$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa File: a619e9f2-a5c2-3db3-989a-7abc86139860.roa (raw, json) Hash identifier: kM679guZ0y3nEoICQMA/W7eAwBjTsICJOvpLkO5awrQ= Subject key identifier: 65:0B:64:C1:DB:9E:F1:46:1F:F7:11:DF:89:51:DF:05:06:DC:C1:85 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F374D1B3D9B20723E4E3BF300 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 2604:86c0:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1b:3d:9b:20:72:3e:4e:3b:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=16d74d7c-9434-47eb-ac03-a27917df9062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:0a:ec:b7:7b:f0:3f:94:f3:f4:5b:8b:fc: 52:7e:fc:b0:4f:1d:31:45:49:14:a7:0e:cf:c5:c5: 2f:d4:20:8b:fa:e4:c0:ac:8d:94:06:8b:e7:da:a1: cf:a5:aa:91:ed:1f:0d:d9:32:2f:80:21:40:7f:dd: 06:f8:19:64:88:6b:66:64:3c:81:66:8a:3e:3d:48: 01:65:27:15:9e:a3:f6:1a:f7:7b:80:95:b2:f3:4a: f8:15:b6:6d:02:85:74:92:21:d1:59:2b:16:05:0a: 89:ef:27:ae:b7:ce:bc:6a:0f:92:d5:63:4f:7c:c4: d6:94:84:56:68:ef:a1:24:90:40:32:7a:99:2b:61: dd:30:38:01:6f:be:0c:85:f8:55:30:83:a9:08:56: 87:8e:a1:82:94:55:d2:d6:38:dd:c5:03:3d:01:e4: cb:45:0c:bb:86:ea:7a:2b:2f:d9:2f:44:b1:f3:77: 0e:c0:2e:1e:ec:36:c9:1c:15:bc:03:83:f4:d3:d8: a5:42:56:42:0b:84:ed:00:1e:40:09:e2:17:c4:39: 64:8f:0a:12:ca:e7:51:f0:9c:9d:88:5c:74:3e:49: cd:16:c6:80:c7:b0:49:91:e6:ec:68:a1:94:5f:72: e5:d8:46:1f:ae:2d:48:ef:d2:97:7f:9d:62:a0:2b: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:64:C1:DB:9E:F1:46:1F:F7:11:DF:89:51:DF:05:06:DC:C1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b9:d7:97:d1:23:88:2b:08:bd:cc:01:10:16:68:b4:ac:dd: 85:25:95:a8:81:11:ba:f5:17:b5:4f:68:3c:6b:d1:f5:0b:dd: 67:d0:8f:a0:9f:b6:8a:42:3c:81:ab:ac:e6:d4:7c:98:d0:b2: 00:36:6e:0f:4d:79:62:d4:9d:95:b1:ce:49:69:b7:c6:37:ba: 40:67:27:eb:da:21:3c:8e:5f:2b:c0:41:22:47:da:36:dc:ab: 98:e4:7e:2e:41:23:41:7b:1e:c7:03:05:d3:02:20:83:ff:2c: 97:92:9c:74:1f:16:2d:7e:bb:15:a7:0c:74:ba:37:f2:38:e8: 3f:3a:78:8d:54:2a:d8:15:af:27:3b:99:64:6b:c9:93:92:52: df:e3:d6:23:7c:69:41:88:b3:4a:69:7e:3f:24:a1:e6:c1:36: b5:a9:56:4c:d2:69:89:d3:54:22:60:7f:9f:19:41:d5:e1:e8: 37:37:6d:46:3a:54:e2:31:c9:01:07:ac:5c:67:1c:c1:33:b7: 6e:c2:30:16:7c:ab:5c:43:42:7a:e3:1a:ec:97:ac:69:94:70: af:10:18:af:1d:b1:31:fd:4f:64:68:8d:f0:93:c6:ea:cc:bd: 76:25:5f:66:f7:76:6e:12:10:cd:1f:1f:09:ee:6c:02:a7:fb: eb:61:b3:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TRs9myByPk478wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MTZkNzRkN2MtOTQzNC00N2ViLWFjMDMtYTI3OTE3ZGY5MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSsK7Ld78D+U8/Rbi/xSfvywTx0xRUkUpw7P xcUv1CCL+uTArI2UBovn2qHPpaqR7R8N2TIvgCFAf90G+BlkiGtmZDyBZoo+PUgB ZScVnqP2Gvd7gJWy80r4FbZtAoV0kiHRWSsWBQqJ7yeut868ag+S1WNPfMTWlIRW aO+hJJBAMnqZK2HdMDgBb74MhfhVMIOpCFaHjqGClFXS1jjdxQM9AeTLRQy7hup6 Ky/ZL0Sx83cOwC4e7DbJHBW8A4P009ilQlZCC4TtAB5ACeIXxDlkjwoSyudR8Jyd iFx0PknNFsaAx7BJkebsaKGUX3Ll2EYfri1I79KXf51ioCsHJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGULZMHbnvFGH/cR34lR3wUG3MGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTYxOWU5ZjItYTVjMi0z ZGIzLTk4OWEtN2FiYzg2MTM5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATLnXl9EjiCsIvcwBEBZotKzdhSWVqIERuvUXtU9oPGvR9QvdZ9CP oJ+2ikI8gaus5tR8mNCyADZuD015YtSdlbHOSWm3xje6QGcn69ohPI5fK8BBIkfa NtyrmOR+LkEjQXsexwMF0wIgg/8sl5KcdB8WLX67FacMdLo38jjoPzp4jVQq2BWv JzuZZGvJk5JS3+PWI3xpQYizSml+PySh5sE2talWTNJpidNUImB/nxlB1eHoNzdt RjpU4jHJAQesXGccwTO3bsIwFnyrXENCeuMa7JesaZRwrxAYrx2xMf1PZGiN8JPG 6sy9diVfZvd2bhIQzR8fCe5sAqf762GzQw== -----END CERTIFICATE-----Generated at Fri Sep 25 03:30:37 2026 by rpki-client