$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aba0f46-5762-3270-9a81-d890ea88d813.roa File: 1aba0f46-5762-3270-9a81-d890ea88d813.roa (raw, json) Hash identifier: 4NKf+fT42d1PlCktcs8XPkrnJsfNgZhwj4F7LbSyXkw= Subject key identifier: 4F:8A:5E:F8:B1:9A:AF:16:D0:59:1C:F9:BE:8B:BE:22:67:41:34:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498455FC31F3B0D0288CA600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aba0f46-5762-3270-9a81-d890ea88d813.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 2600:1415:b800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:55:fc:31:f3:b0:d0:28:8c:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95041d29-d8f0-44a4-a4b4-737ed4213257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:3c:ab:db:a3:14:1a:86:41:7a:71:3a:fa: f9:5e:e6:a9:d3:ec:8e:79:0f:79:28:ad:c1:1e:27: 9e:ff:f1:ff:d1:cb:ab:77:9c:20:2b:c1:4e:eb:b3: e1:70:38:a3:c1:78:a2:81:51:21:86:f3:ab:02:48: a8:da:61:03:14:c4:dd:83:a5:17:6d:ae:69:f4:14: f1:dc:07:02:d4:5e:68:0f:ee:bb:ad:c0:ec:a3:11: 70:0e:21:d9:bc:5f:b5:48:8f:f8:57:33:e2:0c:17: 8c:b8:ca:b4:6f:91:eb:69:80:db:83:c7:94:8b:10: 95:cf:90:97:1e:63:22:e0:e8:57:26:0f:2b:19:24: 2a:65:37:fe:d7:fb:42:26:4d:19:c3:cd:16:1f:b3: b1:6c:46:96:73:79:e1:73:53:07:e8:73:7c:2c:a4: d5:8e:95:60:2d:96:d7:3e:b3:43:06:8c:d9:77:f4: 73:4a:71:6e:b4:d0:67:2b:a7:1c:6e:14:fc:a0:79: 69:c7:8c:cb:2a:44:81:d9:7e:d6:0d:6a:72:fa:f2: d5:b8:50:2d:d6:72:8e:8c:94:6e:d1:ef:ba:7e:f4: cb:88:6b:14:28:d0:4f:17:7c:e1:77:6e:cc:4e:3f: 4e:f1:79:ea:7e:0f:0d:8c:be:05:68:c3:e7:97:5a: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:5E:F8:B1:9A:AF:16:D0:59:1C:F9:BE:8B:BE:22:67:41:34:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1aba0f46-5762-3270-9a81-d890ea88d813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:b800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:82:91:06:40:db:b1:97:cd:6b:6d:67:16:8c:ec:f3:ea:0c: d2:2b:15:43:5c:b8:79:33:dd:8d:34:e3:85:75:1c:f6:a8:95: 4d:a0:99:88:37:d2:33:21:f1:46:20:4b:b4:f0:19:be:dc:00: 50:0a:28:33:25:14:df:c3:42:ea:19:c2:4b:a6:aa:01:4c:c5: 30:1e:79:31:6d:48:eb:f6:5d:36:34:36:40:5c:3f:27:f1:0e: 46:d5:af:a2:e2:e1:87:2f:2c:28:cd:04:fe:00:4b:ce:6e:55: 68:b8:7f:fd:73:20:7d:af:14:47:64:5d:22:9a:ad:5a:7b:58: 90:0e:c3:8a:99:a5:43:be:eb:55:7c:80:ba:04:b4:dd:84:64: b9:41:cc:68:f2:98:76:25:ec:01:e7:76:e6:96:67:8a:36:2b: 98:95:df:a6:1f:9f:6f:70:b2:07:86:3e:d5:22:14:3f:83:0c: 71:eb:71:6d:04:7c:4c:f7:cb:5b:53:ca:df:f9:95:e1:a9:4f: e0:a8:bc:f9:52:d9:b6:11:e4:86:05:b7:46:27:c4:c4:8c:71: 3c:c8:19:49:14:62:1b:ac:2e:f2:2d:f8:d3:b2:ca:37:0f:32: 69:01:d4:91:bf:e4:92:51:9a:9e:16:b7:1a:5a:85:c9:56:4f: 3c:f5:71:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhFX8MfOw0CiMpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTUwNDFkMjktZDhmMC00NGE0LWE0YjQtNzM3ZWQ0MjEzMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dw8q9ujFBqGQXpxOvr5Xuap0+yOeQ95KK3B Hiee//H/0curd5wgK8FO67PhcDijwXiigVEhhvOrAkio2mEDFMTdg6UXba5p9BTx 3AcC1F5oD+67rcDsoxFwDiHZvF+1SI/4VzPiDBeMuMq0b5HraYDbg8eUixCVz5CX HmMi4OhXJg8rGSQqZTf+1/tCJk0Zw80WH7OxbEaWc3nhc1MH6HN8LKTVjpVgLZbX PrNDBozZd/RzSnFutNBnK6ccbhT8oHlpx4zLKkSB2X7WDWpy+vLVuFAt1nKOjJRu 0e+6fvTLiGsUKNBPF3zhd27MTj9O8Xnqfg8NjL4FaMPnl1oGvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+KXvixmq8W0Fkc+b6LviJnQTRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFiYTBmNDYtNTc2Mi0z MjcwLTlhODEtZDg5MGVhODhkODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFbgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGCkQZA27GXzWttZxaM7PPqDNIrFUNcuHkz3Y0044V1HPaolU2g mYg30jMh8UYgS7TwGb7cAFAKKDMlFN/DQuoZwkumqgFMxTAeeTFtSOv2XTY0NkBc PyfxDkbVr6Li4YcvLCjNBP4AS85uVWi4f/1zIH2vFEdkXSKarVp7WJAOw4qZpUO+ 61V8gLoEtN2EZLlBzGjymHYl7AHnduaWZ4o2K5iV36Yfn29wsgeGPtUiFD+DDHHr cW0EfEz3y1tTyt/5leGpT+CovPlS2bYR5IYFt0YnxMSMcTzIGUkUYhusLvIt+NOy yjcPMmkB1JG/5JJRmp4WtxpahclWTzz1cS0= -----END CERTIFICATE-----Generated at Mon Sep 28 00:57:52 2026 by rpki-client