$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa File: bf4560e7-1722-3c2c-9e61-3703ea722f90.roa (raw, json) Hash identifier: xvwvnMyrPfTgyDYhif243nfxXxZiLPuHBiZ1tyi+xcQ= Subject key identifier: F8:72:18:86:FD:4D:A6:CE:42:2E:9C:02:5E:A6:F5:7F:C6:18:52:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49847A1FB194D1E5DFD7B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35994 IP address blocks: 2600:1408:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:7a:1f:b1:94:d1:e5:df:d7:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3fa72d0e-b7b0-4b7c-b630-d7bf93efcf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:63:1a:26:b5:01:59:08:4e:2f:03:1d:3d: 77:0b:2d:9a:19:7e:70:9e:a6:d9:24:86:1f:0c:58: 46:1e:2e:9c:7c:10:5c:8c:32:f5:8d:1f:22:06:5a: 4b:46:bc:ac:85:d6:90:0a:5f:b0:f2:ca:5b:bd:29: 96:16:25:a3:4b:fa:eb:6b:0e:83:c8:7b:e0:51:2f: a6:1b:80:d1:6e:48:c0:65:60:71:a8:ab:93:f6:78: ee:07:c7:b0:27:8a:86:e5:06:ed:6f:78:ef:e3:08: a6:f3:b6:96:0f:b7:76:8d:42:4f:b2:6f:4c:94:e3: 7e:0c:0a:33:ac:86:c6:02:cb:da:ca:ad:8a:06:d4: 2e:f2:30:2d:cc:31:d8:70:5e:01:c4:dc:58:64:2c: f7:08:eb:1e:5e:ad:33:db:7b:a8:51:66:92:da:35: 86:41:43:4a:3e:3c:54:ab:0d:84:be:fc:a7:07:ff: 4a:23:d4:21:54:8b:a0:de:30:37:58:5f:8d:d4:dc: 57:eb:8b:36:a9:9c:fe:b2:e5:8a:ef:47:8c:2f:da: 3c:7f:cf:c8:c1:3d:c2:fc:9a:b1:aa:49:2d:e8:d9: e2:dc:ba:a0:14:2b:68:eb:b9:93:bf:16:66:11:55: d6:d7:34:e5:52:2b:84:0c:cf:42:b9:62:82:e1:cf: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:18:86:FD:4D:A6:CE:42:2E:9C:02:5E:A6:F5:7F:C6:18:52:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6b:38:70:c0:fe:f8:09:ea:4e:18:a3:04:ce:c5:4e:c3:bf: ed:32:6b:9e:cc:19:55:ae:6e:5c:31:a3:0a:ec:72:56:18:3a: f5:f6:b2:fa:38:86:df:86:4e:e2:2a:9e:89:bf:a3:68:8d:1d: d3:ee:4c:10:3c:10:69:c5:ec:63:6f:b9:b1:a0:8e:a6:87:89: 22:ae:ff:81:c1:cc:1c:92:09:b3:fc:ac:b2:91:82:51:16:a3: 25:6e:6e:a4:b2:d8:7b:cf:9f:db:4f:58:d4:17:6f:d2:8e:5b: b8:f3:4f:49:77:fe:7e:b3:7e:ac:6f:c0:4a:56:1b:d0:54:9d: 8d:9f:0d:56:8d:d2:d2:03:d4:fd:a3:7e:6e:65:bb:65:1e:e3: 2a:ae:42:9c:55:bc:b7:68:ad:ed:55:f7:94:6e:57:8d:6c:07: 26:42:e1:36:d9:53:fd:c4:68:62:2f:16:a2:38:30:a9:8a:e7: e5:e0:44:97:7a:30:75:1a:d3:9b:99:9c:c2:91:91:a2:f6:91: fa:c8:a1:69:31:dd:07:0a:8a:77:48:75:ad:67:c2:80:c0:65: a2:ee:fe:ca:22:a6:ca:5f:ee:d0:76:93:0d:ae:db:46:68:27: 86:02:a6:44:c3:8f:69:17:f8:45:1c:96:67:c7:ec:e5:39:ed: 5a:68:42:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhHofsZTR5d/XswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZhNzJkMGUtYjdiMC00YjdjLWI2MzAtZDdiZjkzZWZjZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyhjGia1AVkITi8DHT13Cy2aGX5wnqbZJIYf DFhGHi6cfBBcjDL1jR8iBlpLRryshdaQCl+w8spbvSmWFiWjS/rraw6DyHvgUS+m G4DRbkjAZWBxqKuT9njuB8ewJ4qG5Qbtb3jv4wim87aWD7d2jUJPsm9MlON+DAoz rIbGAsvayq2KBtQu8jAtzDHYcF4BxNxYZCz3COseXq0z23uoUWaS2jWGQUNKPjxU qw2EvvynB/9KI9QhVIug3jA3WF+N1NxX64s2qZz+suWK70eML9o8f8/IwT3C/Jqx qkkt6Nni3LqgFCto67mTvxZmEVXW1zTlUiuEDM9CuWKC4c/YJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhyGIb9TabOQi6cAl6m9X/GGFK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY0NTYwZTctMTcyMi0z YzJjLTllNjEtMzcwM2VhNzIyZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9rOHDA/vgJ6k4YowTOxU7Dv+0ya57MGVWublwxowrsclYYOvX2 svo4ht+GTuIqnom/o2iNHdPuTBA8EGnF7GNvubGgjqaHiSKu/4HBzBySCbP8rLKR glEWoyVubqSy2HvPn9tPWNQXb9KOW7jzT0l3/n6zfqxvwEpWG9BUnY2fDVaN0tID 1P2jfm5lu2Ue4yquQpxVvLdore1V95RuV41sByZC4TbZU/3EaGIvFqI4MKmK5+Xg RJd6MHUa05uZnMKRkaL2kfrIoWkx3QcKindIda1nwoDAZaLu/soipspf7tB2kw2u 20ZoJ4YCpkTDj2kX+EUclmfH7OU57VpoQow= -----END CERTIFICATE-----Generated at Fri Sep 25 17:13:07 2026 by rpki-client