$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa File: cf0943de-32a2-326f-b6d1-1263e56b6598.roa (raw, json) Hash identifier: gDl/0HsqmdfugLF6VAVp46R0h7Zwx2dbgZHTWJ8dNh8= Subject key identifier: 21:6A:BB:BE:E5:C7:1B:B1:F3:AB:24:3E:D9:64:AE:91:A5:87:86:AA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F498AE9B11A08D318D5189E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 2600:1003:a010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e9:b1:1a:08:d3:18:d5:18:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=725d0902-66ad-4719-8e6d-ef726fb0d384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:bc:4b:69:64:3f:f3:29:de:80:89:b8:a6: c0:3d:b4:a4:59:b0:8f:9f:23:d3:36:90:fb:01:0b: 94:90:5f:3b:ac:1d:18:e6:b8:0a:e3:f6:b7:1a:13: eb:a6:08:23:cd:15:69:bb:0b:a7:05:20:46:f4:31: 92:ac:3e:85:7a:b8:dd:9c:98:5c:63:31:cd:32:34: 54:92:6f:41:f0:fe:8d:2d:c2:09:85:87:f2:a8:ae: 44:4e:79:b0:1b:09:16:9c:85:cd:ac:34:e9:d2:e9: c1:6e:97:37:7e:de:17:73:b4:79:71:55:59:d7:20: e1:ac:db:f0:36:17:62:72:11:60:c4:18:6e:37:67: c6:27:5c:01:b5:37:85:1e:fd:02:7f:84:ae:c2:bd: da:ad:d0:9e:ce:03:b5:0d:15:03:88:77:61:2a:71: cd:c5:36:d6:87:31:55:df:a5:58:e0:ab:97:7f:2a: 47:f0:b7:44:07:68:a6:b7:85:f9:36:60:bc:be:40: 72:19:02:68:61:49:70:ea:bf:47:06:81:11:b3:26: dc:7b:c6:46:49:f5:fc:20:b6:84:f3:cd:9b:b4:ea: b6:66:08:9c:07:16:8f:f3:86:10:ee:de:78:ae:32: 3d:cf:00:d5:fd:81:3c:07:7b:d5:9c:5d:af:73:31: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6A:BB:BE:E5:C7:1B:B1:F3:AB:24:3E:D9:64:AE:91:A5:87:86:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:a010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d9:2a:8c:a4:43:15:c5:1a:e6:5d:a8:9f:9d:a9:7e:c1:c8: 77:b9:7b:28:ee:cb:bb:83:75:6d:76:31:e8:2f:98:27:1d:b7: ae:72:4d:6f:3d:59:d0:7c:5e:a4:41:3e:20:db:a5:fe:ef:a0: a0:ca:86:95:84:1b:b7:af:1b:f0:40:2f:18:08:e0:88:03:fb: 58:02:18:e2:f4:06:31:93:9d:e0:4f:a9:d1:2c:0f:b6:8a:ee: 09:e3:9b:be:9f:35:f4:85:df:5b:44:b1:6e:16:01:89:a4:17: dc:1b:59:46:51:a7:d7:45:05:32:fb:0b:46:95:5e:49:a5:04: 9f:5b:96:47:13:95:a2:80:f0:c5:64:cf:6c:c1:56:4f:ec:2e: 8e:d1:db:b1:6d:41:7c:b9:e4:2d:8c:a0:67:68:77:7f:c9:25: 3e:9c:f0:00:84:3f:34:9a:c6:94:6e:24:25:77:35:13:e1:24: a6:f4:42:eb:ea:cf:14:47:9e:0d:a2:f6:40:b2:0d:42:b6:20: e1:50:66:9f:9e:58:49:42:d0:1b:6e:8a:eb:85:95:a3:ad:7e: 5c:f0:41:38:d4:41:0a:a8:b5:c2:27:d5:d1:34:47:59:eb:23: e1:28:29:09:61:c5:59:9f:46:ee:76:10:b3:3c:2d:09:84:17: 89:0d:b0:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiumxGgjTGNUYnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzI1ZDA5MDItNjZhZC00NzE5LThlNmQtZWY3MjZmYjBkMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubG8S2lkP/Mp3oCJuKbAPbSkWbCPnyPTNpD7 AQuUkF87rB0Y5rgK4/a3GhPrpggjzRVpuwunBSBG9DGSrD6FerjdnJhcYzHNMjRU km9B8P6NLcIJhYfyqK5ETnmwGwkWnIXNrDTp0unBbpc3ft4Xc7R5cVVZ1yDhrNvw NhdichFgxBhuN2fGJ1wBtTeFHv0Cf4Suwr3ardCezgO1DRUDiHdhKnHNxTbWhzFV 36VY4KuXfypH8LdEB2imt4X5NmC8vkByGQJoYUlw6r9HBoERsybce8ZGSfX8ILaE 882btOq2ZgicBxaP84YQ7t54rjI9zwDV/YE8B3vVnF2vczH7twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFqu77lxxux86skPtlkrpGlh4aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YwOTQzZGUtMzJhMi0z MjZmLWI2ZDEtMTI2M2U1NmI2NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA6AQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPZKoykQxXFGuZdqJ+dqX7ByHe5eyjuy7uDdW12MegvmCcdt65y TW89WdB8XqRBPiDbpf7voKDKhpWEG7evG/BALxgI4IgD+1gCGOL0BjGTneBPqdEs D7aK7gnjm76fNfSF31tEsW4WAYmkF9wbWUZRp9dFBTL7C0aVXkmlBJ9blkcTlaKA 8MVkz2zBVk/sLo7R27FtQXy55C2MoGdod3/JJT6c8ACEPzSaxpRuJCV3NRPhJKb0 QuvqzxRHng2i9kCyDUK2IOFQZp+eWElC0BtuiuuFlaOtflzwQTjUQQqotcIn1dE0 R1nrI+EoKQlhxVmfRu52ELM8LQmEF4kNsMQ= -----END CERTIFICATE-----Generated at Sat Sep 26 04:56:13 2026 by rpki-client