$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa File: 5e77d852-ed63-3985-aa23-e8aa56c369a2.roa (raw, json) Hash identifier: FJAsV9C0zEh8lABlKBJd0Qbh3HI+nqmTEBdOsqL9pJk= Subject key identifier: 08:D3:F9:E4:C5:13:B8:F1:21:59:04:50:23:E6:ED:E0:7E:C2:73:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D2EB43F829C642E897080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11344 IP address blocks: 2001:4860:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:2e:b4:3f:82:9c:64:2e:89:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=43a2cc44-da03-4360-84cc-3c2ab2ab86ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:a4:60:28:6e:ec:a7:b9:6a:a8:19:7a:9f: 70:33:f2:37:8b:c9:84:c7:57:6b:05:ac:bd:e9:0d: 2b:36:9c:91:67:55:38:4b:b8:05:45:6b:e5:d5:0a: 51:58:3f:63:4a:6d:0c:e6:67:62:b1:e2:f9:66:5a: b4:22:c8:8f:d6:14:16:96:fb:60:54:49:09:59:95: 24:64:a6:23:bd:a0:45:99:09:45:f9:b8:a7:c6:72: b9:72:e2:78:5e:4a:1e:04:98:6e:98:ea:ad:09:89: c0:d3:ca:d0:2d:d2:ec:c3:1a:5b:84:52:3c:55:a4: ef:3a:d6:96:08:9a:72:f8:7f:6f:81:43:bf:fc:e1: 43:5a:e5:50:d1:a3:e3:bb:d4:8d:83:27:23:86:00: 78:e4:ad:a8:c9:03:cb:ce:78:01:a9:98:0e:fb:ce: 65:e2:f6:fe:9b:6b:fc:c6:37:a3:c0:dc:73:a9:ca: 8e:36:be:80:0c:a6:bc:8b:b8:ee:9b:a2:a7:54:ce: 13:4b:aa:6f:6c:70:f6:24:66:ef:08:5f:7d:3d:92: f3:69:76:3a:c8:fe:2c:91:a3:aa:0f:7d:a5:a1:be: 5e:a5:99:c2:fc:0a:4d:49:bf:23:a0:6c:09:f0:ac: 39:f7:cc:f4:ef:bf:61:72:cf:08:c6:94:af:fd:bf: 79:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:F9:E4:C5:13:B8:F1:21:59:04:50:23:E6:ED:E0:7E:C2:73:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b8:12:0b:a9:8d:95:26:f1:fb:2e:2a:60:b0:08:01:8e:2a: d5:f3:f0:4e:3b:88:08:12:70:d7:89:85:af:9f:63:fb:3f:31: a3:18:46:43:11:64:d9:eb:77:aa:cf:0e:ce:d7:83:c6:aa:6e: af:b5:aa:fd:a2:e0:8c:92:05:ad:6f:5b:03:6e:54:54:28:f2: 09:a7:e4:5d:b8:f2:df:5c:03:15:11:fe:f9:69:4e:3b:ea:be: be:e6:07:ea:a3:3b:3d:28:8c:ef:d6:28:c4:b0:b4:9e:4c:4f: e3:fe:09:ab:ea:66:80:b0:45:9b:07:dd:03:b9:04:b1:ee:0f: ad:d5:b0:f0:af:85:26:d0:84:3d:da:f2:81:ac:81:ec:07:d4: 41:de:bb:28:e9:fa:4d:53:86:eb:7e:0f:45:bb:34:bd:d9:75: 5f:99:71:a6:41:31:87:dd:c2:75:5a:a8:81:96:ce:b3:ec:0e: f7:2e:50:de:1b:3d:b1:4b:c8:85:1b:01:86:10:e4:ce:ae:c0: fc:03:11:f9:db:51:33:71:43:81:a6:af:7e:0c:70:4c:5e:4e: 7b:ca:ef:55:26:1c:08:c0:fb:f2:eb:45:7a:ee:84:f7:e8:5f: 55:c9:cf:ec:ae:f9:8b:1f:b0:2f:ba:26:41:5a:d4:64:6e:41: 07:5b:29:11 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE9JfS60P4KcZC6JcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDNhMmNjNDQtZGEwMy00MzYwLTg0Y2MtM2MyYWIyYWI4NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD6kYChu7Ke5aqgZep9wM/I3i8mEx1drBay9 6Q0rNpyRZ1U4S7gFRWvl1QpRWD9jSm0M5mdiseL5Zlq0IsiP1hQWlvtgVEkJWZUk ZKYjvaBFmQlF+binxnK5cuJ4XkoeBJhumOqtCYnA08rQLdLswxpbhFI8VaTvOtaW CJpy+H9vgUO//OFDWuVQ0aPju9SNgycjhgB45K2oyQPLzngBqZgO+85l4vb+m2v8 xjejwNxzqcqONr6ADKa8i7jum6KnVM4TS6pvbHD2JGbvCF99PZLzaXY6yP4skaOq D32lob5epZnC/ApNSb8joGwJ8Kw598z0779hcs8IxpSv/b95bQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAjT+eTFE7jxIVkEUCPm7eB+wnMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU3N2Q4NTItZWQ2My0z OTg1LWFhMjMtZThhYTU2YzM2OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAD AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAOrgSC6mNlSbx+y4qYLAIAY4q1fPwTjuICBJw14mFr59j+z8x oxhGQxFk2et3qs8OzteDxqpur7Wq/aLgjJIFrW9bA25UVCjyCafkXbjy31wDFRH+ +WlOO+q+vuYH6qM7PSiM79YoxLC0nkxP4/4Jq+pmgLBFmwfdA7kEse4PrdWw8K+F JtCEPdrygayB7AfUQd67KOn6TVOG634PRbs0vdl1X5lxpkExh93CdVqogZbOs+wO 9y5Q3hs9sUvIhRsBhhDkzq7A/AMR+dtRM3FDgaavfgxwTF5Oe8rvVSYcCMD78utF eu6E9+hfVcnP7K75ix+wL7omQVrUZG5BB1spEQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:45 2026 by rpki-client