$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8972d9e9-f1f6-352a-90ea-a277013a3add.roa File: 8972d9e9-f1f6-352a-90ea-a277013a3add.roa (raw, json) Hash identifier: 5cvLK/oyMse2TNiAVJelpygCoz3aA0Of3hwZ4Q8gIHM= Subject key identifier: CF:59:69:C6:07:9A:DE:48:68:5B:05:A8:B4:C9:6A:ED:58:57:CB:D6 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F331D1404F3C1649DD301B380 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8972d9e9-f1f6-352a-90ea-a277013a3add.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 26969 IP address blocks: 2604:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:14:04:f3:c1:64:9d:d3:01:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=c235976d-0121-430b-9661-04815cf4598a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:aa:93:55:b6:6e:59:0c:13:2c:72:f0:c1: fe:87:1e:c3:f8:34:28:ca:30:66:bd:6d:52:cf:b0: 1b:89:0b:c2:d8:0a:48:ed:27:bd:c5:a3:b2:93:2f: 89:79:81:49:f0:6e:ce:5e:2f:d0:07:7e:24:ed:e9: 55:b3:4a:ec:68:be:a1:2b:09:75:aa:f2:e7:a9:a4: 3d:27:f9:cc:bc:09:35:58:ae:51:08:97:97:c4:c4: ce:03:ee:eb:3b:54:0a:41:86:75:26:82:a4:f9:0f: 0e:a4:e2:d5:0a:80:86:85:46:42:f3:bc:a8:27:07: 5f:50:4c:10:9b:20:5f:63:00:0f:bb:20:f5:d2:ab: 88:fe:f0:ba:40:6e:87:a6:e6:eb:e3:12:f8:14:d3: 46:c6:69:b3:4f:3f:4b:80:67:85:b1:a6:8c:5a:f6: 3a:a1:9e:c9:39:94:36:c4:28:55:44:77:95:21:44: 2b:6a:9b:28:4c:bf:a0:a2:43:4f:d8:b8:d3:1a:e7: 85:56:96:7c:df:1e:b8:9e:0e:12:90:6f:5c:c0:39: c7:91:c8:25:66:89:45:3f:50:52:51:d0:0f:44:10: 8b:7b:67:0c:75:57:c8:79:26:67:49:cf:51:45:2c: cf:e9:5c:5d:1e:42:41:6f:72:22:17:87:41:ce:a7: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:69:C6:07:9A:DE:48:68:5B:05:A8:B4:C9:6A:ED:58:57:CB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8972d9e9-f1f6-352a-90ea-a277013a3add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a6:c9:84:0f:b4:f3:fb:b8:ea:e5:9c:44:66:6f:e4:87:48: 91:92:d9:98:fe:a7:9f:06:84:09:34:e3:65:ab:18:7f:31:3e: d3:1d:5d:37:72:c3:b4:f1:ec:37:9c:f7:f0:e1:0c:5d:d4:9c: 39:bd:c0:1d:7e:0f:83:4c:37:ef:bc:d2:88:f3:f7:a0:21:5e: cd:13:bf:42:12:54:ba:93:7c:97:87:e0:5f:57:9f:da:23:08: e4:51:c3:46:19:8c:2d:a7:b5:62:1f:0d:01:f4:f6:90:ab:b5: 6b:d2:ea:09:dd:6d:c8:2f:65:10:09:b3:0a:85:56:e2:19:c1: d3:fa:b3:68:50:c1:2b:32:7f:6e:c9:4d:99:39:c3:08:de:8b: 2f:c9:31:65:b8:62:d9:f1:93:e6:27:43:00:98:e3:2b:ad:fb: 00:f7:6f:8a:be:38:ba:74:6e:04:04:d9:44:61:c3:90:8e:e3: 42:a2:0e:44:8b:b3:2d:8e:dd:2d:e2:fc:50:95:22:20:b4:a4: c3:d8:4e:bd:b0:82:58:7b:ef:df:67:1a:74:cc:2f:76:1b:44: 58:61:44:ab:ff:71:48:fc:6f:3c:c2:47:75:3f:61:ff:a1:7a: b1:c4:20:13:48:df:6c:56:e9:74:27:67:1e:48:ca:a8:e1:f3: 70:20:e1:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8zHRQE88FkndMBs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YzIzNTk3NmQtMDEyMS00MzBiLTk2NjEtMDQ4MTVjZjQ1OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFWqk1W2blkMEyxy8MH+hx7D+DQoyjBmvW1S z7AbiQvC2ApI7Se9xaOyky+JeYFJ8G7OXi/QB34k7elVs0rsaL6hKwl1qvLnqaQ9 J/nMvAk1WK5RCJeXxMTOA+7rO1QKQYZ1JoKk+Q8OpOLVCoCGhUZC87yoJwdfUEwQ myBfYwAPuyD10quI/vC6QG6Hpubr4xL4FNNGxmmzTz9LgGeFsaaMWvY6oZ7JOZQ2 xChVRHeVIUQrapsoTL+gokNP2LjTGueFVpZ83x64ng4SkG9cwDnHkcglZolFP1BS UdAPRBCLe2cMdVfIeSZnSc9RRSzP6VxdHkJBb3IiF4dBzqdHAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9ZacYHmt5IaFsFqLTJau1YV8vWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODk3MmQ5ZTktZjFmNi0z NTJhLTkwZWEtYTI3NzAxM2EzYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYpsmED7Tz+7jq5ZxEZm/kh0iRktmY/qefBoQJNONlqxh/MT7THV03 csO08ew3nPfw4Qxd1Jw5vcAdfg+DTDfvvNKI8/egIV7NE79CElS6k3yXh+BfV5/a IwjkUcNGGYwtp7ViHw0B9PaQq7Vr0uoJ3W3IL2UQCbMKhVbiGcHT+rNoUMErMn9u yU2ZOcMI3osvyTFluGLZ8ZPmJ0MAmOMrrfsA92+Kvji6dG4EBNlEYcOQjuNCog5E i7Mtjt0t4vxQlSIgtKTD2E69sIJYe+/fZxp0zC92G0RYYUSr/3FI/G88wkd1P2H/ oXqxxCATSN9sVul0J2ceSMqo4fNwIOHB -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:14 2026 by rpki-client