$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/faa887f9-3e40-30fe-9183-eebf89d2780e.roa File: faa887f9-3e40-30fe-9183-eebf89d2780e.roa (raw, json) Hash identifier: U27zuwzRHiAIP0RX3vDbAvxYFy4hFehG35dWgvjV9B8= Subject key identifier: 1C:C6:15:38:DF:49:67:34:5D:37:22:59:BD:CB:40:5A:8C:E8:99:DD Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584F20F7D5BA114B52671B246700 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/faa887f9-3e40-30fe-9183-eebf89d2780e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2605:b040:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d5:ba:11:4b:52:67:1b:24:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5424d683-cf85-4f49-9904-c7840955f5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:3a:cf:bb:e2:1c:f0:06:82:53:78:d5:94: b0:32:8c:f4:9c:bf:c9:99:a3:cc:7a:ba:2c:b8:87: af:5a:2b:cd:96:27:0d:31:2d:8a:c1:fb:48:2c:a5: 75:1b:29:98:ac:21:5c:14:3f:e6:6e:ed:66:f9:60: 00:fd:36:b5:61:04:11:bf:44:b8:b7:17:1a:b8:d3: 51:6b:08:aa:20:ea:90:eb:0a:65:87:f0:b5:d2:5f: e3:cc:40:1c:20:1c:e7:06:9d:bb:28:1b:5e:0d:a0: 04:17:79:c0:9f:50:8f:41:7e:e6:4a:0f:ae:45:f5: 88:e5:ac:9e:f4:dd:73:35:65:0d:a9:b9:94:6b:43: 17:0c:8f:f4:03:a1:61:a7:c7:d9:f8:c5:1d:29:01: 55:c2:41:0f:4b:dc:8f:53:ea:eb:4f:66:7a:a9:30: fd:d0:87:1c:fd:86:64:b9:6e:4b:c6:1e:2c:aa:4e: cc:69:2d:b2:68:80:06:f5:4b:41:b1:c6:b1:58:1b: d0:c5:96:18:e4:99:78:15:3a:79:a1:76:c7:96:5d: 6a:f2:09:6c:08:05:1b:78:53:6f:bc:87:22:7d:6e: 48:82:5a:d9:48:c8:66:bf:cd:b3:b1:bd:08:60:7d: 16:2a:77:78:e1:5a:e3:d1:17:76:16:50:2a:18:d8: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C6:15:38:DF:49:67:34:5D:37:22:59:BD:CB:40:5A:8C:E8:99:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/faa887f9-3e40-30fe-9183-eebf89d2780e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:57:b4:45:4d:be:98:a5:c7:7c:b3:04:5f:45:e1:52:23:08: dd:45:60:5a:2e:c0:12:48:6f:db:5c:0d:4c:cd:f9:77:d6:4d: ba:24:bd:60:cb:cb:66:b5:00:dc:0b:c0:aa:7c:e0:88:fa:dc: b8:76:bd:fe:0b:60:b7:dc:0b:ef:fb:4e:79:42:8a:13:33:02: 33:ff:7e:c0:17:f1:b9:55:e5:15:37:f5:17:c7:84:6f:4d:71: f2:2a:86:51:37:1a:35:df:d7:98:78:7a:a8:70:d4:39:11:fb: 12:85:57:36:6f:7d:5e:88:a2:99:87:1d:e9:61:bf:9e:ae:eb: 87:e7:0c:ac:bd:dc:fc:03:0a:55:57:a2:85:c8:48:65:ea:38: d1:05:76:48:24:2e:7e:65:21:eb:4f:e3:35:02:58:84:32:fa: f2:3d:3b:aa:fd:6c:8b:59:81:ea:79:b8:1b:a4:a9:41:52:6b: 16:d1:1f:73:9e:36:5e:0f:0e:bb:1f:e8:96:65:cd:49:4e:93: 08:83:b3:cc:bd:5e:3b:21:b0:5e:57:f7:7f:d2:69:f3:ef:fd: b1:b6:e3:0e:15:8d:7f:21:bd:18:b9:3a:b0:74:b1:29:46:b7: 16:b7:a8:14:a6:7e:34:3f:94:b0:1b:0d:a4:fe:65:1a:fc:96: d5:5e:a7:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g99W6EUtSZxskZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTQyNGQ2ODMtY2Y4NS00ZjQ5LTk5MDQtYzc4NDA5NTVmNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHg6z7viHPAGglN41ZSwMoz0nL/JmaPMeros uIevWivNlicNMS2KwftILKV1GymYrCFcFD/mbu1m+WAA/Ta1YQQRv0S4txcauNNR awiqIOqQ6wplh/C10l/jzEAcIBznBp27KBteDaAEF3nAn1CPQX7mSg+uRfWI5aye 9N1zNWUNqbmUa0MXDI/0A6Fhp8fZ+MUdKQFVwkEPS9yPU+rrT2Z6qTD90Icc/YZk uW5Lxh4sqk7MaS2yaIAG9UtBscaxWBvQxZYY5Jl4FTp5oXbHll1q8glsCAUbeFNv vIcifW5IglrZSMhmv82zsb0IYH0WKnd44Vrj0Rd2FlAqGNiwmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBzGFTjfSWc0XTciWb3LQFqM6JndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZmFhODg3ZjktM2U0MC0z MGZlLTkxODMtZWViZjg5ZDI3ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1XtEVNvpilx3yzBF9F4VIjCN1FYFouwBJIb9tcDUzN+XfWTbok vWDLy2a1ANwLwKp84Ij63Lh2vf4LYLfcC+/7TnlCihMzAjP/fsAX8blV5RU39RfH hG9NcfIqhlE3GjXf15h4eqhw1DkR+xKFVzZvfV6IopmHHelhv56u64fnDKy93PwD ClVXooXISGXqONEFdkgkLn5lIetP4zUCWIQy+vI9O6r9bItZgep5uBukqUFSaxbR H3OeNl4PDrsf6JZlzUlOkwiDs8y9XjshsF5X93/SafPv/bG24w4VjX8hvRi5OrB0 sSlGtxa3qBSmfjQ/lLAbDaT+ZRr8ltVep4s= -----END CERTIFICATE-----Generated at Sun Oct 4 01:24:26 2026 by rpki-client