$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: dwZaH+PBoI4bGGGeANBiHoP1YTMQWlOvzLYnwHWKPco= Subject key identifier: 71:5E:AE:DE:59:52:E1:6E:81:F4:9E:8D:72:55:C8:DD:44:2E:83:7D Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584F7A4D9B7A43988F2732724380 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9b:7a:43:98:8f:27:32:72:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d36efae6-5cd5-4107-bf42-08f5b9aa98c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:b5:65:3b:b1:e1:90:a8:f8:df:e3:5c:48: 0f:dd:9b:ae:92:44:0a:d0:e1:c1:f6:3f:80:95:79: 12:e0:78:60:7d:98:c6:ed:97:f9:34:2b:00:0c:f0: 3b:73:e3:52:e6:a0:10:47:64:46:31:6a:ae:9a:c7: 37:c3:a0:45:d7:07:56:d5:f6:6f:68:f4:cd:74:d9: 61:b5:31:74:a8:fb:b5:dc:b9:10:30:90:72:5b:0b: 09:32:cf:44:4b:c1:fc:87:c8:17:02:44:6f:35:6b: d6:f3:e4:a1:ca:97:74:d1:81:2f:83:52:be:48:7d: aa:dd:8f:6b:13:a7:c2:ec:a2:ef:f6:b0:a0:c7:1b: 6b:d1:a9:04:4c:7d:e9:09:1a:73:2d:eb:3d:07:ff: 90:df:7e:42:20:1e:19:72:63:ac:82:ec:95:00:02: 82:b2:91:bf:d0:da:ba:ac:97:99:bf:d8:53:3d:2f: 7a:ab:ce:3a:b9:38:83:cf:0b:75:6a:44:fc:6e:dd: f1:71:40:5d:fd:a3:9b:92:d2:17:31:c6:f3:22:bd: e5:3b:1e:78:a4:a0:c9:46:02:46:b9:5f:b3:4d:e2: b0:39:4c:a7:d6:a5:f7:ed:c5:fc:2a:d2:cf:f4:d9: da:db:dd:26:fe:75:65:53:61:fa:a1:fe:fa:7c:93: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:AE:DE:59:52:E1:6E:81:F4:9E:8D:72:55:C8:DD:44:2E:83:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a7:2c:8c:e2:66:ea:3b:03:bd:de:ad:95:77:71:3d:56:fd: 22:75:4a:6f:26:87:1d:3c:99:04:c2:68:15:fb:d0:93:79:c4: 87:3d:c2:58:37:ac:9d:bb:c7:0e:43:bc:0f:10:9f:fb:f8:ca: 45:11:64:1c:39:0b:c9:16:9a:2d:91:65:10:22:cf:12:44:36: a7:68:34:b5:66:42:58:a3:56:2c:a8:c5:43:a9:0e:df:6b:46: 2f:28:52:4e:71:2b:49:65:cf:c2:57:af:93:04:c9:b6:5b:1b: 7f:5d:b2:84:df:51:d7:2a:7c:8b:ff:f3:c8:8f:8c:e5:ec:93: 28:f8:c3:46:1c:7e:f6:12:7e:27:17:6e:c7:72:4c:95:32:56: 62:f5:57:b1:e3:16:91:c8:2e:73:d0:09:a7:b6:6f:3b:b8:c7: 3e:ab:26:3b:ba:8f:03:ba:5c:f5:11:ed:00:67:b4:d8:c5:33: 0e:53:83:11:46:12:aa:3e:fe:e2:83:d8:ef:6c:6b:84:b9:e7: da:f7:f4:96:c3:66:2d:d4:7f:4d:5e:e4:b9:25:92:e9:80:6b: ce:d6:4a:dc:35:5a:ec:38:87:f3:5a:41:34:04:98:e8:6d:e4: 3f:50:23:fd:5c:47:fc:48:9a:4d:3e:d4:94:f6:b9:bc:7f:ce: 6a:e3:5d:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE96TZt6Q5iPJzJyQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDM2ZWZhZTYtNWNkNS00MTA3LWJmNDItMDhmNWI5YWE5OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHa1ZTux4ZCo+N/jXEgP3ZuukkQK0OHB9j+A lXkS4HhgfZjG7Zf5NCsADPA7c+NS5qAQR2RGMWqumsc3w6BF1wdW1fZvaPTNdNlh tTF0qPu13LkQMJByWwsJMs9ES8H8h8gXAkRvNWvW8+Shypd00YEvg1K+SH2q3Y9r E6fC7KLv9rCgxxtr0akETH3pCRpzLes9B/+Q335CIB4ZcmOsguyVAAKCspG/0Nq6 rJeZv9hTPS96q846uTiDzwt1akT8bt3xcUBd/aObktIXMcbzIr3lOx54pKDJRgJG uV+zTeKwOUyn1qX37cX8KtLP9Nna290m/nVlU2H6of76fJPUcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHFert5ZUuFugfSejXJVyN1ELoN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATpyyM4mbqOwO93q2Vd3E9Vv0idUpvJocdPJkEwmgV+9CTecSHPcJY N6ydu8cOQ7wPEJ/7+MpFEWQcOQvJFpotkWUQIs8SRDanaDS1ZkJYo1YsqMVDqQ7f a0YvKFJOcStJZc/CV6+TBMm2Wxt/XbKE31HXKnyL//PIj4zl7JMo+MNGHH72En4n F27HckyVMlZi9Vex4xaRyC5z0Amntm87uMc+qyY7uo8Dulz1Ee0AZ7TYxTMOU4MR RhKqPv7ig9jvbGuEuefa9/SWw2Yt1H9NXuS5JZLpgGvO1krcNVrsOIfzWkE0BJjo beQ/UCP9XEf8SJpNPtSU9rm8f85q4124 -----END CERTIFICATE-----Generated at Mon Oct 26 13:39:50 2026 by rpki-client