$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c88a0b55-ee3a-3794-a363-958ab1eccf1e.roa File: c88a0b55-ee3a-3794-a363-958ab1eccf1e.roa (raw, json) Hash identifier: m+bpbq3U3e9seRKyqkpq64MqJey2PRBjVmlCesfJA9s= Subject key identifier: D8:9F:E9:E6:95:75:E6:32:9B:60:59:36:E1:5F:84:6E:A9:E5:EB:23 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584F423E14FA8A1BB6E924BFDE20 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c88a0b55-ee3a-3794-a363-958ab1eccf1e.roa Signing time: Tue 22 Sep 2026 11:03:53 +0000 ROA not before: Tue 22 Sep 2026 11:03:53 +0000 ROA not after: Mon 21 Dec 2026 12:03:53 +0000 asID: 16509 IP address blocks: 2605:b040:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:3e:14:fa:8a:1b:b6:e9:24:bf:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Sep 22 11:03:53 2026 GMT Not After : Dec 21 12:03:53 2026 GMT Subject: CN=f194b8f5-d07c-4c21-94be-df671ccf7504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:0a:cd:43:ce:12:ac:e7:71:78:7b:ee:d9: 0e:5f:39:e2:3f:55:5d:23:e1:96:a5:cf:55:7b:bf: 2d:9e:dd:8f:cd:f8:03:a4:73:e5:d6:ce:4b:dc:6e: bc:2a:64:c9:bf:3b:db:cb:36:e6:2b:2c:ae:20:d4: 26:be:29:0f:16:95:00:1e:1c:a6:68:16:7d:bc:9a: 8a:4b:8a:53:19:e3:38:cc:bf:ce:8a:bf:60:cb:07: 2b:f4:d3:8a:60:41:b7:54:3d:f0:81:80:d6:5f:cb: e3:1e:7c:c1:c0:ce:25:35:01:43:02:7f:28:6c:d9: b6:bc:6d:60:95:49:c4:73:56:1e:de:c1:e8:a8:c3: 1c:4b:18:22:20:c9:61:cb:b2:f3:92:3c:52:ee:d6: f5:32:e5:df:21:fc:fd:a4:d2:07:c3:9f:40:d7:d3: ea:d7:32:17:23:3e:2c:1c:01:cd:f4:dd:d6:40:f3: f7:35:0d:29:ad:00:fe:56:b9:3c:e1:c5:d9:6d:83: f1:89:2f:0f:27:c1:88:0d:a3:b5:c3:80:e6:7a:1c: 5a:13:44:83:54:be:33:ba:7f:1d:a0:79:14:bb:f1: 83:01:f0:65:31:99:23:e5:a7:1c:1f:fe:5b:72:a4: 8a:d4:39:1b:d5:8e:d0:35:62:7b:b9:ed:bf:fc:6f: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:E9:E6:95:75:E6:32:9B:60:59:36:E1:5F:84:6E:A9:E5:EB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c88a0b55-ee3a-3794-a363-958ab1eccf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ed:f9:58:87:b1:84:eb:c1:09:4e:0f:cd:fd:45:4b:44:91: 6e:83:68:57:33:b6:42:80:49:57:e3:f8:10:a6:d8:e1:73:ab: 68:58:cb:8a:c5:a7:0c:0e:89:ff:2b:65:5f:58:dc:89:a3:9f: e4:d0:41:c1:75:60:42:40:5e:c8:4f:3b:53:5c:b4:4b:8c:51: 2b:56:57:a3:18:72:e9:c5:5c:cd:84:19:3a:27:39:b1:de:39: a5:eb:e4:dc:42:c5:d0:05:43:40:e2:ca:c2:4b:b3:21:5d:6a: d1:62:e4:f3:05:94:f9:6b:62:89:e2:96:8d:ac:2f:62:0a:f9: c8:68:f1:69:80:db:db:66:22:4d:49:19:f6:ff:b3:52:71:2e: 69:0f:68:b1:b1:ca:15:3f:44:61:70:94:1b:8f:8d:dc:a8:df: f4:f3:6e:d8:25:10:41:5e:1d:ad:65:cf:90:3e:77:f4:46:26: d3:df:0f:90:ff:b7:02:11:bc:47:e1:83:e0:c6:0f:2a:3f:10: 4f:aa:cd:c4:b0:d5:1c:87:60:cb:f7:29:7f:df:c7:d6:af:36: e4:83:f6:69:1b:b9:31:ad:f3:2e:fd:75:5f:45:36:89:f9:ae: 80:3e:a0:2f:a2:8b:0c:93:7b:7e:45:f0:bf:5e:a5:38:a4:e6: 53:6d:06:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9CPhT6ihu26SS/3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MDkyMjExMDM1M1oXDTI2MTIyMTEyMDM1M1owLzEtMCsGA1UEAxMk ZjE5NGI4ZjUtZDA3Yy00YzIxLTk0YmUtZGY2NzFjY2Y3NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoYKzUPOEqzncXh77tkOXzniP1VdI+GWpc9V e78tnt2PzfgDpHPl1s5L3G68KmTJvzvbyzbmKyyuINQmvikPFpUAHhymaBZ9vJqK S4pTGeM4zL/Oir9gywcr9NOKYEG3VD3wgYDWX8vjHnzBwM4lNQFDAn8obNm2vG1g lUnEc1Ye3sHoqMMcSxgiIMlhy7LzkjxS7tb1MuXfIfz9pNIHw59A19Pq1zIXIz4s HAHN9N3WQPP3NQ0prQD+Vrk84cXZbYPxiS8PJ8GIDaO1w4DmehxaE0SDVL4zun8d oHkUu/GDAfBlMZkj5accH/5bcqSK1Dkb1Y7QNWJ7ue2//G9AFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNif6eaVdeYym2BZNuFfhG6p5esjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYzg4YTBiNTUtZWUzYS0z Nzk0LWEzNjMtOTU4YWIxZWNjZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPt+ViHsYTrwQlOD839RUtEkW6DaFcztkKASVfj+BCm2OFzq2hY y4rFpwwOif8rZV9Y3Imjn+TQQcF1YEJAXshPO1NctEuMUStWV6MYcunFXM2EGTon ObHeOaXr5NxCxdAFQ0DiysJLsyFdatFi5PMFlPlrYonilo2sL2IK+cho8WmA29tm Ik1JGfb/s1JxLmkPaLGxyhU/RGFwlBuPjdyo3/TzbtglEEFeHa1lz5A+d/RGJtPf D5D/twIRvEfhg+DGDyo/EE+qzcSw1RyHYMv3KX/fx9avNuSD9mkbuTGt8y79dV9F Non5roA+oC+iiwyTe35F8L9epTik5lNtBgk= -----END CERTIFICATE-----Generated at Wed Oct 14 17:50:50 2026 by rpki-client