$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa File: 9e5339b1-05b1-39f8-9ff7-1da284065796.roa (raw, json) Hash identifier: RaU449dj8hRgkE65UNpyqwqd8dQHWuCTdumiYzY+NVI= Subject key identifier: 41:A2:11:06:48:E1:E7:C5:6B:4D:8A:3E:16:55:86:7C:8A:AA:4B:2E Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584EED5244B5F75FA4678FE72D40 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3128 IP address blocks: 2606:8700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:44:b5:f7:5f:a4:67:8f:e7:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=cfb8ef75-70fd-429c-8476-3618deb494a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:73:d0:37:94:86:d6:a5:f7:11:6c:6d:f6: 71:21:e6:3f:b0:20:b7:87:04:2c:ce:50:22:6a:c7: 93:25:c9:95:64:6a:19:f8:d7:7b:1b:31:6b:33:44: 05:c9:d3:d7:b3:d4:35:ad:d3:5d:91:99:f1:5d:f0: 0e:a5:c5:0f:62:b4:7d:21:35:ff:e9:1e:e4:02:20: ec:34:48:19:49:b9:50:ae:83:ed:18:a9:ac:8d:f4: 6c:11:5a:a9:16:a0:40:2d:7d:53:30:6e:77:98:fb: 14:fa:60:b5:e0:50:5a:29:57:fd:55:41:16:38:2d: 56:e4:eb:2a:fb:0f:58:2c:ae:8d:ba:c5:59:4b:5d: 62:9d:9c:7a:87:25:4d:fb:bb:38:a0:dc:cd:2a:62: af:ed:64:f0:be:07:57:49:80:f6:bd:69:d9:8f:3a: c4:64:f6:25:80:40:ad:54:ef:2b:8b:c1:26:8b:ee: d5:7e:e0:1a:ef:3f:de:51:2f:9f:8f:d2:b4:d6:b5: e7:c6:35:32:eb:16:f0:ac:58:a3:63:5b:bc:2b:18: 2b:f1:1e:f6:9a:e3:2e:a8:fc:bd:1d:8c:da:0a:68: 80:66:3a:d4:4c:32:99:e3:4f:b7:89:66:a0:fd:12: 7d:3c:0e:d3:28:1b:f6:55:df:a5:d5:fc:7f:c4:24: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:11:06:48:E1:E7:C5:6B:4D:8A:3E:16:55:86:7C:8A:AA:4B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/9e5339b1-05b1-39f8-9ff7-1da284065796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv6: 2606:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:75:f4:22:a2:33:6d:64:e0:96:0f:dc:97:37:2c:6c:80:ca: a8:6f:17:c2:02:54:9a:40:7d:59:b5:c0:e5:b3:52:75:af:98: 99:be:8e:cf:1a:8c:9a:75:9d:42:12:91:bb:0a:8e:04:8a:5d: a8:f7:e5:09:f5:be:e8:94:08:51:ab:c7:ea:22:e0:7c:32:38: 8c:a0:ca:a6:0f:70:bc:9a:43:39:1b:1e:2f:7c:2e:54:0c:9e: 21:72:6d:2c:40:77:01:70:c0:b2:f9:5d:d8:a3:82:13:76:19: a4:b9:85:96:7d:4d:35:e6:b5:b0:6b:b5:2f:c8:73:ee:3b:54: 47:39:5d:b8:9b:cd:c9:39:e5:34:04:2a:4d:63:c0:0c:0a:7f: 20:2d:12:c3:cc:18:d9:a0:cd:f7:b4:e4:f3:74:e5:e9:f8:2e: 5d:45:f9:33:7e:25:4e:f1:63:f7:c4:74:fc:4d:ed:f8:19:e0: 0a:0a:15:3c:92:1d:1f:ad:f3:01:60:12:3f:c4:a1:c9:86:1e: 2d:18:2b:59:db:cd:58:b6:f5:a3:7a:c8:b4:60:b0:1e:c1:b4: 0a:ce:55:8f:f5:15:1d:40:77:ad:3c:14:7c:d5:ba:88:4c:ee: 76:6d:ec:0e:d8:a8:28:9b:c7:c3:94:db:75:b9:30:58:48:a2: e3:8f:fa:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7tUkS191+kZ4/nLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZiOGVmNzUtNzBmZC00MjljLTg0NzYtMzYxOGRlYjQ5NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv1z0DeUhtal9xFsbfZxIeY/sCC3hwQszlAi aseTJcmVZGoZ+Nd7GzFrM0QFydPXs9Q1rdNdkZnxXfAOpcUPYrR9ITX/6R7kAiDs NEgZSblQroPtGKmsjfRsEVqpFqBALX1TMG53mPsU+mC14FBaKVf9VUEWOC1W5Osq +w9YLK6NusVZS11inZx6hyVN+7s4oNzNKmKv7WTwvgdXSYD2vWnZjzrEZPYlgECt VO8ri8Emi+7VfuAa7z/eUS+fj9K01rXnxjUy6xbwrFijY1u8Kxgr8R72muMuqPy9 HYzaCmiAZjrUTDKZ40+3iWag/RJ9PA7TKBv2Vd+l1fx/xCRH6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEGiEQZI4efFa02KPhZVhnyKqksuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvOWU1MzM5YjEtMDViMS0z OWY4LTlmZjctMWRhMjg0MDY1Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhdfQiojNtZOCWD9yXNyxsgMqobxfCAlSaQH1ZtcDls1J1r5iZvo7P GoyadZ1CEpG7Co4Eil2o9+UJ9b7olAhRq8fqIuB8MjiMoMqmD3C8mkM5Gx4vfC5U DJ4hcm0sQHcBcMCy+V3Yo4ITdhmkuYWWfU015rWwa7UvyHPuO1RHOV24m83JOeU0 BCpNY8AMCn8gLRLDzBjZoM33tOTzdOXp+C5dRfkzfiVO8WP3xHT8Te34GeAKChU8 kh0frfMBYBI/xKHJhh4tGCtZ281YtvWjesi0YLAewbQKzlWP9RUdQHetPBR81bqI TO52bewO2Kgom8fDlNt1uTBYSKLjj/rJ -----END CERTIFICATE-----Generated at Fri Sep 25 22:59:00 2026 by rpki-client