$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa File: 4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa (raw, json) Hash identifier: jr/HITsgNNjjpl3evMdfqL4+HrTL8t7Am7FChLg44rQ= Subject key identifier: FB:98:86:CF:06:6F:39:EE:7D:37:87:16:99:2A:A5:C6:79:E8:2C:E6 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F4C3D43BE2831748498C2B900 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 209242 IP address blocks: 2606:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:43:be:28:31:74:84:98:c2:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a18311f4-c9e2-4a7c-a6e5-9323266c7aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:b3:e3:61:21:f5:4e:ab:6c:3e:ab:bd:77: ed:da:88:69:dd:0e:3c:81:cc:8c:e6:a2:43:ae:3e: 62:d4:98:99:7b:81:56:65:dc:86:a1:03:48:87:c6: f6:8a:20:5c:45:4b:e3:26:5a:21:6c:f0:19:4c:35: 67:3e:f0:c2:43:32:a2:d1:d4:1f:53:2f:21:db:ef: de:51:76:3d:54:24:3f:c9:16:c3:e7:3d:76:94:14: c3:0b:63:eb:86:95:33:9e:cc:6d:36:57:df:78:2c: a0:30:06:70:11:f9:32:7b:cd:51:7c:47:0c:73:2a: 71:87:33:4f:19:b5:33:31:9d:d5:90:19:7e:4e:e5: f2:2f:11:4f:b7:ae:cf:eb:d2:a5:66:6b:db:a5:56: 37:8d:54:21:dc:d4:68:43:6d:d0:36:bc:27:31:06: be:32:06:22:1b:c3:6e:34:4c:47:5d:2d:6f:74:dd: d2:6e:22:d7:02:80:33:2a:4d:8d:9a:1d:32:51:5b: e4:7e:e6:21:f3:18:bf:80:3b:0e:73:66:ed:3a:35: 76:b6:fb:0f:ec:1c:ed:31:e2:47:32:c5:d7:be:58: ad:a5:fd:96:ef:45:1b:6d:72:b0:ad:22:4a:da:42: b2:f1:ff:26:5a:14:a8:23:37:e8:53:05:27:89:e5: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:86:CF:06:6F:39:EE:7D:37:87:16:99:2A:A5:C6:79:E8:2C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv6: 2606:2c40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:33:a1:8c:43:da:31:d9:c1:54:37:c8:c5:44:23:ea:64:4b: 52:9f:4a:dc:ce:94:39:95:08:9d:b4:db:d6:fe:c5:da:9e:63: 64:17:2b:69:0d:3f:8d:0f:52:73:bc:42:75:cd:c0:c3:e4:89: df:39:64:7b:ca:8c:91:59:10:88:75:0b:bd:01:3b:c9:36:6e: 7a:b5:c9:2d:ee:80:a1:f7:b1:53:08:90:86:25:50:ab:b5:7a: 20:5c:b3:97:00:8e:46:8a:13:b5:79:23:04:de:17:39:34:9a: d3:7f:b5:5a:eb:6e:e6:09:6b:49:a2:f8:6b:8c:e0:ca:5c:4c: f9:d2:ef:6c:89:41:56:8b:4c:45:50:ce:f7:11:ee:39:a0:e9: 92:ce:b0:73:0b:3a:4c:ee:28:0b:3d:ff:b5:a2:37:27:20:1c: 5c:3c:99:3c:bd:c0:06:ef:8a:e2:61:ea:86:54:43:01:05:4b: c0:31:bd:dd:4c:72:7c:61:a2:23:2f:28:16:ef:86:31:e2:10: 8b:5d:d3:30:76:d0:17:35:57:36:4c:da:1d:e8:e1:41:c4:00: 50:08:36:21:58:74:e4:a8:cb:40:25:fd:c6:f9:8f:2b:5c:d9: 98:63:52:ce:ba:9d:e1:ea:b2:b4:df:07:54:b6:5a:c5:1c:ab: 27:61:5f:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPUO+KDF0hJjCuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTE4MzExZjQtYzllMi00YTdjLWE2ZTUtOTMyMzI2NmM3YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTiz42Eh9U6rbD6rvXft2ohp3Q48gcyM5qJD rj5i1JiZe4FWZdyGoQNIh8b2iiBcRUvjJlohbPAZTDVnPvDCQzKi0dQfUy8h2+/e UXY9VCQ/yRbD5z12lBTDC2PrhpUznsxtNlffeCygMAZwEfkye81RfEcMcypxhzNP GbUzMZ3VkBl+TuXyLxFPt67P69KlZmvbpVY3jVQh3NRoQ23QNrwnMQa+MgYiG8Nu NExHXS1vdN3SbiLXAoAzKk2Nmh0yUVvkfuYh8xi/gDsOc2btOjV2tvsP7BztMeJH MsXXvlitpf2W70UbbXKwrSJK2kKy8f8mWhSoIzfoUwUnieXg4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuYhs8GbznufTeHFpkqpcZ56CzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNGQyZjZlMmYtOGE4Yi0z ZGRhLTg0ZGItYWY2NzcyZGQzMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYsQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUzoYxD2jHZwVQ3yMVEI+pkS1KfStzOlDmVCJ2029b+xdqeY2QX K2kNP40PUnO8QnXNwMPkid85ZHvKjJFZEIh1C70BO8k2bnq1yS3ugKH3sVMIkIYl UKu1eiBcs5cAjkaKE7V5IwTeFzk0mtN/tVrrbuYJa0mi+GuM4MpcTPnS72yJQVaL TEVQzvcR7jmg6ZLOsHMLOkzuKAs9/7WiNycgHFw8mTy9wAbviuJh6oZUQwEFS8Ax vd1McnxhoiMvKBbvhjHiEItd0zB20Bc1VzZM2h3o4UHEAFAINiFYdOSoy0Al/cb5 jytc2ZhjUs66neHqsrTfB1S2WsUcqydhX6Y= -----END CERTIFICATE-----Generated at Tue Oct 6 14:58:38 2026 by rpki-client