$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa File: 2985ed9e-6a26-3c06-9051-3bb4f6140077.roa (raw, json) Hash identifier: dgtUQdn8e78oDVkQfdxlfHHJtOSJ9SA5um4mhcIuotw= Subject key identifier: 38:B5:BD:DC:C7:03:0D:D1:9C:B4:86:99:5F:2B:3A:DA:5B:69:E3:E8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD501AB8FCE7B26EEFC900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 6167 IP address blocks: 2600:1003:a011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:50:1a:b8:fc:e7:b2:6e:ef:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=9c14bfeb-2182-44b3-acf1-c6f14d46a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:5a:4d:b1:45:8d:8e:15:a7:cc:54:ef:61: 6f:54:31:3a:fc:41:cd:29:1c:db:5b:79:d9:39:2f: 0e:f2:a8:02:60:47:d6:ff:4c:26:9b:03:d4:bc:8f: e4:5e:6d:05:90:e9:a8:1a:ba:12:31:5c:fc:32:6a: 80:c0:4c:d2:a8:31:4d:64:6c:55:ef:8c:22:8c:6b: 35:7f:47:de:6d:a3:01:d6:e7:a8:d3:f6:80:51:bf: d6:da:f9:2b:3b:9c:2b:51:f4:5d:be:fe:a5:40:27: db:1b:75:70:79:2f:ad:6f:c8:99:1c:bb:3e:7e:b3: 23:6c:15:c5:05:78:96:65:c5:72:30:6c:f7:b7:6c: 0f:86:14:6d:a0:38:50:54:c7:b7:ab:4f:6e:d7:50: c7:0e:eb:29:c6:60:8d:d0:08:d2:44:6b:9d:ee:fd: 30:d2:9e:26:0d:f8:ec:6f:24:09:33:75:6a:db:aa: 30:2f:dc:a7:4a:23:86:b0:1c:4c:34:e9:d6:28:40: 0b:63:a5:cd:e6:1e:74:f0:94:58:18:58:79:56:96: 9c:fe:ca:b4:62:2f:66:a9:1c:5c:18:18:fb:a1:60: 93:1d:19:f8:d4:80:d3:30:67:dc:07:36:be:8e:08: 5d:8c:12:1f:23:85:ec:4c:1c:5c:53:a7:b5:05:bd: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:BD:DC:C7:03:0D:D1:9C:B4:86:99:5F:2B:3A:DA:5B:69:E3:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2985ed9e-6a26-3c06-9051-3bb4f6140077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:a011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c8:53:64:47:34:a4:90:89:06:a0:fb:c7:b5:b1:39:dd:06: 90:d0:f9:5f:45:27:54:2d:8f:d1:40:aa:7a:33:f1:b4:18:79: 7d:8d:19:f0:57:57:98:21:b0:2f:10:00:c5:71:10:07:52:21: 30:c7:8e:4d:c9:9a:16:03:bb:74:0e:d4:cb:d5:17:6f:d5:90: 05:ae:00:a2:77:29:c9:57:8c:f8:3e:f3:b8:95:ac:ab:a5:28: a1:e0:92:9c:22:53:a6:14:98:45:04:53:bc:8f:b9:bd:1f:00: 67:3d:6e:a1:08:ad:80:e9:32:d9:b0:14:96:fd:64:e1:a6:78: ee:67:a1:d0:52:98:57:68:bc:36:8e:3b:60:f2:e1:36:0c:5a: c4:51:be:50:83:79:cd:9b:9a:de:73:33:67:32:29:dd:45:67: bc:c3:b4:ec:8d:d8:d9:d0:43:74:44:2b:21:ce:b5:3d:a6:74: 5f:13:4e:23:7f:d7:8c:c6:d0:63:59:1f:ef:5b:db:fc:9c:36: 47:ad:af:4a:ff:65:b7:9c:06:ec:11:7c:ec:70:96:86:a9:f5: 19:6a:4d:cb:74:a7:f3:91:cf:9c:43:dc:f7:e9:4b:07:af:d4: 38:b5:ea:e4:35:33:9f:20:25:0e:79:f7:a5:ae:60:a3:2b:9e: c2:44:8f:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rVAauPznsm7vyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OWMxNGJmZWItMjE4Mi00NGIzLWFjZjEtYzZmMTRkNDZhMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NaTbFFjY4Vp8xU72FvVDE6/EHNKRzbW3nZ OS8O8qgCYEfW/0wmmwPUvI/kXm0FkOmoGroSMVz8MmqAwEzSqDFNZGxV74wijGs1 f0febaMB1ueo0/aAUb/W2vkrO5wrUfRdvv6lQCfbG3VweS+tb8iZHLs+frMjbBXF BXiWZcVyMGz3t2wPhhRtoDhQVMe3q09u11DHDuspxmCN0AjSRGud7v0w0p4mDfjs byQJM3Vq26owL9ynSiOGsBxMNOnWKEALY6XN5h508JRYGFh5Vpac/sq0Yi9mqRxc GBj7oWCTHRn41IDTMGfcBza+jghdjBIfI4XsTBxcU6e1Bb2ziQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDi1vdzHAw3RnLSGmV8rOtpbaePoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjk4NWVkOWUtNmEyNi0z YzA2LTkwNTEtM2JiNGY2MTQwMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA6AR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjIU2RHNKSQiQag+8e1sTndBpDQ+V9FJ1Qtj9FAqnoz8bQYeX2N GfBXV5ghsC8QAMVxEAdSITDHjk3JmhYDu3QO1MvVF2/VkAWuAKJ3KclXjPg+87iV rKulKKHgkpwiU6YUmEUEU7yPub0fAGc9bqEIrYDpMtmwFJb9ZOGmeO5nodBSmFdo vDaOO2Dy4TYMWsRRvlCDec2bmt5zM2cyKd1FZ7zDtOyN2NnQQ3REKyHOtT2mdF8T TiN/14zG0GNZH+9b2/ycNketr0r/ZbecBuwRfOxwloap9RlqTct0p/ORz5xD3Pfp Swev1Di16uQ1M58gJQ5596WuYKMrnsJEj90= -----END CERTIFICATE-----Generated at Sat Oct 3 17:45:03 2026 by rpki-client