$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa File: de87c866-1825-3308-8ce7-b12f2db0e11d.roa (raw, json) Hash identifier: emdUTyMtkJfCHN95bFosCF2UdykvatAS9bzyEHKmbnM= Subject key identifier: 45:1C:D2:C8:3A:32:37:0C:02:0E:CA:56:F8:80:49:F4:5F:A3:BD:5E Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F374D243C6B11A1A2E9340CC0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 2604:86c0:f600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:24:3c:6b:11:a1:a2:e9:34:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=eb0463c3-8ee2-4d06-90fd-9bfaec098b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:96:31:98:a1:77:94:f8:45:7c:3c:ef:87: 11:27:29:2e:00:1f:23:cb:32:28:10:af:8f:c1:53: 5b:a2:75:a3:60:b1:a9:f9:51:b7:1e:d7:a8:a8:60: 33:00:90:8c:30:05:de:82:86:fe:f9:f8:28:4d:73: 5c:ad:91:b8:f6:ca:a0:45:b2:4e:08:d3:64:51:b4: 1a:5c:68:63:ac:af:ef:2b:3e:82:5c:2a:a9:d9:9d: 7d:d4:3b:0a:d8:fc:91:a4:6d:38:f8:34:22:69:60: 6c:49:c7:b5:77:e2:3c:af:6e:8e:cc:2f:42:e0:01: 8e:05:c0:3f:8b:18:4b:db:df:a2:49:fa:2e:9f:93: 1f:00:f6:8a:e7:46:8b:d4:f6:b8:94:4e:9e:5b:94: ad:8c:3c:67:7d:8c:a4:cc:37:00:c4:f9:f0:48:de: 92:ae:23:51:ee:5a:a2:5b:27:7a:da:a4:9e:e4:f0: 30:2b:43:08:82:78:23:88:74:95:c3:d0:18:17:75: 09:eb:98:2b:d0:aa:1c:6c:3c:bb:48:40:00:b2:c6: 65:38:de:71:ea:b3:04:89:b4:bb:de:eb:78:5d:08: 4e:30:47:de:c9:3c:fd:d9:b9:97:c1:52:ea:72:37: 04:c5:4d:3d:01:31:7c:f8:b6:f5:21:6b:29:c7:3a: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1C:D2:C8:3A:32:37:0C:02:0E:CA:56:F8:80:49:F4:5F:A3:BD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:f600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e5:a4:bb:9e:0c:fa:c6:3b:1c:5c:ab:dd:e7:b9:89:0d:1a: 1e:50:9d:71:1d:49:11:c8:09:60:79:62:cf:10:a0:b5:cb:d1: d3:04:3e:86:fe:5d:b0:73:b2:c3:df:14:cd:e6:70:01:2c:b5: a1:aa:eb:24:1f:47:a1:a4:5a:fa:a0:31:6b:d8:77:ab:9e:95: 61:f1:bc:a9:44:9b:c5:de:b4:53:9e:e6:97:84:4a:b2:d1:3e: a1:02:b1:11:b1:b5:8c:49:2d:93:6e:85:25:81:f6:e3:3d:8e: 62:26:1d:02:cc:a8:ff:d5:17:29:65:09:b3:73:e9:1b:05:4e: fb:cb:38:c9:4c:aa:98:19:75:e7:2e:20:90:72:90:72:01:e6: 5c:12:fc:87:05:62:47:07:29:57:61:af:8a:03:e5:4e:f7:55: b2:27:2a:3e:9a:8b:03:01:fa:2f:26:4f:a7:80:97:8a:52:c7: 64:3a:b8:d7:e7:07:08:8a:14:d7:72:72:b0:c3:ff:51:83:85: 4c:3f:f6:4c:6a:05:29:b9:0d:bb:c4:d1:e3:0c:ce:4e:f0:8c: 34:af:38:0b:84:40:9e:2d:c0:b9:4c:60:b2:ba:ec:fe:f0:39: 55:2f:fe:ad:08:90:34:d0:13:2a:a6:24:f9:99:15:59:ad:73: aa:cc:92:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TSQ8axGhouk0DMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZWIwNDYzYzMtOGVlMi00ZDA2LTkwZmQtOWJmYWVjMDk4YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuyWMZihd5T4RXw874cRJykuAB8jyzIoEK+P wVNbonWjYLGp+VG3HteoqGAzAJCMMAXegob++fgoTXNcrZG49sqgRbJOCNNkUbQa XGhjrK/vKz6CXCqp2Z191DsK2PyRpG04+DQiaWBsSce1d+I8r26OzC9C4AGOBcA/ ixhL29+iSfoun5MfAPaK50aL1Pa4lE6eW5StjDxnfYykzDcAxPnwSN6SriNR7lqi Wyd62qSe5PAwK0MIgngjiHSVw9AYF3UJ65gr0KocbDy7SEAAssZlON5x6rMEibS7 3ut4XQhOMEfeyTz92bmXwVLqcjcExU09ATF8+Lb1IWspxzqT8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEUc0sg6MjcMAg7KVviASfRfo71eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGU4N2M4NjYtMTgyNS0z MzA4LThjZTctYjEyZjJkYjBlMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPuWku54M+sY7HFyr3ee5iQ0aHlCdcR1JEcgJYHlizxCgtcvR0wQ+ hv5dsHOyw98UzeZwASy1oarrJB9HoaRa+qAxa9h3q56VYfG8qUSbxd60U57ml4RK stE+oQKxEbG1jEktk26FJYH24z2OYiYdAsyo/9UXKWUJs3PpGwVO+8s4yUyqmBl1 5y4gkHKQcgHmXBL8hwViRwcpV2GvigPlTvdVsicqPpqLAwH6LyZPp4CXilLHZDq4 1+cHCIoU13JysMP/UYOFTD/2TGoFKbkNu8TR4wzOTvCMNK84C4RAni3AuUxgsrrs /vA5VS/+rQiQNNATKqYk+ZkVWa1zqsySww== -----END CERTIFICATE-----Generated at Sat Sep 26 07:43:17 2026 by rpki-client