$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa File: 701df298-19b8-383b-a438-a2b9a42d4aa8.roa (raw, json) Hash identifier: iXkApNIE8gXdD3W9nD8Uqq6ZMBn1B4BJjSq8begRBhg= Subject key identifier: 70:7B:E2:B6:77:6D:98:E6:2C:CE:59:15:17:AF:1E:7D:78:6B:30:D7 Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F4328584F4973BF4C72D9EFC46301ED80 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62668 IP address blocks: 2605:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:bf:4c:72:d9:ef:c4:63:01:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=936735b8-9ce9-4716-a1fd-46cf9f2f3255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:97:0a:e1:32:4d:b6:0c:15:4b:d1:6c:5a: e7:ee:0e:66:54:50:e2:fb:7d:fb:9a:97:cb:e0:b6: c9:3b:46:7f:5b:49:06:d8:59:59:23:c9:4d:57:2b: 09:e6:ed:6b:09:a2:86:da:7c:3f:f4:ab:1c:29:74: 3c:50:68:f2:ef:57:6e:95:74:70:52:20:ea:ec:75: 82:aa:e4:13:dd:68:d7:e1:9e:f6:60:93:aa:b6:21: 0e:28:be:1f:12:27:20:f9:e0:5a:96:37:49:5b:d8: ab:e3:67:15:9c:10:39:90:6f:bc:2e:2a:ef:4b:ab: 06:9a:e5:33:b2:a0:b5:64:0a:ec:71:7f:d7:fa:61: 70:8e:e9:fe:e2:e3:a9:c6:66:02:4e:e1:4f:ce:d7: 8e:8b:b5:18:40:59:60:e8:ea:78:4b:d2:da:29:c6: e9:3f:67:56:5f:7d:3f:6e:12:50:73:5b:8b:05:c0: e3:39:36:57:64:5f:c0:40:9e:6f:c0:e0:2a:93:b2: 60:84:aa:95:3b:e0:a5:6c:8b:70:e6:2e:67:51:f9: 5f:8f:d2:bb:8a:f5:4e:dc:23:07:a1:c7:20:15:a7: c2:ca:5a:61:2f:f6:70:40:5c:2f:9a:53:82:09:f1: b7:ff:7d:54:08:28:80:6e:2f:32:47:1b:24:ec:66: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:E2:B6:77:6D:98:E6:2C:CE:59:15:17:AF:1E:7D:78:6B:30:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/701df298-19b8-383b-a438-a2b9a42d4aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv6: 2605:c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a1:38:a0:90:cd:f5:bd:17:db:a8:cd:62:6d:51:3c:fd:03: 3b:3d:cc:71:47:dc:f3:ac:0b:b5:8e:59:0e:07:53:e3:1b:25: 56:d3:a9:ae:1e:b1:ff:3c:c8:48:8a:02:7c:b7:5b:cf:85:b6: 4a:b5:d8:4c:78:0a:ba:21:db:2e:70:87:ef:77:e1:81:53:cb: bb:e7:fb:fa:30:da:25:49:6b:15:01:e0:e7:13:f2:e8:8a:47: 46:07:a9:54:af:c2:70:8a:ed:8f:24:21:fc:94:79:af:13:9b: c6:6e:2f:7a:71:fe:34:c8:e2:91:55:ed:8d:84:db:4f:a3:3e: ff:18:53:35:eb:f0:59:59:6c:27:83:43:6d:95:71:61:c0:cc: da:7a:05:85:fe:29:44:36:9e:e8:b3:2a:e5:bb:22:a4:03:4d: 12:15:87:3f:63:b9:97:0e:c9:96:76:3e:f7:b1:c9:0f:1e:99: e4:c9:fd:b8:f1:c0:f3:93:09:54:b1:dc:e5:30:7c:31:34:f3: 4c:f3:b2:59:fa:06:9d:42:b3:64:ba:9f:e6:ac:41:fa:6a:63: 70:45:21:98:35:88:6c:94:ef:b0:ce:69:3c:fc:ed:c2:0f:51: e5:d3:89:6d:b3:5e:2d:80:8a:9e:2e:e6:a0:da:3e:78:8f:28: 67:cb:9b:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc79MctnvxGMB7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTM2NzM1YjgtOWNlOS00NzE2LWExZmQtNDZjZjlmMmYzMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGCXCuEyTbYMFUvRbFrn7g5mVFDi+337mpfL 4LbJO0Z/W0kG2FlZI8lNVysJ5u1rCaKG2nw/9KscKXQ8UGjy71dulXRwUiDq7HWC quQT3WjX4Z72YJOqtiEOKL4fEicg+eBaljdJW9ir42cVnBA5kG+8LirvS6sGmuUz sqC1ZArscX/X+mFwjun+4uOpxmYCTuFPzteOi7UYQFlg6Op4S9LaKcbpP2dWX30/ bhJQc1uLBcDjOTZXZF/AQJ5vwOAqk7JghKqVO+ClbItw5i5nUflfj9K7ivVO3CMH occgFafCylphL/ZwQFwvmlOCCfG3/31UCCiAbi8yRxsk7GZakwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHB74rZ3bZjmLM5ZFRevHn14azDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvNzAxZGYyOTgtMTliOC0z ODNiLWE0MzgtYTJiOWE0MmQ0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUMQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCqoTigkM31vRfbqM1ibVE8/QM7PcxxR9zzrAu1jlkOB1PjGyVW06mu HrH/PMhIigJ8t1vPhbZKtdhMeAq6IdsucIfvd+GBU8u75/v6MNolSWsVAeDnE/Lo ikdGB6lUr8Jwiu2PJCH8lHmvE5vGbi96cf40yOKRVe2NhNtPoz7/GFM16/BZWWwn g0NtlXFhwMzaegWF/ilENp7osyrluyKkA00SFYc/Y7mXDsmWdj73sckPHpnkyf24 8cDzkwlUsdzlMHwxNPNM87JZ+gadQrNkup/mrEH6amNwRSGYNYhslO+wzmk8/O3C D1Hl04lts14tgIqeLuag2j54jyhny5sV -----END CERTIFICATE-----Generated at Wed Sep 30 14:24:58 2026 by rpki-client