$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa File: 85653d51-6ced-3488-b5c4-6bd643dc06d8.roa (raw, json) Hash identifier: f9CG3InI1UKFm0N1Xu12PWSQsNYVChwK4/n27Tn1RM0= Subject key identifier: 47:35:A8:1B:E5:E8:80:64:0E:84:1C:38:BF:9A:36:32:11:08:80:F3 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7EAB996BAF13BAE21E900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 2606:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:ea:b9:96:ba:f1:3b:ae:21:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=28ea7c46-7eff-4591-b901-24dbb50db688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:25:ac:dc:00:48:3e:06:03:98:1f:43:16:56: 16:f5:a6:22:ce:c7:08:5c:7d:2a:2b:fe:3e:57:fa: 58:2f:27:67:a1:5d:89:ba:63:31:d3:0b:44:79:39: 0c:44:04:81:76:1a:6e:04:bc:32:4d:a7:56:e6:c2: f7:88:00:10:d4:ec:6d:89:99:e3:e1:ca:0c:50:f9: 7e:e1:18:64:7b:f8:28:94:df:a1:82:eb:50:54:a2: f8:2a:3f:3b:e2:e1:15:75:ea:3c:de:af:3b:c8:3f: dc:01:de:82:bf:36:5b:83:d5:f4:60:5c:bc:2a:0e: 87:c5:54:17:c8:4c:70:73:1d:01:37:6f:d0:89:b1: a5:f8:8e:f1:b2:35:0e:8f:e0:6d:02:50:5b:57:0c: 56:56:10:f4:98:4b:73:10:d0:96:0d:3b:93:ed:54: c3:42:3d:f1:c7:4e:36:a3:5e:3d:aa:b4:01:c8:4c: 23:31:86:18:4f:8f:79:f0:9b:8b:5c:a4:3e:ba:1c: d3:f5:ca:1f:f4:8d:1b:93:3b:67:70:87:b4:4d:c1: 38:b5:95:38:ac:b3:fb:24:1f:cf:a2:f4:34:be:80: 4b:a5:c7:76:1d:b0:b7:ab:4d:b7:47:30:c8:fe:22: 52:06:1b:58:f8:fc:b9:8d:9f:5f:cc:b7:9f:3b:d3: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:A8:1B:E5:E8:80:64:0E:84:1C:38:BF:9A:36:32:11:08:80:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85653d51-6ced-3488-b5c4-6bd643dc06d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e0:8b:89:3d:36:17:8d:77:c4:67:6d:0b:16:59:f8:8b:a9: 4f:76:4e:bb:27:68:b6:50:c2:66:ee:cd:b7:94:36:81:33:b1: 05:a7:fd:11:87:26:76:e6:7f:b1:ec:28:54:a8:0b:59:4d:ef: 3c:01:ba:64:a3:11:75:87:ad:4e:60:ba:aa:bf:a7:eb:b1:ea: 9f:60:77:4d:ad:04:fb:d9:20:6f:3b:b3:cb:13:b5:ca:8a:15: f0:c5:85:5b:8d:d7:8e:77:d2:9b:4c:f8:c9:96:ad:c0:76:04: 4c:3e:17:ce:aa:55:5e:5a:0d:af:75:95:69:27:75:a8:03:6b: 37:6d:b1:02:97:8e:0c:c1:f5:47:18:09:7b:f7:61:3a:8f:a3: 8a:d4:bd:d9:16:19:a0:33:74:7a:97:64:3e:73:7c:6b:4b:c1: 1b:a6:be:d2:eb:61:2e:1c:23:c5:9f:88:e7:d8:94:c6:11:33: 55:91:89:d6:f6:d0:9b:18:19:93:24:81:3a:bd:2d:d2:70:0f: ac:15:df:96:57:98:b6:1e:67:df:3c:26:91:6c:40:3e:41:50: e2:63:b1:41:d8:24:1c:22:ef:40:59:61:ef:58:a5:ca:fa:a2: 41:45:59:31:55:8e:77:a7:dd:2c:9d:97:70:b0:38:10:cd:1b: 16:27:57:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp+q5lrrxO64h6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MjhlYTdjNDYtN2VmZi00NTkxLWI5MDEtMjRkYmI1MGRiNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iWs3ABIPgYDmB9DFlYW9aYizscIXH0qK/4+ V/pYLydnoV2JumMx0wtEeTkMRASBdhpuBLwyTadW5sL3iAAQ1OxtiZnj4coMUPl+ 4Rhke/golN+hgutQVKL4Kj874uEVdeo83q87yD/cAd6CvzZbg9X0YFy8Kg6HxVQX yExwcx0BN2/QibGl+I7xsjUOj+BtAlBbVwxWVhD0mEtzENCWDTuT7VTDQj3xx042 o149qrQByEwjMYYYT4958JuLXKQ+uhzT9cof9I0bkztncIe0TcE4tZU4rLP7JB/P ovQ0voBLpcd2HbC3q023RzDI/iJSBhtY+Py5jZ9fzLefO9OUiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEc1qBvl6IBkDoQcOL+aNjIRCIDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODU2NTNkNTEtNmNlZC0z NDg4LWI1YzQtNmJkNjQzZGMwNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4IuJPTYXjXfEZ20LFln4i6lPdk67J2i2UMJm7s23lDaBM7EFp/0R hyZ25n+x7ChUqAtZTe88AbpkoxF1h61OYLqqv6frseqfYHdNrQT72SBvO7PLE7XK ihXwxYVbjdeOd9KbTPjJlq3AdgRMPhfOqlVeWg2vdZVpJ3WoA2s3bbECl44MwfVH GAl792E6j6OK1L3ZFhmgM3R6l2Q+c3xrS8Ebpr7S62EuHCPFn4jn2JTGETNVkYnW 9tCbGBmTJIE6vS3ScA+sFd+WV5i2HmffPCaRbEA+QVDiY7FB2CQcIu9AWWHvWKXK +qJBRVkxVY53p90snZdwsDgQzRsWJ1eC -----END CERTIFICATE-----Generated at Mon Sep 28 10:59:54 2026 by rpki-client