$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa File: e2dbc839-1878-3592-8929-a116e0b99a2b.roa (raw, json) Hash identifier: vJ8NVFXfGP2SYuqymPR8kTSRGQQ9LR71fvq9ikodFZI= Subject key identifier: 2D:C3:01:1A:FA:02:5E:7F:34:EA:26:D0:33:1F:14:65:7D:84:CD:C8 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584F4542928D01E5A99695A65000 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 207990 IP address blocks: 2600:2904::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:92:8d:01:e5:a9:96:95:a6:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=343b9ca8-4db4-4e71-84e7-cf07b24049c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:4a:45:8b:bb:cf:82:06:a8:41:39:0a:84: ab:06:b8:d7:b2:2c:cc:2e:ab:bd:40:b3:dc:27:bb: 96:af:09:81:9d:e8:e9:b5:68:a0:30:73:57:1a:4b: e4:43:bd:3b:83:ed:2a:95:15:eb:9b:b3:1f:36:9a: 04:65:c6:df:75:35:37:b2:98:dd:b6:85:e7:8e:0f: c8:33:ad:e3:e5:51:9c:df:a0:0f:16:2f:7a:b4:8f: 9c:6a:49:27:ee:08:73:42:11:e6:86:75:ee:cf:15: 2f:17:15:ea:db:26:1e:84:73:ad:5e:58:0e:49:82: 71:d6:2a:99:21:aa:f6:04:45:17:d6:b6:b9:2a:e1: 68:56:39:23:ac:ca:6f:c9:5f:25:de:c6:2d:93:d3: 48:2f:6a:01:41:fa:ee:8a:c6:62:8b:ca:0c:a4:93: 62:64:82:93:c8:0e:3f:e6:44:80:1d:70:2c:08:17: 5d:b1:29:4d:99:ce:3a:72:a4:92:93:47:c3:0d:2a: 56:8e:c4:82:45:cf:c7:18:c5:2a:f1:59:49:e0:18: f9:cf:5e:84:6e:54:34:12:ca:e3:62:ef:95:e0:ab: 84:0f:fc:38:a4:f3:d5:8b:fe:6b:b4:75:19:32:e5: e5:56:d6:8b:d1:da:43:29:3f:3c:db:4d:15:d0:53: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:01:1A:FA:02:5E:7F:34:EA:26:D0:33:1F:14:65:7D:84:CD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2904::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:79:e0:f8:35:b5:93:9e:71:b3:64:15:1c:cc:a2:83:c3:24: c0:f0:5a:da:6f:6f:76:f7:65:d4:ea:b9:f6:62:18:b4:30:fa: b3:11:f1:17:bf:be:fa:3c:f4:b8:ec:c0:1a:eb:c6:2d:3b:5e: c9:a5:e0:e6:12:da:6f:3a:b0:31:1b:f3:63:f1:48:bb:68:ab: f6:32:3b:d7:a3:9c:96:e1:74:5a:c6:1e:3c:b0:91:97:04:d2: 55:a0:0a:af:70:a6:37:d7:31:35:0b:f4:55:8a:9f:75:94:29: fb:4d:4d:55:ac:34:89:c0:d2:70:10:6b:72:b7:38:8f:fd:e1: bd:02:b3:07:6f:d2:e3:4c:ee:0c:86:de:df:a2:67:53:a9:1a: d3:c8:34:5b:12:44:7c:c4:a0:24:83:16:5a:47:48:41:73:0d: e8:55:9b:b6:7f:05:db:41:3c:ea:c2:9c:1b:33:e5:1c:f1:39: bb:20:8d:9f:af:9c:2e:5b:15:f6:c7:a1:0d:73:49:a7:98:00: 59:9d:58:7d:b7:ab:78:2d:49:50:3b:57:09:4f:e9:f4:21:22: 92:12:85:b4:45:b3:16:0e:fa:3c:0b:09:07:9f:cc:38:b4:2d: f9:36:c6:05:28:f6:26:bc:18:a3:a9:bb:5a:b4:02:3d:2c:3a: 0a:0a:fd:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9FQpKNAeWplpWmUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MzQzYjljYTgtNGRiNC00ZTcxLTg0ZTctY2YwN2IyNDA0OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAxKRYu7z4IGqEE5CoSrBrjXsizMLqu9QLPc J7uWrwmBnejptWigMHNXGkvkQ707g+0qlRXrm7MfNpoEZcbfdTU3spjdtoXnjg/I M63j5VGc36APFi96tI+cakkn7ghzQhHmhnXuzxUvFxXq2yYehHOtXlgOSYJx1iqZ Iar2BEUX1ra5KuFoVjkjrMpvyV8l3sYtk9NIL2oBQfruisZii8oMpJNiZIKTyA4/ 5kSAHXAsCBddsSlNmc46cqSSk0fDDSpWjsSCRc/HGMUq8VlJ4Bj5z16EblQ0Esrj Yu+V4KuED/w4pPPVi/5rtHUZMuXlVtaL0dpDKT88200V0FMA7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC3DARr6Al5/NOom0DMfFGV9hM3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvZTJkYmM4MzktMTg3OC0z NTkyLTg5MjktYTExNmUwYjk5YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSeeD4NbWTnnGzZBUczKKDwyTA8Frab29292XU6rn2Yhi0MPqzEfEX v776PPS47MAa68YtO17JpeDmEtpvOrAxG/Nj8Ui7aKv2MjvXo5yW4XRaxh48sJGX BNJVoAqvcKY31zE1C/RVip91lCn7TU1VrDSJwNJwEGtytziP/eG9ArMHb9LjTO4M ht7fomdTqRrTyDRbEkR8xKAkgxZaR0hBcw3oVZu2fwXbQTzqwpwbM+Uc8Tm7II2f r5wuWxX2x6ENc0mnmABZnVh9t6t4LUlQO1cJT+n0ISKSEoW0RbMWDvo8CwkHn8w4 tC35NsYFKPYmvBijqbtatAI9LDoKCv3n -----END CERTIFICATE-----Generated at Thu Sep 24 21:53:27 2026 by rpki-client