$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa File: 69592875-b7cb-3401-bb4e-78d533ad8011.roa (raw, json) Hash identifier: uj1w+dpJwQ+/YEMYdloBUt1EhfsombZXd2tUGlBCB5k= Subject key identifier: 7D:CD:D9:38:D1:45:5B:EF:33:D2:F4:AB:5B:8C:49:23:B3:2F:04:2A Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584F549DA2E85E9056273C2FC980 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 19637 IP address blocks: 2604:b040:588::/48 maxlen: 48 2604:b040:589::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a2:e8:5e:90:56:27:3c:2f:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=53409e1d-e2b2-4099-ab96-6f52437caecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:c2:52:2d:cd:c9:64:7a:57:44:2f:4f:8d: 02:77:71:2c:65:2b:04:36:21:94:3f:55:23:2e:70: 55:e2:fa:a5:06:d3:11:13:c8:9f:5a:7f:29:6d:9a: da:e1:84:50:0f:2c:f7:f3:d1:eb:4f:83:a9:8a:45: f1:16:15:b2:20:6f:71:7f:30:1d:8f:d4:d0:5e:1b: d2:04:b1:21:66:2e:cd:c4:73:9e:e8:7e:80:69:42: c8:82:2d:1a:92:cb:0c:83:6b:5b:85:6c:ba:66:59: 1e:ba:8c:cf:66:6a:67:0b:9c:41:9b:29:bc:97:c3: f2:ab:80:32:c5:cd:0a:21:dd:bf:28:af:5b:e4:1c: 0a:7c:2b:2f:00:a8:c2:15:e6:98:bb:39:db:c0:48: 9d:b2:e0:51:2b:01:50:17:cc:ec:0e:15:42:c7:67: e8:b4:b3:c2:fa:1b:ef:49:46:85:64:d0:5b:2e:5f: 21:8b:c3:cb:30:ef:00:c3:ea:fc:4c:58:3a:18:78: a0:ae:f8:30:66:9e:bc:8f:a6:ce:e2:d3:f8:59:53: 75:9e:35:90:cf:86:0c:10:48:54:e3:3b:aa:8a:0a: 68:46:6e:17:57:c3:30:51:ab:3d:eb:92:d1:aa:57: be:07:89:03:3b:fe:3e:8f:69:51:4c:60:d8:8a:5a: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:D9:38:D1:45:5B:EF:33:D2:F4:AB:5B:8C:49:23:B3:2F:04:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:588::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:da:f6:8d:d6:b8:83:6b:e2:ff:f3:37:41:9a:a3:39:9a:9b: 8f:cf:25:eb:58:7d:ab:df:8c:c6:80:1e:d2:5c:c4:14:22:0a: 9f:72:1d:76:23:65:b8:1d:6f:f7:66:b2:05:a8:dc:68:5f:86: d5:d4:ef:38:6c:c6:4c:3e:ae:14:2e:47:f8:90:31:16:fc:2b: b5:33:95:54:88:0d:8b:2a:40:29:d2:ef:9a:2d:3f:35:87:2d: 72:57:1c:00:cb:9f:6d:b9:7c:11:db:95:d1:d5:e4:a3:da:94: f8:96:05:51:b7:82:96:6c:0b:30:9d:69:f9:c8:b6:0a:7a:09: 60:6b:05:23:03:e1:06:b0:60:0a:76:68:ec:b7:08:c9:1a:0d: bc:ae:5c:b0:a9:8d:e5:58:61:19:c3:5b:8b:5f:17:02:0a:4d: 02:e1:03:20:01:93:26:ff:b5:80:f7:97:9c:fe:83:18:0a:91: 3c:ea:91:06:75:2c:0b:ff:cc:40:b3:29:57:fc:64:cc:6b:7e: 6a:dc:09:19:1a:a7:54:92:5d:3c:70:f8:3c:4b:48:06:31:8b: 7d:e9:06:ca:8d:61:e2:c4:b6:2b:2c:34:9e:61:12:a4:53:51: 9c:76:b1:0e:cb:d0:59:18:dd:ce:6b:d4:0a:c0:0a:d6:8b:96: 18:bd:45:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnaLoXpBWJzwvyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTM0MDllMWQtZTJiMi00MDk5LWFiOTYtNmY1MjQzN2NhZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnDCUi3NyWR6V0QvT40Cd3EsZSsENiGUP1Uj LnBV4vqlBtMRE8ifWn8pbZra4YRQDyz389HrT4OpikXxFhWyIG9xfzAdj9TQXhvS BLEhZi7NxHOe6H6AaULIgi0akssMg2tbhWy6ZlkeuozPZmpnC5xBmym8l8Pyq4Ay xc0KId2/KK9b5BwKfCsvAKjCFeaYuznbwEidsuBRKwFQF8zsDhVCx2fotLPC+hvv SUaFZNBbLl8hi8PLMO8Aw+r8TFg6GHigrvgwZp68j6bO4tP4WVN1njWQz4YMEEhU 4zuqigpoRm4XV8MwUas965LRqle+B4kDO/4+j2lRTGDYiloh6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH3N2TjRRVvvM9L0q1uMSSOzLwQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNjk1OTI4NzUtYjdjYi0z NDAxLWJiNGUtNzhkNTMzYWQ4MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgSwQAWI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGra9o3WuINr4v/zN0Gaozmam4/PJetYfavfjMaAHtJcxBQiCp9y HXYjZbgdb/dmsgWo3GhfhtXU7zhsxkw+rhQuR/iQMRb8K7UzlVSIDYsqQCnS75ot PzWHLXJXHADLn225fBHbldHV5KPalPiWBVG3gpZsCzCdafnItgp6CWBrBSMD4Qaw YAp2aOy3CMkaDbyuXLCpjeVYYRnDW4tfFwIKTQLhAyABkyb/tYD3l5z+gxgKkTzq kQZ1LAv/zECzKVf8ZMxrfmrcCRkap1SSXTxw+DxLSAYxi33pBsqNYeLEtissNJ5h EqRTUZx2sQ7L0FkY3c5r1ArACtaLlhi9RRs= -----END CERTIFICATE-----Generated at Sun Oct 4 21:44:39 2026 by rpki-client