$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/2bd8af48-1ffb-3e22-8eb3-a130da7da592.roa File: 2bd8af48-1ffb-3e22-8eb3-a130da7da592.roa (raw, json) Hash identifier: HXS9+J6M6ZEcD1342jT0XUZ0aTY5aXth+NbH4C/LtkM= Subject key identifier: 5F:02:FC:BF:D8:18:32:5D:D2:F4:AF:7B:D9:20:B8:17:9C:B7:7A:89 Certificate issuer: /CN=e75a672e-9319-4a5d-8a0e-142beede6b80 Certificate serial: 010D0C9F4328584F49744986151339D19CDC6840 Authority key identifier: BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/2bd8af48-1ffb-3e22-8eb3-a130da7da592.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397067 IP address blocks: 2620:79:3080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:49:86:15:13:39:d1:9c:dc:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e75a672e-9319-4a5d-8a0e-142beede6b80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd093c0a-bc6c-4afd-ad6b-98eead427686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:64:82:ef:fe:fa:ba:2e:a1:53:01:4e:d0: 88:d8:59:c7:50:35:d4:6a:1d:d9:0c:2d:c8:7a:0d: 93:e5:4f:de:ff:25:2b:98:96:df:10:a5:bb:1b:cd: a7:bb:93:c4:4c:6f:f4:e3:d4:fa:82:6e:56:2c:36: 8b:a6:e7:f5:06:0c:cb:ec:66:da:97:41:cd:39:1b: eb:ce:9d:9b:e6:2e:b6:0a:e1:88:d2:dd:0e:d7:62: f3:ef:a6:aa:5c:1b:17:b6:de:6b:cb:35:bb:75:b5: 04:ce:a9:fd:f2:d4:41:ba:82:38:71:e4:30:22:23: 74:56:88:be:95:1a:b2:e3:15:b4:5a:8d:3f:b7:fc: 0e:1d:6c:b6:89:f0:65:52:ed:3b:48:4f:48:db:db: 7e:9f:7c:d4:0b:29:0b:36:0c:53:0e:ce:9e:81:f3: 39:51:35:76:5c:8b:03:d4:b9:ff:ec:14:54:17:e3: 8e:53:7a:f4:16:40:7e:0b:42:49:75:e6:ac:a8:48: 4b:e9:3c:3e:05:da:85:f3:e1:6d:08:48:30:15:55: 4f:1f:ac:71:21:a2:c5:d0:ee:b7:3e:e9:36:d6:57: d2:a9:d4:fa:4c:56:e9:cf:f4:24:59:b7:11:cc:b0: b0:03:1d:f8:36:88:4c:29:e7:ab:98:79:f7:88:95: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:FC:BF:D8:18:32:5D:D2:F4:AF:7B:D9:20:B8:17:9C:B7:7A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/2bd8af48-1ffb-3e22-8eb3-a130da7da592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl X509v3 Authority Key Identifier: keyid:BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer sbgp-ipAddrBlock: critical IPv6: 2620:79:3080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3c:01:f8:b0:0a:fe:6d:77:d1:dd:2b:c2:10:78:b5:00:51: 56:f2:70:94:98:fd:da:e7:48:0d:10:c1:88:ba:ad:b6:bf:ac: b8:56:56:88:9b:db:cf:b7:ad:38:69:4c:74:74:cd:a7:a2:15: 24:3c:66:ae:18:57:88:87:0a:70:29:52:38:d8:da:22:bc:48: 2c:c6:97:5c:b2:f0:7d:e0:82:ac:9d:3d:e5:19:bc:2a:65:a0: af:0c:b7:f9:c0:53:f3:62:94:56:ad:1e:20:d2:fd:2f:19:6e: 1d:c8:84:e1:f6:18:0d:03:24:4c:d1:8c:71:af:9b:5a:b6:bf: fe:08:54:2d:4a:8f:e2:d6:c0:40:d2:90:5e:04:4f:5e:ef:57: 33:b1:16:79:93:5f:dd:bf:f0:86:f5:c5:88:10:de:e9:ed:a6: f8:10:68:32:7f:02:f8:14:58:26:65:ff:1d:03:7f:35:62:4c: ef:1f:37:04:9d:ee:45:2c:09:25:07:cc:76:a5:06:51:94:a7: 64:59:0c:07:86:1a:6f:ff:ac:95:44:84:19:20:0f:29:59:53: 3e:9a:cb:4f:50:7e:5d:d6:0a:57:f5:86:54:de:9c:46:c3:2e: 3c:bc:c3:de:1e:8c:66:86:3f:1b:81:49:e2:ec:e0:44:34:31: 1c:dc:a9:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdEmGFRM50ZzcaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc1YTY3MmUtOTMxOS00YTVkLThhMGUtMTQyYmVlZGU2 YjgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQwOTNjMGEtYmM2Yy00YWZkLWFkNmItOThlZWFkNDI3Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFJkgu/++rouoVMBTtCI2FnHUDXUah3ZDC3I eg2T5U/e/yUrmJbfEKW7G82nu5PETG/049T6gm5WLDaLpuf1BgzL7Gbal0HNORvr zp2b5i62CuGI0t0O12Lz76aqXBsXtt5ryzW7dbUEzqn98tRBuoI4ceQwIiN0Voi+ lRqy4xW0Wo0/t/wOHWy2ifBlUu07SE9I29t+n3zUCykLNgxTDs6egfM5UTV2XIsD 1Ln/7BRUF+OOU3r0FkB+C0JJdeasqEhL6Tw+BdqF8+FtCEgwFVVPH6xxIaLF0O63 Puk21lfSqdT6TFbpz/QkWbcRzLCwAx34NohMKeermHn3iJVcNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8C/L/YGDJd0vSve9kguBect3qJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lNzVh NjcyZS05MzE5LTRhNWQtOGEwZS0xNDJiZWVkZTZiODAvMmJkOGFmNDgtMWZmYi0z ZTIyLThlYjMtYTEzMGRhN2RhNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTc1YTY3MmUtOTMxOS00YTVkLThh MGUtMTQyYmVlZGU2YjgwL2U3NWE2NzJlLTkzMTktNGE1ZC04YTBlLTE0MmJlZWRl NmI4MC5jcmwwHwYDVR0jBBgwFoAUvr5Uxld/N0D/KRi0FSLYI/mC+IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lNzVhNjcyZS05MzE5LTRhNWQtOGEwZS0xNDJi ZWVkZTZiODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAeTCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE88AfiwCv5td9HdK8IQeLUAUVbycJSY/drnSA0QwYi6rba/rLhW Voib28+3rThpTHR0zaeiFSQ8Zq4YV4iHCnApUjjY2iK8SCzGl1yy8H3ggqydPeUZ vCploK8Mt/nAU/NilFatHiDS/S8Zbh3IhOH2GA0DJEzRjHGvm1q2v/4IVC1Kj+LW wEDSkF4ET17vVzOxFnmTX92/8Ib1xYgQ3untpvgQaDJ/AvgUWCZl/x0DfzViTO8f NwSd7kUsCSUHzHalBlGUp2RZDAeGGm//rJVEhBkgDylZUz6ay09Qfl3WClf1hlTe nEbDLjy8w94ejGaGPxuBSeLs4EQ0MRzcqX0= -----END CERTIFICATE-----Generated at Mon Oct 19 22:44:59 2026 by rpki-client