$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c8a2fde-b980-3010-9d54-ac2b696128d8.roa File: 2c8a2fde-b980-3010-9d54-ac2b696128d8.roa (raw, json) Hash identifier: zD4fNubUGzhgRgXKNqBNFBbmRYTmXCpuU8Dp1P9w1Tc= Subject key identifier: 19:87:E2:7A:43:E5:2C:26:29:F1:9F:58:59:33:65:67:2A:3F:A5:AB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F49876F388B4FA15195ECB300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c8a2fde-b980-3010-9d54-ac2b696128d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 2600:1005:a12a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:6f:38:8b:4f:a1:51:95:ec:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=777a6177-952c-4c78-895c-205a5d64bb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:12:f4:77:ee:bf:1d:eb:37:b0:1b:c2:d9: 9d:91:1b:be:e3:0b:6b:0a:45:19:fe:d4:08:5d:89: e3:ef:4a:a3:63:9e:5f:f6:71:5f:d2:59:54:2e:ae: 8d:4e:c1:b1:d2:2f:ef:99:00:8d:62:34:8b:6f:7c: 1c:47:be:36:e5:48:7e:a0:21:c4:05:05:a9:a9:ef: 2e:04:ac:26:3e:cb:95:85:f4:82:e0:d9:8f:d1:23: 58:30:17:a0:4c:5b:8b:46:33:fe:ef:8e:04:b8:2c: 5b:04:25:7b:26:48:12:8a:28:1e:a7:f3:16:6f:9b: 6c:37:4f:18:32:6b:27:c3:f0:88:ff:8a:67:79:5b: e1:cd:02:64:68:4c:6b:4b:22:33:b5:39:0d:d9:08: 39:b7:b5:80:b6:37:7f:d9:27:f3:ee:15:f5:7c:11: 9e:aa:6e:4d:da:45:c1:d4:3f:18:25:6b:f6:62:f0: d5:f9:78:63:9c:24:f2:2f:a2:69:7d:54:61:9c:ad: a3:27:c2:9a:50:60:b9:7e:3c:44:cf:77:0f:77:28: 85:e3:82:61:0a:5d:c3:23:cb:e4:cd:2a:33:2f:6f: d1:d1:f6:32:8f:d3:fc:08:72:0c:f2:5c:45:2b:bb: 54:d4:91:9b:d7:bd:d8:74:7d:df:16:a1:34:ad:25: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:87:E2:7A:43:E5:2C:26:29:F1:9F:58:59:33:65:67:2A:3F:A5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c8a2fde-b980-3010-9d54-ac2b696128d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1005:a12a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a6:ad:9b:88:15:41:3b:a1:23:50:c1:f7:5f:d5:57:5d:4e: 91:c6:e2:da:5a:8b:00:d9:2f:e6:2f:15:95:cd:de:88:ae:7e: 88:f1:1b:54:cb:34:6d:52:d8:b3:4e:d8:e9:0c:ee:c7:33:b9: b0:16:a5:53:1b:63:75:02:84:c7:f1:c3:c9:7c:e8:77:44:e8: 38:ae:21:90:de:12:2b:85:61:ee:92:0f:de:51:8f:99:e9:d1: 04:47:70:72:bb:80:bb:d1:9e:80:1f:12:fc:2c:07:b2:02:f3: eb:ab:1a:e5:03:a2:1a:f1:ea:11:c9:a0:ef:ae:5a:28:36:d9: b8:13:ff:d4:30:94:9f:d5:1b:9c:69:88:4d:01:47:89:1a:df: 9a:42:15:57:cd:bf:43:71:09:0a:79:6c:e1:f3:1e:f9:fa:42: 16:81:18:9b:f4:46:3c:90:24:c0:93:3d:6b:50:cd:82:2b:ec: e5:ef:92:da:d2:a7:a6:01:e6:47:a6:c2:ae:00:39:da:e6:c6: cc:a8:c7:48:7e:af:f4:44:16:e3:68:a2:7c:cf:e1:2a:1a:9a: a4:5f:b2:71:8d:22:06:b2:32:6e:83:a2:6e:10:a5:18:24:10: 06:12:0c:5f:1a:0c:6f:07:0d:00:9f:31:1a:13:0a:d0:82:1b: 27:38:fe:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh284i0+hUZXsswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzc3YTYxNzctOTUyYy00Yzc4LTg5NWMtMjA1YTVkNjRiYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrMS9Hfuvx3rN7AbwtmdkRu+4wtrCkUZ/tQI XYnj70qjY55f9nFf0llULq6NTsGx0i/vmQCNYjSLb3wcR7425Uh+oCHEBQWpqe8u BKwmPsuVhfSC4NmP0SNYMBegTFuLRjP+744EuCxbBCV7JkgSiigep/MWb5tsN08Y Mmsnw/CI/4pneVvhzQJkaExrSyIztTkN2Qg5t7WAtjd/2Sfz7hX1fBGeqm5N2kXB 1D8YJWv2YvDV+XhjnCTyL6JpfVRhnK2jJ8KaUGC5fjxEz3cPdyiF44JhCl3DI8vk zSozL2/R0fYyj9P8CHIM8lxFK7tU1JGb173YdH3fFqE0rSUAuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmH4npD5SwmKfGfWFkzZWcqP6WrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmM4YTJmZGUtYjk4MC0z MDEwLTlkNTQtYWMyYjY5NjEyOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBaEq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFemrZuIFUE7oSNQwfdf1VddTpHG4tpaiwDZL+YvFZXN3oiufojx G1TLNG1S2LNO2OkM7sczubAWpVMbY3UChMfxw8l86HdE6DiuIZDeEiuFYe6SD95R j5np0QRHcHK7gLvRnoAfEvwsB7IC8+urGuUDohrx6hHJoO+uWig22bgT/9QwlJ/V G5xpiE0BR4ka35pCFVfNv0NxCQp5bOHzHvn6QhaBGJv0RjyQJMCTPWtQzYIr7OXv ktrSp6YB5kemwq4AOdrmxsyox0h+r/REFuNoonzP4SoamqRfsnGNIgayMm6Dom4Q pRgkEAYSDF8aDG8HDQCfMRoTCtCCGyc4/lE= -----END CERTIFICATE-----Generated at Sun Sep 27 12:20:41 2026 by rpki-client