$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa File: 60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa (raw, json) Hash identifier: 5V9knXKx57QCLVGVXIa6w6/Avpwr/hYXA8DCtk2SPPs= Subject key identifier: 35:76:39:10:5F:3A:1D:A8:82:F9:BE:D9:C8:1A:DC:F4:5F:7E:B5:52 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584FA2C87D769607AA6181030C00 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 16509 IP address blocks: 2604:1f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7d:76:96:07:aa:61:81:03:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=b3af53ac-47d9-4405-b338-64e31e4ef205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:f5:0a:a3:3e:d0:b7:68:54:a2:fb:ed:53: 2b:5d:ea:fa:6d:80:59:08:d4:f5:5a:a7:88:2d:ca: 09:66:d7:5e:d8:46:7c:d5:cd:50:d9:ab:01:ff:70: a4:b1:9e:ab:6c:71:01:f4:8b:1d:74:8b:80:6b:be: 1c:70:0e:ff:15:c1:b8:37:4f:ed:90:77:a0:0e:ca: 75:d0:b1:46:1c:67:f7:cb:8a:81:c0:0b:5d:95:78: b1:12:33:f7:39:c0:64:3b:78:2d:93:b9:f6:67:44: ea:1b:54:be:e0:0e:ec:f6:10:60:d6:7e:c2:23:61: e3:5a:b6:a5:35:3f:d3:ba:04:08:f8:a7:ac:12:c1: e2:4d:8e:c9:82:af:5b:04:30:31:4d:8c:8a:ce:99: 09:0c:fa:46:3d:40:dd:e9:a5:f2:d9:72:6e:b0:0a: d0:d2:2c:e3:6d:cc:06:2f:57:66:76:dd:36:51:ba: be:85:ea:70:e7:0e:86:3a:7e:10:ff:2f:a6:38:37: 5d:2b:69:bc:2e:6b:28:d9:a9:6c:00:6a:e2:ca:cc: 42:d5:83:6c:7f:81:ea:4f:10:48:31:c2:20:0a:cf: 4e:6b:23:96:bf:33:2e:08:73:00:59:81:b2:f9:ef: c4:fd:14:02:58:ef:7b:e9:d8:61:e4:73:1a:73:d3: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:76:39:10:5F:3A:1D:A8:82:F9:BE:D9:C8:1A:DC:F4:5F:7E:B5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:66:ae:26:42:ba:c0:e9:4b:32:74:c4:7c:2c:3b:20:6f:29: c9:12:75:12:be:9a:30:4a:1b:76:9a:9e:0e:4b:ed:73:9b:74: 6e:62:2e:c0:bb:77:7a:01:86:7f:87:07:5d:e2:43:f6:46:87: 00:4a:7f:e9:d3:20:cd:4d:11:da:a9:d8:7e:86:57:63:0c:8a: b9:b1:fe:ec:b6:6c:13:f7:cb:d3:91:e0:b9:9e:f7:7c:24:5c: ef:70:4f:96:69:09:b7:f5:61:77:01:f1:58:1f:96:2e:2d:e2: db:0a:6c:25:e7:97:fb:43:eb:27:4e:9d:53:bc:b1:3d:95:1b: b5:94:76:fb:c1:0a:43:3b:33:95:eb:f5:ad:22:c6:1d:47:ce: e3:48:23:89:0d:ff:5f:c0:f6:9c:52:03:c2:5a:7b:2f:bd:83: 11:fb:d8:40:6d:23:46:c5:94:cc:62:18:c9:5d:69:f0:f5:a4: d8:1e:89:10:25:c2:a2:77:c5:f1:95:6b:bc:1d:71:71:77:f6: 6c:7a:60:4d:d2:a8:95:b6:0a:a4:93:b5:b6:a2:3a:c8:4c:92: 22:8b:66:65:ef:92:98:67:1d:a7:8b:cc:25:df:8f:31:a3:60: 42:1b:95:ed:75:08:46:90:fe:80:65:ed:d7:72:df:ee:bf:d6: e9:66:75:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+iyH12lgeqYYEDDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk YjNhZjUzYWMtNDdkOS00NDA1LWIzMzgtNjRlMzFlNGVmMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNr1CqM+0LdoVKL77VMrXer6bYBZCNT1WqeI LcoJZtde2EZ81c1Q2asB/3CksZ6rbHEB9IsddIuAa74ccA7/FcG4N0/tkHegDsp1 0LFGHGf3y4qBwAtdlXixEjP3OcBkO3gtk7n2Z0TqG1S+4A7s9hBg1n7CI2HjWral NT/TugQI+KesEsHiTY7Jgq9bBDAxTYyKzpkJDPpGPUDd6aXy2XJusArQ0izjbcwG L1dmdt02Ubq+hepw5w6GOn4Q/y+mODddK2m8Lmso2alsAGriysxC1YNsf4HqTxBI McIgCs9OayOWvzMuCHMAWYGy+e/E/RQCWO976dhh5HMac9NiwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDV2ORBfOh2ogvm+2cga3PRffrVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvNjBiNjU2ZDEtMmE0MS0z YTNiLWJmZjItMTBkM2YzYjhmNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZmriZCusDpSzJ0xHwsOyBvKckSdRK+mjBKG3aang5L7XObdG5i LsC7d3oBhn+HB13iQ/ZGhwBKf+nTIM1NEdqp2H6GV2MMirmx/uy2bBP3y9OR4Lme 93wkXO9wT5ZpCbf1YXcB8Vgfli4t4tsKbCXnl/tD6ydOnVO8sT2VG7WUdvvBCkM7 M5Xr9a0ixh1HzuNII4kN/1/A9pxSA8Jaey+9gxH72EBtI0bFlMxiGMldafD1pNge iRAlwqJ3xfGVa7wdcXF39mx6YE3SqJW2CqSTtbaiOshMkiKLZmXvkphnHaeLzCXf jzGjYEIble11CEaQ/oBl7ddy3+6/1ulmdcs= -----END CERTIFICATE-----Generated at Sun Nov 15 21:03:00 2026 by rpki-client