$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa File: 40a926e3-71a4-3557-a762-f614ca7d3600.roa (raw, json) Hash identifier: PbYV6wDiqNGQj+LmH8TwjnqlwZhus09ftAZjf6mQI/0= Subject key identifier: A2:2D:9B:DD:90:5D:4A:71:32:F2:0E:18:0C:2E:61:E2:5B:7C:02:C5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225D0368F75D73B3EAA3C180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 2600:2000:2240::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:03:68:f7:5d:73:b3:ea:a3:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=6e501887-552b-4a3f-a955-1cbcac203ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:83:93:89:8b:04:30:c7:a2:d0:99:7f:4e: 1e:8d:64:8d:a8:83:6a:c3:90:93:0d:f6:c0:e7:1d: 81:d7:ae:f2:a7:fa:e2:ef:d2:45:a9:5f:58:7f:79: 42:a0:84:e9:02:a5:8a:8c:a5:0e:c2:a8:6f:41:cb: bd:bf:39:59:6d:9e:57:48:59:22:70:27:b6:16:87: 81:7e:a9:41:86:4b:50:07:a0:a8:4e:7b:3a:d7:aa: 4c:91:b8:69:c0:90:07:9f:67:a3:81:6b:d4:b3:2c: 92:64:79:a5:e3:7f:19:2e:c5:db:57:63:7a:48:3c: 30:3c:fc:94:e0:96:a3:fc:6c:aa:f0:df:03:c3:83: a4:05:b3:80:1f:e2:5f:5f:92:8b:be:20:e4:c8:8c: 1d:ae:a7:79:d0:bc:3a:31:05:e4:a2:7e:7f:61:b6: e2:9b:0b:a3:28:7a:a2:04:e9:0e:cb:54:aa:eb:17: 52:76:ae:c8:72:63:c6:df:70:23:ed:22:4d:24:ab: fd:55:69:cd:78:49:0d:f1:1c:b4:0d:46:fa:f4:db: ce:51:f7:09:f6:a6:a4:cc:c9:4b:be:be:bc:e3:8a: 73:33:9f:b0:dc:fb:f6:ee:10:87:ff:7d:84:7d:b1: 97:5d:e4:5a:62:bc:c0:40:50:41:dd:10:02:35:f4: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:9B:DD:90:5D:4A:71:32:F2:0E:18:0C:2E:61:E2:5B:7C:02:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2240::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4a:ee:87:8a:7d:43:41:ff:05:55:9f:8a:79:6d:2b:3f:f4: d8:0b:e1:cd:ab:16:ff:97:9e:3e:b4:6d:67:72:78:9c:05:83: dc:61:ec:fd:08:f9:97:3e:84:0a:0e:ec:b9:24:8b:9f:68:a0: c4:66:59:35:a7:c1:f5:5e:a9:33:52:45:8d:a7:a6:c6:d8:83: d8:7a:01:64:bd:fa:5a:b3:31:74:2e:67:9b:a5:1f:a7:f7:76: 7a:b2:8a:04:66:e1:1e:44:a6:12:7c:1c:3a:8e:a6:bd:20:2e: 9b:c1:92:95:d5:0b:93:e0:67:2a:b5:50:d2:69:35:18:f6:0e: e1:a0:40:42:70:67:ad:b3:ca:ed:c5:fb:3c:68:80:1e:c6:7d: f6:6b:a6:ee:86:59:d2:75:3d:c0:a3:50:68:41:44:d9:2f:02: aa:ff:3b:46:da:e2:47:93:97:2b:03:fa:99:de:3b:e3:f1:bf: 61:38:a1:dc:b6:1a:7f:9e:dc:67:f7:9f:5c:0b:d2:19:63:d2: 5b:1c:d8:a3:fb:bb:9d:45:18:ae:ad:a7:7a:9c:92:7b:83:29: a5:08:21:b3:68:f4:cd:10:3c:3e:35:64:5b:96:fb:89:09:fa: 52:32:19:7c:5d:db:63:ff:8e:cf:a5:9d:10:23:db:77:7a:60: 4a:da:f7:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXQNo911zs+qjwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NmU1MDE4ODctNTUyYi00YTNmLWE5NTUtMWNiY2FjMjAzZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin+Dk4mLBDDHotCZf04ejWSNqINqw5CTDfbA 5x2B167yp/ri79JFqV9Yf3lCoITpAqWKjKUOwqhvQcu9vzlZbZ5XSFkicCe2FoeB fqlBhktQB6CoTns616pMkbhpwJAHn2ejgWvUsyySZHml438ZLsXbV2N6SDwwPPyU 4Jaj/Gyq8N8Dw4OkBbOAH+JfX5KLviDkyIwdrqd50Lw6MQXkon5/YbbimwujKHqi BOkOy1Sq6xdSdq7IcmPG33Aj7SJNJKv9VWnNeEkN8Ry0DUb69NvOUfcJ9qakzMlL vr6844pzM5+w3Pv27hCH/32EfbGXXeRaYrzAQFBB3RACNfRY/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKItm92QXUpxMvIOGAwuYeJbfALFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBhOTI2ZTMtNzFhNC0z NTU3LWE3NjItZjYxNGNhN2QzNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACJA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBK7oeKfUNB/wVVn4p5bSs/9NgL4c2rFv+Xnj60bWdyeJwFg9xh 7P0I+Zc+hAoO7Lkki59ooMRmWTWnwfVeqTNSRY2npsbYg9h6AWS9+lqzMXQuZ5ul H6f3dnqyigRm4R5EphJ8HDqOpr0gLpvBkpXVC5PgZyq1UNJpNRj2DuGgQEJwZ62z yu3F+zxogB7GffZrpu6GWdJ1PcCjUGhBRNkvAqr/O0ba4keTlysD+pneO+Pxv2E4 ody2Gn+e3Gf3n1wL0hlj0lsc2KP7u51FGK6tp3qcknuDKaUIIbNo9M0QPD41ZFuW +4kJ+lIyGXxd22P/js+lnRAj23d6YEra97c= -----END CERTIFICATE-----Generated at Sun Oct 4 22:05:19 2026 by rpki-client