$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa File: bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json) Hash identifier: 7qRKitoX0r/HlCg/Ahpb1gIZC/PfYh5n1eaUGE+HMA8= Subject key identifier: 9C:BA:0E:B1:41:2F:75:3D:9A:EE:DA:12:47:32:A3:32:9B:78:7C:32 Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584EED520C747DDF0CE31DEC8740 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 14159 IP address blocks: 2604:aa00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0c:74:7d:df:0c:e3:1d:ec:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=4a27bc6a-aa2b-45ba-a339-df0f4db8b1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:ea:e1:65:a5:c0:f9:7e:23:37:ec:71:88: 6e:cd:e4:bf:74:9d:34:c3:60:d6:1f:ab:41:8b:e7: eb:36:6a:88:9f:1a:22:d2:24:68:aa:bc:3d:60:1f: 16:8f:4e:8c:24:fe:62:d4:07:69:cf:b1:86:69:f2: 8b:c3:71:fb:d0:ee:1b:b8:ab:e8:58:c6:8b:1c:e1: 09:58:8d:ad:73:a1:a0:1f:e5:4f:d9:52:20:12:c1: ee:71:02:76:6c:c5:75:f3:81:40:ab:50:d3:7f:93: 74:b9:a1:b3:76:6c:01:07:4a:2f:e9:45:15:a6:10: c4:65:9a:31:e0:a6:06:c0:4f:f6:0c:e6:5c:23:60: 75:f0:16:e9:3c:1a:2a:5d:2f:ba:8c:0d:d1:c2:87: 46:7c:62:e5:0c:31:77:d3:c3:da:d9:f8:89:07:75: c0:0c:86:a4:b2:2a:5c:d5:bb:7d:7d:aa:17:f3:6c: 14:d0:16:46:bf:6b:ef:b4:34:7d:bd:e7:6e:f0:ee: c8:6f:a5:bb:04:bc:51:ac:a3:0d:ef:cc:2e:0f:ac: f9:7c:ac:0e:e9:be:c0:37:c3:6c:82:5e:19:ae:e4: 43:63:b5:68:2f:62:ef:0e:f5:b7:09:fc:00:93:3b: 2e:2c:64:92:2f:03:e4:08:f4:4a:5a:3b:ef:a2:f0: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:0E:B1:41:2F:75:3D:9A:EE:DA:12:47:32:A3:32:9B:78:7C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:12:19:a7:ef:7b:7a:3e:ac:24:b0:ea:95:9f:01:88:94:a4: 97:26:b4:94:fe:d0:79:08:97:31:a6:e7:56:f0:f5:ad:19:43: b7:e2:cb:40:a1:68:6c:87:7d:5c:79:27:ad:c9:fb:36:e4:d7: cb:27:12:4b:7b:38:19:c9:24:62:56:60:15:65:fa:60:2b:ce: 58:31:9c:2c:2f:4d:22:d6:20:89:cb:5a:01:d5:4b:96:94:40: b9:c9:ae:b0:28:0a:8a:bc:ff:78:86:6e:7e:2c:1c:30:d5:43: a5:55:7e:ee:14:de:19:fd:c7:d7:e3:a6:66:70:c5:01:a8:cc: 07:21:94:38:0d:36:da:37:bb:50:f5:14:fc:40:b8:6e:8d:1b: 12:ec:f5:d0:6e:38:b4:c4:d2:16:41:ae:48:1d:39:a0:0c:6c: 41:32:3f:ec:e9:1f:7e:be:f9:f5:7e:64:d7:07:99:19:c7:bc: b1:72:16:80:db:0c:31:4f:ec:b5:c1:35:2b:97:8a:33:b0:59: 90:dc:5e:c8:f3:f9:f4:0d:bf:5e:cb:58:eb:b8:11:47:16:97: 01:f5:67:d8:2c:44:bf:a1:1a:48:63:3b:d9:ee:ae:04:25:9e: dd:06:52:f5:99:1d:b2:9c:e9:b7:30:65:a8:56:88:5b:f0:db: fe:3e:31:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7tUgx0fd8M4x3sh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGEyN2JjNmEtYWEyYi00NWJhLWEzMzktZGYwZjRkYjhiMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR3q4WWlwPl+IzfscYhuzeS/dJ00w2DWH6tB i+frNmqInxoi0iRoqrw9YB8Wj06MJP5i1Adpz7GGafKLw3H70O4buKvoWMaLHOEJ WI2tc6GgH+VP2VIgEsHucQJ2bMV184FAq1DTf5N0uaGzdmwBB0ov6UUVphDEZZox 4KYGwE/2DOZcI2B18BbpPBoqXS+6jA3RwodGfGLlDDF308Pa2fiJB3XADIaksipc 1bt9faoX82wU0BZGv2vvtDR9vedu8O7Ib6W7BLxRrKMN78wuD6z5fKwO6b7AN8Ns gl4ZruRDY7VoL2LvDvW3CfwAkzsuLGSSLwPkCPRKWjvvovDG1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJy6DrFBL3U9mu7aEkcyozKbeHwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvYmJjMGI5NDAtYTBiMC0z NTdmLTljMTItZTM3NDdmOTFhNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4Ehmn73t6PqwksOqVnwGIlKSXJrSU/tB5CJcxpudW8PWtGUO34stA oWhsh31ceSetyfs25NfLJxJLezgZySRiVmAVZfpgK85YMZwsL00i1iCJy1oB1UuW lEC5ya6wKAqKvP94hm5+LBww1UOlVX7uFN4Z/cfX46ZmcMUBqMwHIZQ4DTbaN7tQ 9RT8QLhujRsS7PXQbji0xNIWQa5IHTmgDGxBMj/s6R9+vvn1fmTXB5kZx7yxchaA 2wwxT+y1wTUrl4ozsFmQ3F7I8/n0Db9ey1jruBFHFpcB9WfYLES/oRpIYzvZ7q4E JZ7dBlL1mR2ynOm3MGWoVohb8Nv+PjEV -----END CERTIFICATE-----Generated at Sun Sep 27 08:36:10 2026 by rpki-client