$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3272544-ec1f-3fd0-b036-955bbc8b8e80.roa File: a3272544-ec1f-3fd0-b036-955bbc8b8e80.roa (raw, json) Hash identifier: hXEfUw/hdT4RC4tCjqn3bALTm8lQIzmDes55DfePguw= Subject key identifier: A5:86:40:00:56:39:8F:45:B1:4D:A3:11:9C:81:A3:60:D6:42:C0:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F07CD39856FE73B7A0C3ECE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3272544-ec1f-3fd0-b036-955bbc8b8e80.roa Signing time: Tue 01 Sep 2026 12:39:37 +0000 ROA not before: Tue 01 Sep 2026 12:39:37 +0000 ROA not after: Mon 30 Nov 2026 13:39:37 +0000 asID: 20940 IP address blocks: 2600:1409:801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:cd:39:85:6f:e7:3b:7a:0c:3e:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 12:39:37 2026 GMT Not After : Nov 30 13:39:37 2026 GMT Subject: CN=1dfa3dbb-3d09-4d5f-aeb9-be3579bf06f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:47:fe:52:a5:b2:3b:16:d4:b2:5a:1c:0b: 1e:af:a7:e9:d5:15:6e:fb:61:29:66:79:99:c8:ce: 37:4c:d2:a9:bc:2b:27:1a:63:b9:54:17:90:7e:6c: 29:e7:3f:bd:b0:b6:55:2c:07:21:3c:b8:72:49:35: 60:f3:a9:4b:f4:0f:1d:c9:8b:a0:98:1d:e9:63:a5: 5c:0e:47:ce:ae:8b:2b:dc:6c:bd:f5:97:51:c4:5e: 63:19:d3:9a:44:ae:e3:2e:85:b4:85:d7:6b:d6:0a: f5:94:0f:b0:5b:0f:85:50:c9:08:fb:f7:c9:e9:c0: fd:0e:e4:5e:d9:a1:03:19:6a:fa:fb:52:39:d9:aa: 80:70:13:ea:ba:23:57:81:e8:4c:bc:40:50:b2:41: c7:0c:b8:df:64:8b:db:00:56:68:3b:c6:8a:c3:c9: 18:3c:68:d4:b6:70:cd:06:0a:26:c1:f4:d2:7f:20: 6c:4e:84:cb:06:f9:bb:60:33:25:9e:63:50:54:fc: ea:73:1a:44:a8:be:83:73:59:39:e6:1e:12:4e:88: 4f:37:50:43:48:0a:2b:58:e5:a9:d3:91:09:6c:d7: e0:18:c1:66:dd:f3:2a:65:6c:f3:f4:6b:5f:25:e0: eb:9b:34:a3:51:8e:58:6a:b0:ce:a6:14:15:00:b1: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:40:00:56:39:8F:45:B1:4D:A3:11:9C:81:A3:60:D6:42:C0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3272544-ec1f-3fd0-b036-955bbc8b8e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:801::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f8:76:f0:aa:4a:a1:15:85:5a:68:97:4a:06:cc:47:7d:a8: 80:0f:09:d2:04:36:8f:9a:11:ce:85:43:81:6d:ea:15:d6:af: e2:be:49:48:0c:4e:8a:a4:30:00:8b:e7:06:3c:72:a2:0e:15: 2e:2f:4c:aa:d6:6f:ed:05:3d:1d:00:5c:1f:d4:3d:be:40:f2: d6:52:5e:ba:d6:5c:40:28:a2:a2:bc:4e:37:7b:fa:ea:ca:ab: b5:80:bc:14:80:7b:e3:11:ce:20:e1:93:a8:ce:0f:db:01:d6: 3e:c3:42:5d:f5:25:db:d2:58:28:44:f2:4c:f3:55:99:0c:dc: 32:93:77:40:53:3d:74:0e:b9:77:b9:2e:1e:1d:8d:6b:8f:8b: ab:25:e8:bb:ac:e9:2e:03:f3:bf:f1:6a:b1:fb:6d:1e:15:a3: 6a:d6:9b:84:23:e3:a0:c8:1d:69:e6:94:19:18:b9:66:8a:cb: 23:0b:65:7c:1c:44:c4:03:a3:3f:8a:df:7f:6d:86:18:22:25: 7d:b2:f4:2e:68:45:0e:c4:de:da:c3:48:d3:bd:97:6b:9f:4f: 50:6a:88:cb:ba:e6:c0:c6:28:11:0d:90:20:6d:f4:83:17:d3: 1a:42:16:6e:ac:58:dd:15:cd:5e:8b:b0:ff:ff:b5:f1:e2:ea: 8f:f8:cf:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8HzTmFb+c7egw+zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMTEyMzkzN1oXDTI2MTEzMDEzMzkzN1owLzEtMCsGA1UEAxMk MWRmYTNkYmItM2QwOS00ZDVmLWFlYjktYmUzNTc5YmYwNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntNH/lKlsjsW1LJaHAser6fp1RVu+2EpZnmZ yM43TNKpvCsnGmO5VBeQfmwp5z+9sLZVLAchPLhySTVg86lL9A8dyYugmB3pY6Vc DkfOrosr3Gy99ZdRxF5jGdOaRK7jLoW0hddr1gr1lA+wWw+FUMkI+/fJ6cD9DuRe 2aEDGWr6+1I52aqAcBPquiNXgehMvEBQskHHDLjfZIvbAFZoO8aKw8kYPGjUtnDN BgomwfTSfyBsToTLBvm7YDMlnmNQVPzqcxpEqL6Dc1k55h4STohPN1BDSAorWOWp 05EJbNfgGMFm3fMqZWzz9GtfJeDrmzSjUY5YarDOphQVALFTYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWGQABWOY9FsU2jEZyBo2DWQsA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTMyNzI1NDQtZWMxZi0z ZmQwLWIwMzYtOTU1YmJjOGI4ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCQgB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAP4dvCqSqEVhVpol0oGzEd9qIAPCdIENo+aEc6FQ4Ft6hXWr+K+ SUgMToqkMACL5wY8cqIOFS4vTKrWb+0FPR0AXB/UPb5A8tZSXrrWXEAooqK8Tjd7 +urKq7WAvBSAe+MRziDhk6jOD9sB1j7DQl31JdvSWChE8kzzVZkM3DKTd0BTPXQO uXe5Lh4djWuPi6sl6Lus6S4D87/xarH7bR4Vo2rWm4Qj46DIHWnmlBkYuWaKyyML ZXwcRMQDoz+K339thhgiJX2y9C5oRQ7E3trDSNO9l2ufT1BqiMu65sDGKBENkCBt 9IMX0xpCFm6sWN0VzV6LsP//tfHi6o/4zyU= -----END CERTIFICATE-----Generated at Fri Sep 4 22:58:54 2026 by rpki-client