$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa File: 57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa (raw, json) Hash identifier: kWttf+We5MGbDyNOGFWfj++eV9dAOcWr0mC6VUesjUU= Subject key identifier: F3:7B:D2:F5:B5:3F:EB:50:7E:91:67:34:80:1B:48:1E:03:40:FB:A9 Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584F4973865106438887F4407080 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4226 IP address blocks: 2600:3500:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:86:51:06:43:88:87:f4:40:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17de140b-80ad-4d21-923e-0193c2b530e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:a6:00:d4:28:5b:29:e7:c1:25:6e:d6:b1: 43:17:dd:66:6a:63:3c:fd:24:62:10:19:b3:a0:a2: f4:4a:a0:cf:56:61:a2:5f:91:7c:21:7a:3a:56:ea: 9d:86:b6:7b:d6:04:c3:8b:3e:88:20:d8:53:96:28: 97:12:9c:d3:60:c3:d0:29:12:89:3c:60:85:9e:5c: 0f:3f:12:f7:78:12:70:b3:6c:3d:d4:00:d1:ae:e8: e9:4e:11:d5:cb:37:d9:89:80:78:cd:11:9d:2a:22: 1a:77:1d:8e:54:eb:55:a2:6c:53:6a:61:63:41:41: f4:4f:b0:98:51:e9:f9:da:c7:15:a8:90:26:05:6b: 83:55:98:29:3d:7d:40:85:41:70:be:eb:65:00:20: 4e:da:a0:3e:86:13:f8:26:95:45:fd:4b:b0:0a:c2: 85:80:78:e6:ab:22:0e:d2:97:69:75:80:85:bf:fb: 04:ce:12:73:2c:a8:cd:c1:21:d9:29:42:07:b8:dc: 4b:4c:b0:cc:ee:f8:70:e5:9c:2c:20:9f:82:d7:72: 87:e4:e2:bb:a7:c6:dc:30:55:b0:33:fa:4e:50:2d: ce:cf:f4:91:e8:89:f6:18:cb:4c:7f:2b:4c:57:fa: 35:43:24:39:14:f0:c7:4d:21:e4:05:f6:8a:fb:09: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:D2:F5:B5:3F:EB:50:7E:91:67:34:80:1B:48:1E:03:40:FB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/57dfabe4-9be6-3ed4-a51d-d550962aa99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c2:c4:24:ea:27:04:ee:3e:9f:33:b4:04:a7:89:90:5d:a4: 0a:d7:f8:5a:b9:d2:04:10:6e:35:07:b8:f7:35:04:fd:ae:da: ef:22:f7:8e:31:e0:14:e1:f0:9e:bb:86:6f:0f:a9:85:bf:6a: a6:ff:d9:1e:61:2a:83:d5:ff:b6:c9:fe:17:3a:38:e1:de:a2: 67:8a:15:e4:b0:bc:b9:5b:e5:37:1b:ba:d9:10:26:eb:58:1a: cf:61:db:84:9e:43:f6:6c:00:20:cc:7c:8f:ff:f4:76:e6:5d: 57:96:10:af:3d:16:28:3c:7e:d4:98:be:51:c3:ae:f0:14:93: f9:98:93:ae:ae:54:f3:fc:b7:9d:94:21:bc:f1:f7:70:42:64: 12:04:6b:06:7d:1d:68:26:ea:bd:7f:d9:3c:32:cc:38:be:0a: a0:13:7b:e3:38:36:4c:c9:41:e8:a6:07:eb:6d:b8:a8:9a:49: 6d:72:c5:86:f1:87:27:e2:10:f4:c6:78:fc:b7:d9:ab:b4:3d: de:b5:b8:52:25:2c:0b:2c:a5:45:41:be:18:32:b0:be:2c:ce: ba:aa:6d:48:79:5c:55:19:1b:a1:e8:3b:06:f4:2b:b5:6e:11: 50:97:fe:29:42:7b:f5:e8:4c:4f:7f:39:f1:9b:c1:89:e0:29: d7:06:74:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc4ZRBkOIh/RAcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdkZTE0MGItODBhZC00ZDIxLTkyM2UtMDE5M2MyYjUzMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO2mANQoWynnwSVu1rFDF91mamM8/SRiEBmz oKL0SqDPVmGiX5F8IXo6VuqdhrZ71gTDiz6IINhTliiXEpzTYMPQKRKJPGCFnlwP PxL3eBJws2w91ADRrujpThHVyzfZiYB4zRGdKiIadx2OVOtVomxTamFjQUH0T7CY Uen52scVqJAmBWuDVZgpPX1AhUFwvutlACBO2qA+hhP4JpVF/UuwCsKFgHjmqyIO 0pdpdYCFv/sEzhJzLKjNwSHZKUIHuNxLTLDM7vhw5ZwsIJ+C13KH5OK7p8bcMFWw M/pOUC3Oz/SR6In2GMtMfytMV/o1QyQ5FPDHTSHkBfaK+wmT2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPN70vW1P+tQfpFnNIAbSB4DQPupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvNTdkZmFiZTQtOWJlNi0z ZWQ0LWE1MWQtZDU1MDk2MmFhOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGrCxCTqJwTuPp8ztASniZBdpArX+Fq50gQQbjUHuPc1BP2u2u8i 944x4BTh8J67hm8PqYW/aqb/2R5hKoPV/7bJ/hc6OOHeomeKFeSwvLlb5TcbutkQ JutYGs9h24SeQ/ZsACDMfI//9HbmXVeWEK89Fig8ftSYvlHDrvAUk/mYk66uVPP8 t52UIbzx93BCZBIEawZ9HWgm6r1/2TwyzDi+CqATe+M4NkzJQeimB+ttuKiaSW1y xYbxhyfiEPTGePy32au0Pd61uFIlLAsspUVBvhgysL4szrqqbUh5XFUZG6HoOwb0 K7VuEVCX/ilCe/XoTE9/OfGbwYngKdcGdJE= -----END CERTIFICATE-----Generated at Tue Sep 29 11:05:17 2026 by rpki-client