$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa File: 24c4e859-4b85-3967-8008-1ed01a3eea1b.roa (raw, json) Hash identifier: ShQhR8+fQUEiqqwbEv6II04WlKt7vF7hLUhmOZXSJbg= Subject key identifier: D6:F9:4A:3B:BE:63:8D:EB:E4:E7:31:DB:0E:2F:71:EA:0A:76:F0:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79D21E07652FDD05A86D800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 2600:1417:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:21:e0:76:52:fd:d0:5a:86:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1fc19bad-577f-4d2b-9c7d-8c7b2770ebb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:bc:ce:5d:64:ca:2e:4f:1d:46:90:62:21: 7b:a2:74:77:d0:02:8d:d8:46:63:ed:91:59:37:56: 1c:1f:99:7c:b7:4d:c3:45:89:9d:64:71:d9:a0:e9: aa:64:79:b6:c1:fb:ef:21:0a:a1:43:ed:41:f6:d4: fe:9c:ad:21:a1:2b:c5:b9:ff:98:b7:c6:74:62:69: 95:c3:cb:2f:c6:db:9c:e9:71:30:0a:33:54:b1:ee: e6:6d:33:ba:3b:d8:c2:d1:c0:ba:91:79:b6:4a:ea: ad:36:53:af:16:aa:01:e3:17:d6:0f:da:e8:4f:69: 8f:f3:9a:c1:05:43:99:7c:ef:68:3d:cf:28:8a:51: 50:9b:19:59:04:ee:de:48:fb:07:39:5f:6e:99:a7: c7:c4:03:7e:5c:81:1e:8d:18:cb:ac:0b:37:f0:22: 16:f1:1a:24:32:c5:9c:ca:94:c0:5f:7a:36:70:59: 9b:79:59:b3:13:41:63:bf:c1:d4:a2:dd:fb:72:43: 5d:4e:61:28:01:f1:50:4b:d1:55:4d:91:0b:54:4a: d1:79:f6:70:72:c8:3a:36:83:da:c7:3c:50:68:56: 76:6e:96:7b:cb:25:b3:96:d3:95:ea:a1:6d:59:eb: 18:ae:d2:87:92:29:5b:5c:ab:09:da:24:0c:05:71: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F9:4A:3B:BE:63:8D:EB:E4:E7:31:DB:0E:2F:71:EA:0A:76:F0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d7:50:38:69:26:1c:c0:77:bd:c6:3a:d9:f9:4e:28:d1:20: 1c:12:d1:36:de:72:db:30:71:57:48:77:64:62:32:fa:ca:60: ab:43:7f:3f:eb:c5:9a:ec:b2:04:7e:15:d2:94:62:15:28:d3: e5:57:91:7c:43:eb:d6:9e:f6:38:20:ce:e2:6e:26:3a:83:5f: 09:81:0a:8f:db:18:83:db:1a:07:1f:27:7d:6e:50:6f:34:7c: d0:43:41:b9:98:77:63:7a:3a:3f:98:d8:3c:62:04:16:2e:31: d1:f6:d7:4e:45:c9:65:a6:06:89:d3:dd:5f:a7:59:b2:26:e9: 02:24:f7:0e:f6:7b:56:7b:f1:1c:4a:34:ff:f4:cb:5f:f6:4a: b6:d6:70:4a:cb:7a:08:5f:8f:6f:e6:45:34:c2:a1:7d:7a:40: 3c:ba:3c:51:fa:3a:c9:04:e6:2c:b3:8e:fc:5f:e6:4e:a1:70: 9d:d9:1d:5b:fd:9d:d8:7c:56:06:ed:5f:c6:ae:4b:67:fd:cd: 84:79:c1:19:59:e6:73:b1:27:5c:28:11:66:06:4d:e3:bd:bc: cd:07:d7:2f:da:d5:fa:83:1a:4b:88:b3:92:c5:bf:1b:22:56: 38:a7:28:1d:26:73:9f:e8:7d:1d:18:1e:8e:f2:54:fc:c3:ff: df:9e:35:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnSHgdlL90FqG2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWZjMTliYWQtNTc3Zi00ZDJiLTljN2QtOGM3YjI3NzBlYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+K8zl1kyi5PHUaQYiF7onR30AKN2EZj7ZFZ N1YcH5l8t03DRYmdZHHZoOmqZHm2wfvvIQqhQ+1B9tT+nK0hoSvFuf+Yt8Z0YmmV w8svxtuc6XEwCjNUse7mbTO6O9jC0cC6kXm2SuqtNlOvFqoB4xfWD9roT2mP85rB BUOZfO9oPc8oilFQmxlZBO7eSPsHOV9umafHxAN+XIEejRjLrAs38CIW8RokMsWc ypTAX3o2cFmbeVmzE0Fjv8HUot37ckNdTmEoAfFQS9FVTZELVErRefZwcsg6NoPa xzxQaFZ2bpZ7yyWzltOV6qFtWesYrtKHkilbXKsJ2iQMBXGk1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNb5Sju+Y43r5Ocx2w4vceoKdvBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRjNGU4NTktNGI4NS0z OTY3LTgwMDgtMWVkMDFhM2VlYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF3AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAbXUDhpJhzAd73GOtn5TijRIBwS0TbectswcVdId2RiMvrKYKtD fz/rxZrssgR+FdKUYhUo0+VXkXxD69ae9jggzuJuJjqDXwmBCo/bGIPbGgcfJ31u UG80fNBDQbmYd2N6Oj+Y2DxiBBYuMdH2105FyWWmBonT3V+nWbIm6QIk9w72e1Z7 8RxKNP/0y1/2SrbWcErLeghfj2/mRTTCoX16QDy6PFH6OskE5iyzjvxf5k6hcJ3Z HVv9ndh8VgbtX8auS2f9zYR5wRlZ5nOxJ1woEWYGTeO9vM0H1y/a1fqDGkuIs5LF vxsiVjinKB0mc5/ofR0YHo7yVPzD/9+eNRA= -----END CERTIFICATE-----Generated at Sat Sep 5 03:27:38 2026 by rpki-client