$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa File: 408dc68f-c76d-3da2-b2ce-f04c23661355.roa (raw, json) Hash identifier: IQdY+i1RcZ9ntBvHF4V6EH1APaxHIy/czM4We3xBnoo= Subject key identifier: 93:C6:65:92:93:3E:65:E2:7D:72:36:DB:FC:49:7B:C0:A6:D6:1E:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980D7DFC84B7D8E91CC2980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 2603:3023::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:d7:df:c8:4b:7d:8e:91:cc:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6b589bf-0571-48b6-adef-16c45d6b576f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:f0:d8:e7:34:5f:1c:86:44:9a:7e:49:6b: e8:e6:45:be:fa:c9:f8:de:2a:38:2a:01:86:df:7e: 04:9a:a5:92:7c:ab:1e:fb:68:7c:16:3a:fa:04:fb: 2d:91:0b:db:cc:de:2e:54:66:eb:55:a1:51:e0:7a: 11:e5:89:85:8a:5d:dc:1b:f3:77:26:eb:73:05:ac: 10:a3:d2:19:93:82:f3:21:28:d3:e9:45:11:03:89: 29:67:6a:32:fc:fb:1d:78:38:b2:10:1d:4c:eb:fc: 83:4c:77:5a:a2:b9:32:2d:38:21:14:94:99:fd:d4: 50:1d:8a:f2:f1:71:f1:f6:b2:16:e6:ff:0e:54:e2: e0:74:c0:ff:66:0b:ed:d3:a8:1f:9f:9c:49:e9:eb: 71:f9:3b:9f:6e:a8:4b:ff:bf:83:8e:69:2f:7c:e8: 77:9d:cc:d1:c9:de:3f:94:89:57:64:86:e9:ea:ca: a7:52:32:96:05:cc:f1:79:92:a3:10:a2:9a:35:4a: d9:89:5f:47:5f:2e:5e:cf:b6:bf:4a:d4:44:26:d6: 7f:d2:68:50:c5:3d:cc:77:af:9b:df:0a:d2:97:16: 45:ae:ce:0c:0d:31:e6:b5:5d:dd:9a:44:37:ac:02: ab:0a:ac:52:28:31:3f:f8:8e:b6:48:34:3e:f9:55: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:65:92:93:3E:65:E2:7D:72:36:DB:FC:49:7B:C0:A6:D6:1E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/408dc68f-c76d-3da2-b2ce-f04c23661355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3023::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:5c:cc:4a:7c:db:cf:99:cf:1f:8c:f8:c1:52:aa:4c:8f:58: 2e:72:ee:b6:2e:1a:bd:a4:a7:f7:8f:04:1d:7b:5d:97:fb:02: 37:fd:2d:f1:5a:c8:79:63:ea:cd:97:f8:1b:df:da:cd:94:bc: 9f:7d:d0:82:d1:a1:97:42:99:3e:79:65:40:79:49:f7:59:e9: 00:bb:04:5a:d9:fd:2f:44:93:ca:a3:bd:7c:cc:fb:d2:c5:1f: 94:5e:81:4d:54:60:1e:76:25:63:2f:86:ed:f8:ba:5a:9c:30: 02:5c:21:19:02:be:30:56:7d:0c:a5:eb:41:58:58:bb:a6:2d: fb:0d:b2:be:62:81:00:b5:ac:4d:8e:bc:b8:16:28:62:59:92: 14:f6:bb:3f:71:9c:d7:91:e7:56:b3:44:05:dd:ee:d5:04:b8: d6:2c:18:6e:23:73:9b:b1:70:04:ea:50:c6:4c:99:7d:30:4b: 55:47:90:ae:cb:69:e9:62:40:e3:d0:d1:ba:37:10:08:13:17: 0b:9c:a5:be:5e:c9:b4:77:22:da:9c:d3:c8:9b:19:25:3f:74: fa:a2:5e:99:87:90:81:14:66:1c:7b:eb:25:cd:08:be:2a:37: 39:bf:a9:22:ff:cb:22:99:0c:91:a8:c5:c0:91:6f:99:f0:50: 54:59:31:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JgNffyEt9jpHMKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZiNTg5YmYtMDU3MS00OGI2LWFkZWYtMTZjNDVkNmI1NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTvw2Oc0XxyGRJp+SWvo5kW++sn43io4KgGG 334EmqWSfKse+2h8Fjr6BPstkQvbzN4uVGbrVaFR4HoR5YmFil3cG/N3JutzBawQ o9IZk4LzISjT6UURA4kpZ2oy/PsdeDiyEB1M6/yDTHdaorkyLTghFJSZ/dRQHYry 8XHx9rIW5v8OVOLgdMD/Zgvt06gfn5xJ6etx+TufbqhL/7+DjmkvfOh3nczRyd4/ lIlXZIbp6sqnUjKWBczxeZKjEKKaNUrZiV9HXy5ez7a/StREJtZ/0mhQxT3Md6+b 3wrSlxZFrs4MDTHmtV3dmkQ3rAKrCqxSKDE/+I62SDQ++VWJ7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJPGZZKTPmXifXI22/xJe8Cm1h48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA4ZGM2OGYtYzc2ZC0z ZGEyLWIyY2UtZjA0YzIzNjYxMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwIzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDGXMxKfNvPmc8fjPjBUqpMj1gucu62Lhq9pKf3jwQde12X+wI3/S3x Wsh5Y+rNl/gb39rNlLyffdCC0aGXQpk+eWVAeUn3WekAuwRa2f0vRJPKo718zPvS xR+UXoFNVGAediVjL4bt+LpanDACXCEZAr4wVn0MpetBWFi7pi37DbK+YoEAtaxN jry4FihiWZIU9rs/cZzXkedWs0QF3e7VBLjWLBhuI3ObsXAE6lDGTJl9MEtVR5Cu y2npYkDj0NG6NxAIExcLnKW+Xsm0dyLanNPImxklP3T6ol6Zh5CBFGYce+slzQi+ Kjc5v6ki/8simQyRqMXAkW+Z8FBUWTEh -----END CERTIFICATE-----Generated at Mon Sep 28 19:10:21 2026 by rpki-client