YjE2LWJkMzItOTRiZDI3MTFhMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0 OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz NTgwY2RiN2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaQAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvsDn7RXuXwWq3YpmYCJD+5HFKK9lJkJfzBDMnsGsdH/lXSLc1w KJklG1/7Hph3ztVF8LAppzyMj/nTpEBmPDbk8GpZ1nMBefA7UitdKq5s/R+Xu5As jaYpiE3LuNiSsTmMv+V2Uue/Six6TTAZpSqBk7cvZ8N0ZWgAHVnGtaSdvqPGO4G4 e4xK0imaDX87LCVDTKaFvY2Q0tUUKhCwI2twmvmyReLMDYyv/P3zbMbSibww6FBk Y9Eq5fcbJRxhMlf+qGTzCjVPXdAGHj4npO/SGgBoOUPupxBXp9NTkPylnHKkMYEn ihvvHZqdBZ7YZCt2xWFy02UX0kS7QJW4BAw= -----END CERTIFICATE-----Generated at Sun Oct 11 22:26:16 2026 by rpki-client