$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa File: f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa (raw, json) Hash identifier: 8Lh05EGrmX2JNXFDkajlF9XXqPVVaIaZgdzRBqE3LIM= Subject key identifier: 49:EF:6A:8F:93:CA:D3:26:62:F0:AA:ED:40:97:F8:DF:9C:0E:E0:4F Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584F498B021C15ECCC0B664D7780 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 268624 IP address blocks: 2600:3500:c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:02:1c:15:ec:cc:0b:66:4d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8b1167f-f30d-43d7-bf9a-d0bec78a8ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:c5:12:4c:88:7f:ea:16:ce:73:51:57:a0: 78:3b:42:1b:98:56:b5:e1:06:bf:a3:84:12:08:37: e4:6f:04:b2:6f:5b:06:11:ae:20:ef:08:00:de:f1: ec:cd:b2:e4:f6:54:46:ac:4d:97:8c:91:c0:35:41: 4f:46:d0:6b:b8:57:7e:b1:2a:fe:19:cd:aa:73:b7: ed:c4:df:cb:d2:76:a1:c6:85:1d:b8:77:0f:54:d8: cb:e5:40:ac:ab:4d:11:ed:da:65:79:c8:d7:64:d0: bc:e0:d0:10:c9:a9:30:ce:f9:ed:46:cb:61:59:0e: 6e:27:9c:29:0a:a7:66:8c:57:ca:69:78:e2:cd:1a: 58:44:2b:4a:74:d7:fa:b1:76:14:3d:5a:63:32:03: 69:6b:45:04:8c:8d:7b:27:26:08:49:f4:35:b2:10: e0:23:b2:e2:2a:83:1c:c5:24:b9:f8:5a:13:ef:1a: 1f:65:73:20:55:98:20:4d:86:97:e7:f3:98:64:34: ae:62:3b:51:88:3e:a9:87:54:f8:92:47:cc:a5:87: fe:64:6a:86:c9:df:fc:c8:7a:86:a8:dd:7d:21:19: 2a:71:72:cc:4d:13:24:f9:d2:72:d0:80:00:a5:13: 43:a1:cf:61:2a:06:ae:79:21:b5:f5:66:42:0c:dc: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:6A:8F:93:CA:D3:26:62:F0:AA:ED:40:97:F8:DF:9C:0E:E0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:22:33:70:b8:80:ba:54:40:e8:7c:dc:cd:51:b9:11:91:68: be:12:58:ed:4d:99:39:6f:f9:28:81:4f:ef:e2:97:c9:f2:f4: 4c:c6:47:a8:c9:c6:6a:fa:2d:8d:d4:66:70:4d:94:80:82:56: c1:59:59:ac:cb:e1:c8:03:79:0e:4c:a1:5f:70:06:55:45:a3: 2c:58:c9:16:9a:ae:dd:ac:08:4d:95:a0:f0:89:7c:4c:34:f7: a6:39:1a:30:2d:1c:d6:d0:c9:60:ca:f8:7e:22:e2:79:47:be: a0:2f:12:60:85:cc:47:8c:59:d6:b5:a0:1c:b7:65:17:9d:22: 9b:93:e4:f4:d7:5b:96:86:00:4b:b7:79:0b:6a:7b:74:05:ec: a6:fa:bd:fb:54:14:0b:08:9e:23:44:86:6b:86:e3:76:70:7f: c5:66:98:f0:40:f7:f0:9b:eb:d3:2b:6e:ea:84:1b:b8:a2:07: 94:df:5d:10:ca:97:d2:c8:50:88:39:1e:56:e8:2e:92:b4:86: f2:75:57:3d:e5:19:08:26:ac:6c:8a:e7:79:da:be:35:88:e5: 72:71:5f:ce:99:06:7a:bf:57:9a:76:60:e8:6c:33:ac:b2:8d: 98:50:ef:7e:6d:e0:d5:41:69:e2:cd:85:0f:e0:6a:31:7d:a5: 6f:10:7e:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiwIcFezMC2ZNd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhiMTE2N2YtZjMwZC00M2Q3LWJmOWEtZDBiZWM3OGE4ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbnFEkyIf+oWznNRV6B4O0IbmFa14Qa/o4QS CDfkbwSyb1sGEa4g7wgA3vHszbLk9lRGrE2XjJHANUFPRtBruFd+sSr+Gc2qc7ft xN/L0nahxoUduHcPVNjL5UCsq00R7dplecjXZNC84NAQyakwzvntRsthWQ5uJ5wp CqdmjFfKaXjizRpYRCtKdNf6sXYUPVpjMgNpa0UEjI17JyYISfQ1shDgI7LiKoMc xSS5+FoT7xofZXMgVZggTYaX5/OYZDSuYjtRiD6ph1T4kkfMpYf+ZGqGyd/8yHqG qN19IRkqcXLMTRMk+dJy0IAApRNDoc9hKgaueSG19WZCDNwvjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEnvao+TytMmYvCq7UCX+N+cDuBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvZjAzNmUwMWItYTBjNi0z ZWM4LTljOTAtNjliOTkyMDJkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0iM3C4gLpUQOh83M1RuRGRaL4SWO1NmTlv+SiBT+/il8ny9EzG R6jJxmr6LY3UZnBNlICCVsFZWazL4cgDeQ5MoV9wBlVFoyxYyRaart2sCE2VoPCJ fEw096Y5GjAtHNbQyWDK+H4i4nlHvqAvEmCFzEeMWda1oBy3ZRedIpuT5PTXW5aG AEu3eQtqe3QF7Kb6vftUFAsIniNEhmuG43Zwf8VmmPBA9/Cb69MrbuqEG7iiB5Tf XRDKl9LIUIg5HlboLpK0hvJ1Vz3lGQgmrGyK53navjWI5XJxX86ZBnq/V5p2YOhs M6yyjZhQ735t4NVBaeLNhQ/gajF9pW8QfiA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:28:36 2026 by rpki-client