$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: 4TqprYe37qE1QhnWaKCIWI5SkS10kVptYIss9KbeBjo= Subject key identifier: 5D:DC:03:3E:AA:38:2A:C6:9F:D1:B4:CC:74:9D:91:25:B4:24:8C:AE Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584F49753C499F459976DA670280 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:3c:49:9f:45:99:76:da:67:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61ebe0c3-4fab-4eae-85f2-22b8d5aafb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:e1:9b:d9:e5:82:b3:39:c4:db:6a:a4:71: 47:8b:7f:85:43:51:ae:ff:63:21:de:3e:84:41:27: ac:89:6a:9d:31:f9:7a:6c:ca:92:32:cd:9f:8f:a3: 6d:bf:52:d0:83:21:b5:c5:4e:df:05:ab:24:02:13: 87:f4:73:17:7a:32:b4:d1:fa:fe:9b:60:13:61:45: a9:25:ea:45:4d:7e:a9:db:f9:ea:0e:47:c2:44:14: 67:78:a5:86:66:aa:4d:31:20:ec:47:21:c6:e4:1c: 52:31:9a:dd:bb:54:a2:8d:53:33:c8:e4:d4:8c:0e: 4a:2e:fd:e6:3a:96:cb:50:28:be:55:74:d4:3b:e6: c4:88:53:6a:52:7b:8e:43:60:3c:dd:dd:96:30:d8: cf:3f:d1:a5:ab:3f:7b:85:bb:fe:fa:e0:9d:3a:35: 47:d2:da:84:51:3d:de:0b:6b:a7:2e:31:0f:19:86: 03:9b:2a:3b:68:30:a8:7e:e5:00:2d:ed:bd:63:e0: e0:47:a3:ec:6d:d1:e7:c1:5d:ae:91:23:c5:55:d7: 30:ce:de:55:3b:9a:dd:f1:97:ff:db:42:eb:11:0b: 3e:6c:a6:7d:1b:36:85:56:0a:8a:65:6c:02:55:24: 44:c1:06:6f:7b:2d:06:d2:5e:05:82:e3:86:0b:b1: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DC:03:3E:AA:38:2A:C6:9F:D1:B4:CC:74:9D:91:25:B4:24:8C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:00:e9:b8:1e:9a:dd:61:1d:15:62:19:a8:30:50:a5:b8:74: 9d:ea:b2:ce:35:be:5d:d8:f8:74:f7:ad:67:ca:53:9b:aa:f7: 20:64:6c:e5:5c:9c:36:3c:41:8c:fe:f4:4c:5a:b3:6c:c0:18: f9:f1:a5:15:2e:ff:a3:48:f2:cb:94:0d:e6:fa:a0:dd:13:52: 63:4b:c8:23:44:63:ba:1a:93:08:0a:d0:e6:48:09:aa:42:a7: 43:2c:95:be:2e:92:86:b4:33:33:0b:dd:a0:5d:50:46:3a:55: c7:27:79:b6:ad:56:e3:ae:a7:0b:34:fa:20:23:f5:7a:3e:e7: 68:4d:d8:f7:76:29:05:d3:a8:61:4a:32:22:e8:ba:41:ae:d3: 8f:68:29:1d:74:af:77:e6:b7:04:ea:36:71:1d:e8:72:62:37: c4:27:cc:23:90:55:66:6f:d3:f7:13:ce:b9:56:a7:dc:12:4f: 0a:7e:15:a9:2e:11:9a:61:9b:94:a6:9e:c7:8f:f9:c1:cf:d8: c5:69:ff:fe:f0:79:57:df:66:9d:4d:69:4e:4b:d3:1d:33:33: 48:48:9b:59:8e:f9:4e:c9:38:3b:8d:1c:44:08:4c:f7:75:59: 60:9e:6b:ce:3b:56:83:67:e8:ff:c4:76:7b:fb:6c:e5:8f:75: 02:84:2a:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdTxJn0WZdtpnAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFlYmUwYzMtNGZhYi00ZWFlLTg1ZjItMjJiOGQ1YWFmYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFfhm9nlgrM5xNtqpHFHi3+FQ1Gu/2Mh3j6E QSesiWqdMfl6bMqSMs2fj6Ntv1LQgyG1xU7fBaskAhOH9HMXejK00fr+m2ATYUWp JepFTX6p2/nqDkfCRBRneKWGZqpNMSDsRyHG5BxSMZrdu1SijVMzyOTUjA5KLv3m OpbLUCi+VXTUO+bEiFNqUnuOQ2A83d2WMNjPP9Glqz97hbv++uCdOjVH0tqEUT3e C2unLjEPGYYDmyo7aDCofuUALe29Y+DgR6PsbdHnwV2ukSPFVdcwzt5VO5rd8Zf/ 20LrEQs+bKZ9GzaFVgqKZWwCVSREwQZvey0G0l4FguOGC7GvMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF3cAz6qOCrGn9G0zHSdkSW0JIyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4AOm4HprdYR0VYhmoMFCluHSd6rLONb5d2Ph0961nylObqvcgZGzl XJw2PEGM/vRMWrNswBj58aUVLv+jSPLLlA3m+qDdE1JjS8gjRGO6GpMICtDmSAmq QqdDLJW+LpKGtDMzC92gXVBGOlXHJ3m2rVbjrqcLNPogI/V6PudoTdj3dikF06hh SjIi6LpBrtOPaCkddK935rcE6jZxHehyYjfEJ8wjkFVmb9P3E865VqfcEk8KfhWp LhGaYZuUpp7Hj/nBz9jFaf/+8HlX32adTWlOS9MdMzNISJtZjvlOyTg7jRxECEz3 dVlgnmvOO1aDZ+j/xHZ7+2zlj3UChCqA -----END CERTIFICATE-----Generated at Sat Sep 26 10:03:46 2026 by rpki-client