$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa File: 45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa (raw, json) Hash identifier: U0C7UtT0r+c7wEloVud+LrMaOH2mTb+PDHv1X44BO9w= Subject key identifier: 7C:5D:6B:7D:FB:4E:3D:E0:5D:32:58:B7:6D:71:F7:81:E8:A5:C9:35 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F374D16E4AD8EC88B910BF700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 6167 IP address blocks: 2600:1008:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:16:e4:ad:8e:c8:8b:91:0b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=b95c9f2c-5526-4f50-b203-a31de77488ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:d6:32:d1:23:05:d2:ab:71:96:d1:47:61: 92:42:2a:36:87:ab:b2:1b:a0:7c:06:e7:00:2e:08: 98:08:47:db:f1:43:18:85:a7:20:6c:6f:6e:77:54: 87:a2:b9:84:b9:fa:79:7e:93:4d:84:ad:1b:00:3c: 56:0e:a1:cd:03:65:dc:ee:de:f4:52:1a:17:b9:c0: a9:f2:06:c0:b1:cf:3d:9f:d2:03:d3:75:75:71:5e: 14:10:68:2b:9d:98:df:ae:f9:42:fa:9e:54:95:d3: 13:84:71:3c:27:7d:15:a3:f0:02:a0:ea:2d:b0:0c: 93:84:fc:b0:70:e6:9c:d1:ce:7a:9a:2b:7b:74:58: 95:3f:0d:5d:55:1a:ec:8e:05:68:d4:7b:55:77:e8: 40:c9:8d:4a:db:79:5c:45:2b:53:90:54:bc:97:c0: 08:1d:4b:a9:4d:31:43:23:ce:71:0d:11:56:d3:43: 55:f5:66:77:ed:47:43:1d:51:62:53:7a:3b:ae:94: 2a:3d:3f:f0:7f:5b:9c:db:00:69:9a:9d:f7:9c:08: e3:34:8a:0e:30:c3:ad:81:79:17:d7:af:4a:c7:7f: d5:d5:61:82:5f:6f:32:2e:2e:9a:3a:1b:6e:88:21: 24:49:3f:cd:86:69:18:15:79:f1:9d:c5:58:b2:a6: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:6B:7D:FB:4E:3D:E0:5D:32:58:B7:6D:71:F7:81:E8:A5:C9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:a040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:cb:7f:33:b6:6e:f2:4b:3b:bb:e9:91:c8:f1:43:09:c7:22: 86:c1:81:a3:c7:d8:75:f3:55:dc:ac:41:40:3d:7a:2e:33:17: 6f:40:6f:50:a8:3d:68:e2:e6:34:a6:e1:4b:ba:1d:2f:12:9b: 5f:ee:0c:86:e4:bc:b2:a8:0a:97:83:91:17:6b:32:18:13:27: 52:34:bd:7a:e4:39:79:d9:35:30:f3:60:f7:28:f1:53:bc:44: ad:bf:50:e9:44:5d:34:ea:5f:d9:0e:9f:e0:57:03:54:8e:33: d8:46:d4:b7:24:d9:9d:8e:90:ef:05:eb:03:7d:e0:d3:e6:bf: 15:8d:74:ff:a8:1d:07:64:5c:46:f7:e4:29:ba:63:38:7c:52: 5a:ad:db:43:46:2b:d1:6b:67:4b:3d:e9:63:38:6e:0b:4b:c5: 58:93:18:08:2f:26:3c:ff:8c:ea:95:fb:34:1a:94:1b:67:2a: 21:ee:04:82:60:bf:c7:b8:fb:f4:f5:79:ba:11:85:f9:c6:7c: 10:e4:64:46:c9:5e:17:c4:b9:1d:d2:ce:ad:2d:8f:17:a0:41: d3:37:20:25:a2:5e:06:ee:f2:31:3a:62:88:42:cf:47:18:e1: 38:13:7a:d0:4f:a6:5d:74:38:4c:f4:ee:45:d7:af:f3:f1:fd: a8:ac:bd:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE83TRbkrY7Ii5EL9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk Yjk1YzlmMmMtNTUyNi00ZjUwLWIyMDMtYTMxZGU3NzQ4OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF3WMtEjBdKrcZbRR2GSQio2h6uyG6B8BucA LgiYCEfb8UMYhacgbG9ud1SHormEufp5fpNNhK0bADxWDqHNA2Xc7t70UhoXucCp 8gbAsc89n9ID03V1cV4UEGgrnZjfrvlC+p5UldMThHE8J30Vo/ACoOotsAyThPyw cOac0c56mit7dFiVPw1dVRrsjgVo1HtVd+hAyY1K23lcRStTkFS8l8AIHUupTTFD I85xDRFW00NV9WZ37UdDHVFiU3o7rpQqPT/wf1uc2wBpmp33nAjjNIoOMMOtgXkX 169Kx3/V1WGCX28yLi6aOhtuiCEkST/NhmkYFXnxncVYsqbzlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHxda337Tj3gXTJYt21x94Hopck1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDVhZmVjZGEtZmFlOC0z MWYyLWIyN2ItOGM3YjY2YjRmODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCKBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKPLfzO2bvJLO7vpkcjxQwnHIobBgaPH2HXzVdysQUA9ei4zF29A b1CoPWji5jSm4Uu6HS8Sm1/uDIbkvLKoCpeDkRdrMhgTJ1I0vXrkOXnZNTDzYPco 8VO8RK2/UOlEXTTqX9kOn+BXA1SOM9hG1Lck2Z2OkO8F6wN94NPmvxWNdP+oHQdk XEb35Cm6Yzh8Ulqt20NGK9FrZ0s96WM4bgtLxViTGAgvJjz/jOqV+zQalBtnKiHu BIJgv8e4+/T1eboRhfnGfBDkZEbJXhfEuR3Szq0tjxegQdM3ICWiXgbu8jE6YohC z0cY4TgTetBPpl10OEz07kXXr/Px/aisveQ= -----END CERTIFICATE-----Generated at Sat Oct 10 10:33:10 2026 by rpki-client