$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa File: cb7b7695-5bfd-30af-a610-aa289f820c1a.roa (raw, json) Hash identifier: qAc/GRVQB79yaIPwRc9AwPAdzLfxxSqjqJlUJdtBsE4= Subject key identifier: DD:DC:35:F1:0C:D8:B3:21:9E:33:E8:0B:CB:2A:B6:FD:CF:8C:D9:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49847D900D98554C7D156B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 24319 IP address blocks: 2600:140b:9800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:7d:90:0d:98:55:4c:7d:15:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7dec397d-8f28-4e4e-a264-cc493046fbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:dd:fc:81:6e:14:4b:01:de:ea:99:70:11: 5f:ba:45:22:d4:8a:e4:83:98:58:7e:14:95:a7:3a: 1d:a7:b5:54:54:3e:de:23:9d:a6:02:54:d7:08:54: a7:12:b8:af:32:39:5e:67:16:43:6a:1c:eb:7a:d7: e1:44:24:b5:5d:c6:1c:aa:b6:31:a2:b2:14:7f:97: d6:19:c3:fd:e7:7d:33:f7:e0:32:e3:d6:14:c5:bc: 0e:76:1a:50:3c:84:03:75:93:3b:7a:4d:b2:9c:b4: 40:0c:89:d3:8d:df:72:15:07:0b:e8:67:32:9f:ec: f2:95:ad:e3:71:e2:97:1c:22:d4:f8:06:70:b2:5c: 53:4a:81:42:29:9b:c2:12:90:a2:c1:67:3f:64:6f: b4:a3:5c:3a:1c:ee:fe:30:b1:f9:56:fa:82:c4:35: 7f:d9:9e:98:43:85:42:0c:e1:e0:08:2f:cf:60:e6: fe:f0:b6:b2:54:cf:c3:6a:a6:e2:92:65:76:69:a6: 63:86:79:16:5a:97:94:68:2a:4b:bd:73:91:a1:75: 79:4c:5e:8e:63:c9:78:7a:05:20:f8:91:b4:87:e2: 05:7c:8d:17:96:c4:10:70:cf:27:41:c9:c2:82:33: 50:6f:ff:a6:df:57:ba:f0:52:45:68:a3:3d:7a:17: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DC:35:F1:0C:D8:B3:21:9E:33:E8:0B:CB:2A:B6:FD:CF:8C:D9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7b7695-5bfd-30af-a610-aa289f820c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:9800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bf:04:88:f8:59:26:14:59:2c:5c:a6:80:11:87:ff:63:28: 8e:11:8f:ce:94:ae:bd:24:fb:8d:97:ab:2f:1e:d5:ae:bb:41: 8a:be:c1:9e:b4:ba:30:5d:75:75:6d:b9:05:4b:62:93:20:20: 20:ae:e2:f4:86:7b:16:cf:47:e1:b3:ac:e5:2a:30:70:60:07: b5:b8:8c:02:dd:3e:cf:e8:c8:2e:f7:3a:58:79:79:61:ab:af: 49:92:d5:0e:ca:63:78:5d:4d:8b:63:2c:3f:be:67:93:3b:18: f7:90:eb:50:ac:4e:d3:95:18:55:88:11:0b:d6:c4:58:4c:08: 99:43:ce:a7:aa:6f:5b:b9:1e:49:29:ef:1d:f8:f6:b2:2d:d9: ce:40:a9:66:ee:f7:f2:23:e8:31:aa:86:25:22:1e:75:8b:e9: ad:7c:56:ac:38:7b:e1:56:d7:ad:d3:00:d7:ac:86:ab:ea:6b: 3e:3f:15:99:8f:be:03:f4:4e:c2:85:11:50:7e:80:a3:14:1a: 73:81:49:a7:e1:01:43:4c:b3:ba:3f:cd:4c:59:36:bd:de:a4: 2f:21:85:3a:0f:43:26:0a:43:ff:66:49:0e:e7:71:2d:9a:02: fa:c7:4c:4d:8e:00:b2:f0:92:1e:90:06:c6:c5:75:c7:83:7c: 55:b9:61:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhH2QDZhVTH0Va4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RlYzM5N2QtOGYyOC00ZTRlLWEyNjQtY2M0OTMwNDZmYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+zd/IFuFEsB3uqZcBFfukUi1Irkg5hYfhSV pzodp7VUVD7eI52mAlTXCFSnErivMjleZxZDahzretfhRCS1XcYcqrYxorIUf5fW GcP9530z9+Ay49YUxbwOdhpQPIQDdZM7ek2ynLRADInTjd9yFQcL6Gcyn+zyla3j ceKXHCLU+AZwslxTSoFCKZvCEpCiwWc/ZG+0o1w6HO7+MLH5VvqCxDV/2Z6YQ4VC DOHgCC/PYOb+8LayVM/DaqbikmV2aaZjhnkWWpeUaCpLvXORoXV5TF6OY8l4egUg +JG0h+IFfI0XlsQQcM8nQcnCgjNQb/+m31e68FJFaKM9ehf2KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3cNfEM2LMhnjPoC8sqtv3PjNm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I3Yjc2OTUtNWJmZC0z MGFmLWE2MTAtYWEyODlmODIwYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC5gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADG/BIj4WSYUWSxcpoARh/9jKI4Rj86Urr0k+42Xqy8e1a67QYq+ wZ60ujBddXVtuQVLYpMgICCu4vSGexbPR+GzrOUqMHBgB7W4jALdPs/oyC73Olh5 eWGrr0mS1Q7KY3hdTYtjLD++Z5M7GPeQ61CsTtOVGFWIEQvWxFhMCJlDzqeqb1u5 Hkkp7x349rIt2c5AqWbu9/Ij6DGqhiUiHnWL6a18Vqw4e+FW163TANeshqvqaz4/ FZmPvgP0TsKFEVB+gKMUGnOBSafhAUNMs7o/zUxZNr3epC8hhToPQyYKQ/9mSQ7n cS2aAvrHTE2OALLwkh6QBsbFdceDfFW5YeM= -----END CERTIFICATE-----Generated at Tue Sep 29 10:50:14 2026 by rpki-client