$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5e8100-8a2e-36e7-8068-5edebd926e98.roa File: cb5e8100-8a2e-36e7-8068-5edebd926e98.roa (raw, json) Hash identifier: e8/QrhryKG4LZFVBu7ztu7+TrD5KmDnYH0qSn7JhIzU= Subject key identifier: E4:0F:B4:C2:F9:0D:C7:1E:EF:B1:60:F6:1B:B7:1F:ED:0C:49:9C:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49854B84CE3D89AEA6203340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5e8100-8a2e-36e7-8068-5edebd926e98.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2600:1900:5400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:4b:84:ce:3d:89:ae:a6:20:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cb878c7a-6f7d-4187-b813-fdb9aca4d4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:13:00:49:6c:c4:52:44:3a:15:2c:8e:78: da:1a:f2:5c:3d:82:5b:f9:cb:6c:4b:ea:39:1b:a3: 73:3f:00:8a:2c:ee:56:d5:ed:5b:4c:f0:6c:31:d7: 00:86:8d:66:d8:ce:36:24:57:83:01:99:e6:4b:ee: 15:45:e3:77:99:ab:3b:68:7f:08:0e:17:21:ed:22: f9:79:8a:a2:bb:80:73:b1:1e:41:21:51:d8:3b:39: e0:fa:4a:94:ce:cc:31:e2:ee:31:3e:d6:f2:2a:a7: e7:7e:b8:60:12:ef:44:5e:a1:1e:68:bd:2d:97:c0: 5e:f6:6b:b6:48:7c:ba:28:98:c7:57:d2:e1:cc:3d: e5:e3:80:12:83:3a:b3:d2:5e:7d:ee:69:a5:8e:44: fb:f9:36:00:2f:72:60:93:65:8b:a2:c1:86:a7:08: 4d:a7:f8:a7:ed:bb:e4:ed:d6:38:75:76:eb:15:30: 02:53:86:51:d2:8f:01:8a:4a:a0:74:ad:48:be:e6: e2:01:6f:1c:0c:5a:5e:72:a4:9b:f7:f3:81:f2:6c: 2a:d6:10:5a:04:8e:73:00:8d:11:d1:74:50:f2:78: b3:85:41:48:b7:3c:f0:10:d7:03:7a:ce:d1:8b:8a: 53:72:76:8b:8f:27:14:0a:09:85:86:f1:5b:c8:32: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:B4:C2:F9:0D:C7:1E:EF:B1:60:F6:1B:B7:1F:ED:0C:49:9C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb5e8100-8a2e-36e7-8068-5edebd926e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:5400::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e6:af:60:c3:a0:f4:64:fa:e5:8b:4c:79:25:95:c5:25:f1: 69:66:2e:be:63:19:7e:c2:19:64:4c:26:30:fd:4f:2c:4f:9d: 82:a9:e4:18:11:34:a1:01:de:88:cc:3c:be:14:4b:b1:63:d7: e2:ad:31:84:77:7b:a1:58:7d:6c:23:38:0c:32:b6:1f:17:79: 02:ab:ed:3c:b3:4c:9d:2b:df:ea:60:11:b4:79:b3:e9:91:b2: ae:cc:28:f5:15:59:ba:75:4c:17:f7:86:dd:a1:e2:90:73:66: d7:d0:d6:d3:24:b8:7f:cd:f6:89:f7:3c:00:61:f1:08:6f:24: 44:ea:0e:88:6a:26:0a:fb:9e:83:bb:33:0c:2e:e1:1a:bb:f9: 7b:ad:cd:09:89:30:30:36:92:1b:76:fd:3e:5a:34:47:94:36: 57:72:a9:59:6c:57:fd:11:30:cf:c6:53:1b:ad:8e:7e:be:42: d5:e3:f5:f6:3d:cc:bb:eb:16:ed:0f:b5:c2:5c:d9:34:41:68: 43:83:68:c9:11:bf:93:45:31:09:a7:c3:c6:48:f4:b4:5a:3a: c5:ab:81:5b:9f:48:73:5c:83:8a:cb:9a:77:62:0d:29:f2:30: d0:45:b3:d7:9c:d1:2c:f8:78:0f:5b:5b:22:df:74:0b:68:03: 4d:d0:ff:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhUuEzj2JrqYgM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2I4NzhjN2EtNmY3ZC00MTg3LWI4MTMtZmRiOWFjYTRkNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUMTAElsxFJEOhUsjnjaGvJcPYJb+ctsS+o5 G6NzPwCKLO5W1e1bTPBsMdcAho1m2M42JFeDAZnmS+4VReN3mas7aH8IDhch7SL5 eYqiu4BzsR5BIVHYOzng+kqUzswx4u4xPtbyKqfnfrhgEu9EXqEeaL0tl8Be9mu2 SHy6KJjHV9LhzD3l44ASgzqz0l597mmljkT7+TYAL3Jgk2WLosGGpwhNp/in7bvk 7dY4dXbrFTACU4ZR0o8BikqgdK1IvubiAW8cDFpecqSb9/OB8mwq1hBaBI5zAI0R 0XRQ8nizhUFItzzwENcDes7Ri4pTcnaLjycUCgmFhvFbyDIndQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQPtML5Dcce77Fg9hu3H+0MSZz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I1ZTgxMDAtOGEyZS0z NmU3LTgwNjgtNWVkZWJkOTI2ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAFQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTmr2DDoPRk+uWLTHkllcUl8WlmLr5jGX7CGWRMJjD9TyxPnYKp 5BgRNKEB3ojMPL4US7Fj1+KtMYR3e6FYfWwjOAwyth8XeQKr7TyzTJ0r3+pgEbR5 s+mRsq7MKPUVWbp1TBf3ht2h4pBzZtfQ1tMkuH/N9on3PABh8QhvJETqDohqJgr7 noO7Mwwu4Rq7+XutzQmJMDA2kht2/T5aNEeUNldyqVlsV/0RMM/GUxutjn6+QtXj 9fY9zLvrFu0PtcJc2TRBaEODaMkRv5NFMQmnw8ZI9LRaOsWrgVufSHNcg4rLmndi DSnyMNBFs9ec0Sz4eA9bWyLfdAtoA03Q/2g= -----END CERTIFICATE-----Generated at Mon Sep 28 12:01:00 2026 by rpki-client