$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/05d84059-086f-320d-bb4d-c02035657b71.roa File: 05d84059-086f-320d-bb4d-c02035657b71.roa (raw, json) Hash identifier: vM1NMJlmP7qnJPfTT8sK8nIqg9RxAeJebHk6S/gfhY8= Subject key identifier: AA:19:24:18:43:D1:B0:D2:22:DD:2A:E2:C1:AC:76:7F:CF:E2:8B:3A Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451FF1B1148B9CC62DCD80 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/05d84059-086f-320d-bb4d-c02035657b71.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 2604:cc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:f1:b1:14:8b:9c:c6:2d:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=95ea6a30-fc2e-4341-b158-61067e978bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:87:a9:06:38:d6:88:da:00:18:04:6d:5f: 15:c2:31:e3:6c:d1:57:21:44:7a:10:1f:2c:15:91: 3b:34:b9:1b:f2:83:30:81:f2:b8:8a:2b:08:f3:ce: f3:e5:fe:da:b0:6b:c7:ef:91:3d:1f:82:4a:fb:ab: db:e3:ab:49:cd:04:23:48:2e:a5:13:05:6a:b2:a0: 51:6b:e1:e3:d4:92:a0:32:d0:be:8f:04:a9:ee:b1: 94:42:b4:34:16:80:57:66:2c:ab:da:d0:c1:f7:68: 23:85:d7:ff:c6:f1:d9:28:c5:4a:28:52:1b:8a:e2: 0e:2c:53:31:f3:5b:64:92:ef:05:ee:93:cd:62:42: 13:4e:40:87:52:38:0b:b0:9e:f2:50:38:d1:cf:4f: 28:f8:11:ce:ea:37:42:87:66:74:60:7c:70:ce:85: b0:9b:4c:0f:ee:81:53:72:ff:0d:83:1b:7e:2a:f6: fc:e9:6f:75:a4:d0:c8:68:9b:9d:23:c6:f8:d3:cb: e6:17:19:b5:ae:86:05:48:a2:27:e2:1e:6a:f3:d5: d5:f0:32:83:8c:e7:43:8f:64:e0:12:f4:a9:b7:4f: 08:41:40:38:88:40:94:c6:df:42:74:26:38:ac:a8: 67:8b:d7:ab:ff:2f:5a:fe:e5:b0:f5:7c:08:84:20: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:19:24:18:43:D1:B0:D2:22:DD:2A:E2:C1:AC:76:7F:CF:E2:8B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/05d84059-086f-320d-bb4d-c02035657b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv6: 2604:cc00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e6:9d:79:c4:99:4d:32:00:86:ca:b4:ce:da:97:41:00:d8: fb:e1:5e:98:61:c8:69:13:da:13:26:8d:15:29:76:53:d2:0d: 1b:75:f2:ef:c8:8e:c8:f1:37:65:d6:aa:d6:d2:ba:f8:8c:43: 7a:d6:f2:23:ca:28:6f:3d:f6:f7:a3:98:86:91:12:9e:bd:ea: ff:32:66:59:a3:c5:59:7d:90:7e:60:ad:8e:23:90:19:75:53: 07:89:f9:ba:39:50:6b:11:2b:59:74:c7:dd:60:eb:0d:87:62: 9e:f5:a0:cb:7d:f0:d6:c0:ca:9c:31:4e:64:d3:e8:a8:9d:5b: 01:bd:7a:bb:f5:81:89:bb:0a:6c:1e:24:39:98:18:b9:a9:0d: c6:c6:35:89:bd:d3:5a:38:01:8a:fb:34:5b:6f:db:03:be:90: e6:ed:16:e6:e8:96:ce:b8:43:43:f1:21:03:28:f0:fe:35:a5: 0d:ac:4c:56:a8:e9:24:3b:09:cf:f1:62:61:0f:9c:aa:49:c9: 99:41:a5:13:ac:6e:8c:bc:fd:85:69:0a:a7:a6:f6:5f:af:7a: 6b:02:7b:a7:bc:84:fd:aa:b6:31:4d:ee:b0:68:d0:08:8d:b8: d3:12:6a:25:fa:aa:85:b7:f3:de:11:35:d2:0f:78:62:33:a4: 40:db:ce:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8bRR/xsRSLnMYtzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk OTVlYTZhMzAtZmMyZS00MzQxLWIxNTgtNjEwNjdlOTc4YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5WHqQY41ojaABgEbV8VwjHjbNFXIUR6EB8s FZE7NLkb8oMwgfK4iisI887z5f7asGvH75E9H4JK+6vb46tJzQQjSC6lEwVqsqBR a+Hj1JKgMtC+jwSp7rGUQrQ0FoBXZiyr2tDB92gjhdf/xvHZKMVKKFIbiuIOLFMx 81tkku8F7pPNYkITTkCHUjgLsJ7yUDjRz08o+BHO6jdCh2Z0YHxwzoWwm0wP7oFT cv8Ngxt+Kvb86W91pNDIaJudI8b408vmFxm1roYFSKIn4h5q89XV8DKDjOdDj2Tg EvSpt08IQUA4iECUxt9CdCY4rKhni9er/y9a/uWw9XwIhCBPowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKoZJBhD0bDSIt0q4sGsdn/P4os6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvMDVkODQwNTktMDg2Zi0z MjBkLWJiNGQtYzAyMDM1NjU3YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCA5p15xJlNMgCGyrTO2pdBANj74V6YYchpE9oTJo0VKXZT0g0bdfLv yI7I8Tdl1qrW0rr4jEN61vIjyihvPfb3o5iGkRKever/MmZZo8VZfZB+YK2OI5AZ dVMHifm6OVBrEStZdMfdYOsNh2Ke9aDLffDWwMqcMU5k0+ionVsBvXq79YGJuwps HiQ5mBi5qQ3GxjWJvdNaOAGK+zRbb9sDvpDm7Rbm6JbOuEND8SEDKPD+NaUNrExW qOkkOwnP8WJhD5yqScmZQaUTrG6MvP2FaQqnpvZfr3prAnunvIT9qrYxTe6waNAI jbjTEmol+qqFt/PeETXSD3hiM6RA2867 -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:25 2026 by rpki-client