$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68bb0b4-e13e-3385-87ae-902cea5c979b.roa File: f68bb0b4-e13e-3385-87ae-902cea5c979b.roa (raw, json) Hash identifier: /zn9ntS/hVmWi1st+OxoJJ2/8FrDoQrW5cheAQMtypg= Subject key identifier: 32:6D:2B:D7:A9:DF:CD:84:A8:0C:2C:4A:AC:BA:37:27:4E:16:90:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA78F86A5851BFB41DF856C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68bb0b4-e13e-3385-87ae-902cea5c979b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 2600:1408:8c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:86:a5:85:1b:fb:41:df:85:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6dfe302a-5900-4cc5-9626-6398e5ddb932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:0c:b5:bf:26:d8:be:e0:0c:7b:08:34:d3: 43:3e:6b:93:8f:f9:b3:aa:b9:b6:31:79:e4:b5:84: fd:23:f8:44:56:9c:eb:13:55:13:a0:c5:3d:4a:31: 15:8e:a7:17:c3:b0:07:b6:16:ee:0b:4c:1a:70:3b: 54:4f:da:43:48:b3:37:64:d8:21:d8:00:57:00:54: b7:9a:31:17:4f:ea:ab:19:39:20:4a:d4:40:78:ec: 12:1d:02:90:fa:3f:9b:e2:b3:ce:81:81:74:70:f0: 9b:67:7c:42:c6:c8:b3:87:20:85:3d:46:48:c1:64: 1c:dc:07:ff:9c:7c:25:6d:1e:8c:e3:2c:3f:02:d2: 18:9b:3b:e6:88:7c:b9:ef:76:42:92:d4:31:8d:0b: ac:2e:22:5d:cd:cd:b7:ba:2b:1d:80:6d:00:47:83: c4:91:60:b5:54:ac:90:83:43:17:4e:58:27:23:52: 12:36:50:87:63:cd:6b:a7:dc:52:74:b7:e7:a4:21: 5e:a4:78:41:48:1d:6b:73:e8:5b:bd:ce:ce:92:9b: 42:9e:2d:9f:a0:76:01:79:49:c5:cd:c3:ec:6e:e4: f0:c7:70:35:f3:71:48:ac:07:aa:9c:58:af:36:82: df:4c:53:54:b8:ba:6f:13:6f:d8:db:92:fe:84:de: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:2B:D7:A9:DF:CD:84:A8:0C:2C:4A:AC:BA:37:27:4E:16:90:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68bb0b4-e13e-3385-87ae-902cea5c979b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:8c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3b:9b:a0:dd:d3:23:82:ae:6d:96:bd:09:21:55:3a:24:c2: 25:bb:98:23:af:d8:81:e5:fc:00:e6:5a:23:66:ec:36:7b:10: ba:6a:32:b5:84:15:59:90:af:34:26:fd:53:77:ce:ef:94:e4: 6c:33:c2:58:2b:ba:c8:b8:3c:16:18:11:fa:5e:06:58:14:46: 21:cf:13:cd:50:67:bc:d8:46:b8:22:0a:d5:2f:2c:30:f9:6e: a4:d1:a6:88:79:20:ab:0f:4c:0a:09:f1:ca:0d:7a:90:e0:21: 3f:1b:2d:d7:9a:c3:76:01:23:a6:ea:87:c7:b1:bb:d4:d3:7f: 1a:9c:e1:35:0b:1e:45:12:8f:98:b0:79:42:22:7b:2a:21:6f: 4f:07:e7:59:d0:4d:af:09:c9:d6:29:58:51:1e:9b:0e:b6:44: 65:07:85:70:84:de:b7:6a:4f:46:dd:11:34:3f:c3:fd:26:63: 79:b7:b2:ca:55:36:f6:b7:27:41:97:17:f1:e1:63:87:1d:1b: 9c:cd:75:09:17:cc:ff:34:5b:3a:d4:d2:a1:95:58:f5:7a:aa: 22:d1:74:73:a9:8a:3e:e6:9f:3a:b5:7a:ea:bc:4e:d6:a0:91: e9:40:2d:33:3b:2e:9d:42:79:43:0b:e4:28:e6:40:e7:78:32: b8:08:03:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nj4alhRv7Qd+FbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmRmZTMwMmEtNTkwMC00Y2M1LTk2MjYtNjM5OGU1ZGRiOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwoMtb8m2L7gDHsINNNDPmuTj/mzqrm2MXnk tYT9I/hEVpzrE1UToMU9SjEVjqcXw7AHthbuC0wacDtUT9pDSLM3ZNgh2ABXAFS3 mjEXT+qrGTkgStRAeOwSHQKQ+j+b4rPOgYF0cPCbZ3xCxsizhyCFPUZIwWQc3Af/ nHwlbR6M4yw/AtIYmzvmiHy573ZCktQxjQusLiJdzc23uisdgG0AR4PEkWC1VKyQ g0MXTlgnI1ISNlCHY81rp9xSdLfnpCFepHhBSB1rc+hbvc7OkptCni2foHYBeUnF zcPsbuTwx3A183FIrAeqnFivNoLfTFNUuLpvE2/Y25L+hN4ECwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJtK9ep382EqAwsSqy6NydOFpDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjY4YmIwYjQtZTEzZS0z Mzg1LTg3YWUtOTAyY2VhNWM5NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCIwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGg7m6Dd0yOCrm2WvQkhVTokwiW7mCOv2IHl/ADmWiNm7DZ7ELpq MrWEFVmQrzQm/VN3zu+U5Gwzwlgrusi4PBYYEfpeBlgURiHPE81QZ7zYRrgiCtUv LDD5bqTRpoh5IKsPTAoJ8coNepDgIT8bLdeaw3YBI6bqh8exu9TTfxqc4TULHkUS j5iweUIieyohb08H51nQTa8JydYpWFEemw62RGUHhXCE3rdqT0bdETQ/w/0mY3m3 sspVNva3J0GXF/HhY4cdG5zNdQkXzP80WzrU0qGVWPV6qiLRdHOpij7mnzq1euq8 TtagkelALTM7Lp1CeUML5CjmQOd4MrgIA+g= -----END CERTIFICATE-----Generated at Fri Sep 4 22:42:57 2026 by rpki-client