$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa File: 6ef0a4b9-bf91-3069-9597-debcf957aed7.roa (raw, json) Hash identifier: TUsmvZy/axAWPxAOt5M7XXGgdlLEWCrs1OEZO+HHhG8= Subject key identifier: 48:17:D6:F1:B9:81:BF:43:D6:46:6F:2F:70:D3:0D:4E:84:59:47:75 Certificate issuer: /CN=53a14809-fd74-4e50-a827-e921f11ef1a2 Certificate serial: 010D0C9F4328584F498B25237C80F0EB775DAD80 Authority key identifier: 06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35962 IP address blocks: 2604:f4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:25:23:7c:80:f0:eb:77:5d:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a14809-fd74-4e50-a827-e921f11ef1a2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f0f2a09c-cab7-4dce-89ef-5949e247c22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:52:8a:91:1d:cd:44:43:2f:78:00:9e:bb:67: 3a:4d:0d:6e:7b:56:d2:ab:a6:fc:83:4c:87:77:67: 61:92:a8:b6:8c:b2:81:4d:f5:85:1a:7f:79:97:e9: 8a:9f:df:6d:d4:e1:d9:ea:08:08:75:b9:0f:d3:11: de:5c:5c:1a:f8:35:a8:d8:38:6e:64:87:7d:71:67: 61:66:ff:94:c3:01:b1:0a:6b:fc:c5:c4:e5:7c:2e: fd:61:c0:20:c7:62:f8:a4:49:71:eb:2b:24:44:7d: 7c:a3:8a:df:7f:be:2b:ff:77:51:f8:54:52:5c:f6: 76:fc:ff:46:fd:f6:35:5e:dd:da:6d:f2:49:8f:43: aa:87:35:8c:b9:6d:bb:91:f0:7a:e3:13:28:69:20: c1:26:34:bf:2a:bb:8a:50:bc:14:ed:6a:5d:47:d1: f9:00:42:54:af:51:31:9f:b1:3d:43:47:e2:4c:8a: 52:37:96:e9:50:6b:31:a8:2a:2a:50:06:48:2c:7c: e9:18:56:13:50:36:1e:c7:99:b2:0c:70:26:4c:c6: e2:5b:fb:6b:13:a0:fe:23:40:30:87:7d:ff:1c:9e: 1e:29:83:5c:6b:3f:ac:7c:43:d0:76:75:a7:bd:da: 45:41:50:dd:9d:e9:d7:57:d5:32:c1:f9:b7:f4:5a: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:17:D6:F1:B9:81:BF:43:D6:46:6F:2F:70:D3:0D:4E:84:59:47:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/6ef0a4b9-bf91-3069-9597-debcf957aed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl X509v3 Authority Key Identifier: keyid:06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer sbgp-ipAddrBlock: critical IPv6: 2604:f4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cf:a6:d0:71:de:d0:22:97:7a:27:be:2f:b7:f2:69:c6:62: d9:93:36:c5:94:8c:34:e6:0f:94:5a:be:e5:6c:6a:87:ce:27: 64:d9:4e:55:93:b4:19:98:89:b6:36:4d:ab:e8:cb:4b:15:c6: 04:72:e2:03:4a:24:4f:68:07:d5:40:ed:0e:ef:5e:1d:77:d7: ea:de:a0:66:3d:92:d7:2c:e7:7d:34:bd:22:9c:44:62:d2:1e: 08:3b:9f:b5:32:b9:eb:25:9c:6b:68:07:b4:95:fd:7d:79:39: ea:2e:1e:8f:b8:62:5b:a8:d3:1a:43:f2:75:52:d6:a3:9f:c6: 5b:64:df:43:cb:41:07:c3:74:7e:5c:b4:7e:d2:ef:a0:32:e1: d4:57:d0:b6:c2:31:ae:8c:d8:7d:62:9b:94:6c:7b:c4:6b:70: e7:2e:85:d1:e6:61:6c:a7:78:52:d7:81:72:a5:7e:3e:64:a0: 68:27:28:21:28:ff:68:cf:0c:56:6e:4b:3b:d4:cb:d5:fa:66: ea:12:d0:0b:0a:8d:f5:7d:f9:d3:f9:61:40:17:d6:ac:36:75: ab:3b:bb:21:60:6a:45:13:ec:93:59:7d:24:07:ae:95:ce:7b: 85:02:ce:a2:59:80:b6:70:30:f6:9a:5b:2e:61:69:15:96:47: c7:bf:92:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiyUjfIDw63ddrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNhMTQ4MDktZmQ3NC00ZTUwLWE4MjctZTkyMWYxMWVm MWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjBmMmEwOWMtY2FiNy00ZGNlLTg5ZWYtNTk0OWUyNDdjMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglKKkR3NREMveACeu2c6TQ1ue1bSq6b8g0yH d2dhkqi2jLKBTfWFGn95l+mKn99t1OHZ6ggIdbkP0xHeXFwa+DWo2DhuZId9cWdh Zv+UwwGxCmv8xcTlfC79YcAgx2L4pElx6yskRH18o4rff74r/3dR+FRSXPZ2/P9G /fY1Xt3abfJJj0OqhzWMuW27kfB64xMoaSDBJjS/KruKULwU7WpdR9H5AEJUr1Ex n7E9Q0fiTIpSN5bpUGsxqCoqUAZILHzpGFYTUDYex5myDHAmTMbiW/trE6D+I0Aw h33/HJ4eKYNcaz+sfEPQdnWnvdpFQVDdnenXV9Uywfm39FqLIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEgX1vG5gb9D1kZvL3DTDU6EWUd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81M2Ex NDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIxZjExZWYxYTIvNmVmMGE0YjktYmY5MS0z MDY5LTk1OTctZGViY2Y5NTdhZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTNhMTQ4MDktZmQ3NC00ZTUwLWE4 MjctZTkyMWYxMWVmMWEyLzUzYTE0ODA5LWZkNzQtNGU1MC1hODI3LWU5MjFmMTFl ZjFhMi5jcmwwHwYDVR0jBBgwFoAUBh8AvVKvD+EBFbs0Qn6104JH2/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81M2ExNDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIx ZjExZWYxYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT0wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1z6bQcd7QIpd6J74vt/JpxmLZkzbFlIw05g+UWr7lbGqHzidk2U5V k7QZmIm2Nk2r6MtLFcYEcuIDSiRPaAfVQO0O714dd9fq3qBmPZLXLOd9NL0inERi 0h4IO5+1MrnrJZxraAe0lf19eTnqLh6PuGJbqNMaQ/J1Utajn8ZbZN9Dy0EHw3R+ XLR+0u+gMuHUV9C2wjGujNh9YpuUbHvEa3DnLoXR5mFsp3hS14FypX4+ZKBoJygh KP9ozwxWbks71MvV+mbqEtALCo31ffnT+WFAF9asNnWrO7shYGpFE+yTWX0kB66V znuFAs6iWYC2cDD2mlsuYWkVlkfHv5LE -----END CERTIFICATE-----Generated at Thu Oct 1 16:37:11 2026 by rpki-client