$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19de8aff-e3ac-3968-837d-efca36301c43.roa File: 19de8aff-e3ac-3968-837d-efca36301c43.roa (raw, json) Hash identifier: ncw+Bp5kwDTZN79+nSuwvTVXDMZViS87LszGp1Gl7bY= Subject key identifier: 23:23:69:46:32:2A:A2:35:D7:C6:E6:D8:5F:C1:BE:E4:62:D3:47:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EEA8789285FF4572277FB3480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19de8aff-e3ac-3968-837d-efca36301c43.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 2600:1408:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:89:28:5f:f4:57:22:77:fb:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=29f4fa44-8950-4132-8be5-b0655efdd1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:97:fc:5a:39:4a:1f:72:0c:42:fe:5c:e9: 95:b3:95:47:56:22:8b:d0:63:52:3a:9b:b7:f0:6d: 45:4b:3f:2d:e3:c6:60:cd:44:ee:70:1d:f0:dc:2b: e8:78:1b:91:00:d8:92:21:27:6b:69:4c:1c:67:65: 6b:d7:9d:74:b1:d0:f6:7e:d3:53:ce:4a:6a:b1:49: 73:c1:15:3c:1b:eb:98:85:1e:39:a3:e2:0b:0a:db: 20:26:bd:e9:eb:aa:13:a8:4d:98:98:1b:d0:ab:d9: 9b:e9:d3:91:1c:f4:ba:d9:c9:b6:87:c4:55:aa:24: ea:8a:19:2d:c4:4b:39:05:89:18:f9:48:69:90:5e: 0f:99:8b:93:ea:d7:75:5c:d9:84:59:50:22:b5:76: ae:ef:de:11:e3:d4:37:0e:ef:2a:63:9f:b1:3a:59: 2b:12:c8:75:5c:8c:4a:a3:32:e7:f5:6a:ce:91:31: fc:3f:4f:31:91:a9:a0:49:f4:85:07:60:e6:a0:90: 71:8c:6c:12:19:85:63:c9:9a:1d:a8:5d:d1:22:f8: 3b:86:8f:76:50:41:2a:54:75:0f:50:24:a2:8b:61: ef:06:74:61:1e:64:15:5f:55:da:51:8d:56:6e:67: 32:b5:ee:71:ba:9d:6e:2f:68:65:78:56:17:ad:4c: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:69:46:32:2A:A2:35:D7:C6:E6:D8:5F:C1:BE:E4:62:D3:47:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19de8aff-e3ac-3968-837d-efca36301c43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:83:8c:84:34:76:8a:9d:2c:7a:cb:16:0f:c7:21:05:79:49: a6:13:28:1f:98:47:0e:aa:18:91:8a:04:ce:13:d1:8b:8d:a2: 70:95:21:9b:d3:ea:6a:fa:27:49:4d:9b:5b:49:e3:9e:5e:72: 00:11:05:da:25:84:ed:24:02:82:5c:51:ea:f0:f5:37:e6:c7: af:57:ae:de:0a:40:9b:19:26:bf:d9:2e:83:ab:a4:dc:88:a8: 66:0c:03:82:92:3f:96:3b:85:b1:44:03:34:22:00:0c:ef:51: d8:8d:3e:62:33:0a:80:9e:7a:ac:aa:95:bd:8e:48:f2:23:92: db:f7:0d:e9:e9:17:ed:d2:a2:8c:b2:a5:45:c4:f6:ce:05:4d: 98:e8:8a:86:81:2f:de:e6:8c:48:22:d3:03:02:07:5d:75:dd: 86:ae:fe:c7:32:48:8f:2b:2e:da:03:f1:6f:b9:10:77:0a:78: 35:db:10:0e:2f:1c:95:99:73:79:eb:37:ae:6a:f8:8e:b7:65: 63:ce:3d:71:bb:b7:7b:5b:5b:d5:5b:d8:f4:05:1b:36:14:90: e8:48:29:9f:45:8e:a3:76:d0:4f:f1:8d:5a:9e:c0:28:bf:fd: 58:4a:c0:73:6f:e4:73:2f:09:62:01:be:da:45:c0:dd:31:1e: 5d:92:e0:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7qh4koX/RXInf7NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjlmNGZhNDQtODk1MC00MTMyLThiZTUtYjA2NTVlZmRkMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukCX/Fo5Sh9yDEL+XOmVs5VHViKL0GNSOpu3 8G1FSz8t48ZgzUTucB3w3CvoeBuRANiSISdraUwcZ2Vr1510sdD2ftNTzkpqsUlz wRU8G+uYhR45o+ILCtsgJr3p66oTqE2YmBvQq9mb6dORHPS62cm2h8RVqiTqihkt xEs5BYkY+UhpkF4PmYuT6td1XNmEWVAitXau794R49Q3Du8qY5+xOlkrEsh1XIxK ozLn9WrOkTH8P08xkamgSfSFB2DmoJBxjGwSGYVjyZodqF3RIvg7ho92UEEqVHUP UCSii2HvBnRhHmQVX1XaUY1Wbmcyte5xup1uL2hleFYXrUxQ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMjaUYyKqI118bm2F/BvuRi00cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTlkZThhZmYtZTNhYy0z OTY4LTgzN2QtZWZjYTM2MzAxYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+DjIQ0doqdLHrLFg/HIQV5SaYTKB+YRw6qGJGKBM4T0YuNonCV IZvT6mr6J0lNm1tJ455ecgARBdolhO0kAoJcUerw9Tfmx69Xrt4KQJsZJr/ZLoOr pNyIqGYMA4KSP5Y7hbFEAzQiAAzvUdiNPmIzCoCeeqyqlb2OSPIjktv3DenpF+3S ooyypUXE9s4FTZjoioaBL97mjEgi0wMCB1113Yau/scySI8rLtoD8W+5EHcKeDXb EA4vHJWZc3nrN65q+I63ZWPOPXG7t3tbW9Vb2PQFGzYUkOhIKZ9FjqN20E/xjVqe wCi//VhKwHNv5HMvCWIBvtpFwN0xHl2S4HE= -----END CERTIFICATE-----Generated at Sat Sep 5 01:23:41 2026 by rpki-client