$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/e923ee64-d64e-318e-89f1-78095afad348.roa File: e923ee64-d64e-318e-89f1-78095afad348.roa (raw, json) Hash identifier: cXfIp/aQQiTNuZgDZM3gvPIQAx+hpCcVL70zA3u3dYw= Subject key identifier: 32:CB:8F:7B:9E:5D:F0:D0:24:71:28:F3:5F:1A:74:6F:05:A1:02:20 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584F34826C35F1BF6803FD7080E0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/e923ee64-d64e-318e-89f1-78095afad348.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 61126 IP address blocks: 2001:4830:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6c:35:f1:bf:68:03:fd:70:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=fb26a2f9-8321-47a4-adf8-4d52ea866369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:f6:5f:97:05:7a:85:50:2e:f4:3e:40:56: ce:3a:fe:e3:96:75:a2:af:cf:88:77:e3:d5:88:20: c8:0d:5e:8e:34:ff:55:3a:ea:96:80:ef:44:68:aa: 7c:a7:f5:35:de:06:d4:73:09:d0:aa:b6:74:28:1d: 50:e3:5c:00:bd:26:a6:76:59:9f:41:4c:93:ab:c0: 6f:bf:28:37:30:f7:f6:da:3f:be:6e:23:c0:18:7d: 88:db:8a:94:f7:f7:09:cd:9f:46:16:02:fc:3c:9a: 04:33:47:7e:f7:92:39:46:64:28:b2:cc:61:41:10: 7e:c0:e7:48:40:15:51:8b:7e:f4:52:00:8f:10:7c: 82:0a:26:c5:a3:d0:51:66:67:c0:17:eb:e1:d7:6b: 83:3c:41:f5:4d:be:c4:47:d6:19:42:11:88:5c:fe: ca:5c:12:a1:ea:2e:4a:36:12:f9:5d:fc:5b:b9:3e: 32:54:92:51:72:4d:ae:7b:e1:ba:22:8c:54:91:48: 12:a3:45:98:63:5a:e0:c9:10:80:67:42:3d:21:d2: e3:6f:c8:2f:e4:aa:01:a5:1d:7f:db:ff:dc:49:b1: 38:66:89:20:28:2b:82:1d:d4:73:01:d6:3b:eb:f3: f4:83:9f:d8:c4:15:c0:14:9d:19:5f:5d:b7:37:6f: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:8F:7B:9E:5D:F0:D0:24:71:28:F3:5F:1A:74:6F:05:A1:02:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/e923ee64-d64e-318e-89f1-78095afad348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:6000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:37:f2:75:52:4e:92:c6:8f:2d:a3:86:38:c7:f4:0c:97:ef: d3:83:66:e2:d2:c2:8a:68:50:2d:f1:01:2f:f1:55:74:33:2f: d1:73:99:a3:a9:64:56:92:5c:2f:0d:9c:70:b5:33:68:ff:68: 05:77:66:d6:72:e9:23:00:5f:56:af:10:00:5e:c2:81:ea:80: ab:44:15:78:67:2a:cc:42:c3:58:ed:9e:ed:0d:f6:be:a1:7a: 42:d9:28:57:db:cf:3e:ae:3d:21:98:5e:0d:dd:fe:f3:2c:b5: 87:58:51:81:05:b5:35:06:3a:ae:fd:7e:ee:62:49:38:6c:74: 2b:e8:28:a5:49:2c:d3:49:23:54:4f:93:70:95:a2:21:8f:22: 2a:f1:c4:63:d7:6b:4e:41:90:c6:0b:1a:ad:24:ba:cd:46:68: 53:cd:7d:9d:da:db:4d:2d:7a:ed:d6:70:c2:51:d4:07:ee:73: eb:7b:21:07:0d:87:14:8a:a3:2c:28:73:e9:0b:ed:2d:9f:46: 08:cd:66:67:59:c1:d7:bb:0f:5e:9a:90:4b:4e:23:73:2f:34: f5:3f:da:37:af:3c:18:75:4a:43:0d:b9:8a:46:a4:85:2e:38: 97:fd:8d:4d:58:14:a7:00:47:97:bd:1e:40:09:84:74:98:13: d9:71:7e:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE80gmw18b9oA/1wgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmIyNmEyZjktODMyMS00N2E0LWFkZjgtNGQ1MmVhODY2MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrP2X5cFeoVQLvQ+QFbOOv7jlnWir8+Id+PV iCDIDV6ONP9VOuqWgO9EaKp8p/U13gbUcwnQqrZ0KB1Q41wAvSamdlmfQUyTq8Bv vyg3MPf22j++biPAGH2I24qU9/cJzZ9GFgL8PJoEM0d+95I5RmQossxhQRB+wOdI QBVRi370UgCPEHyCCibFo9BRZmfAF+vh12uDPEH1Tb7ER9YZQhGIXP7KXBKh6i5K NhL5XfxbuT4yVJJRck2ue+G6IoxUkUgSo0WYY1rgyRCAZ0I9IdLjb8gv5KoBpR1/ 2//cSbE4ZokgKCuCHdRzAdY76/P0g5/YxBXAFJ0ZX123N2/WcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDLLj3ueXfDQJHEo818adG8FoQIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZTkyM2VlNjQtZDY0ZS0z MThlLTg5ZjEtNzgwOTVhZmFkMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIMGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZDfydVJOksaPLaOGOMf0DJfv04Nm4tLCimhQLfEBL/FVdDMv0XOZ o6lkVpJcLw2ccLUzaP9oBXdm1nLpIwBfVq8QAF7CgeqAq0QVeGcqzELDWO2e7Q32 vqF6QtkoV9vPPq49IZheDd3+8yy1h1hRgQW1NQY6rv1+7mJJOGx0K+gopUks00kj VE+TcJWiIY8iKvHEY9drTkGQxgsarSS6zUZoU819ndrbTS167dZwwlHUB+5z63sh Bw2HFIqjLChz6QvtLZ9GCM1mZ1nB17sPXpqQS04jcy809T/aN688GHVKQw25ikak hS44l/2NTVgUpwBHl70eQAmEdJgT2XF+MA== -----END CERTIFICATE-----Generated at Tue Sep 29 13:29:42 2026 by rpki-client