$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa File: 0c110f2a-6337-3348-92ef-65d12df9beca.roa (raw, json) Hash identifier: gf9JWkKtynQGfYgKqcPLjIUYvf8NiaRZZDA6BRHb4tw= Subject key identifier: E3:60:EE:BC:D3:A3:EF:68:3C:C3:24:DC:11:AC:AC:5A:F4:8F:8E:0F Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584F4975E8C795EF8F12C6892080 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209242 IP address blocks: 2606:2c0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e8:c7:95:ef:8f:12:c6:89:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8807743-b7b1-4f57-b8bd-fe79d2cba0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:46:09:82:ca:6a:c4:e1:fd:59:02:a4:97: 51:14:5d:87:31:14:bf:99:6e:57:f1:d7:3d:01:6d: a4:26:12:37:fe:53:d4:52:82:1f:b0:85:e6:c8:33: 23:44:30:db:c6:75:3c:89:36:81:98:0d:23:75:7b: 7d:1e:81:a2:53:6a:30:92:99:c4:68:a2:f5:37:fe: f0:7d:63:4b:f3:dc:2d:33:7f:21:0b:80:af:20:13: 79:f1:ed:5a:17:5f:28:0f:7e:dc:1b:99:17:1c:69: 1d:c3:20:ca:67:03:ea:da:46:70:27:2e:2c:b5:b9: 13:e0:44:32:58:25:55:95:b2:6f:86:79:41:c6:16: 51:a1:a2:f9:ec:c0:b1:80:20:90:cf:7e:83:14:df: 80:8c:48:21:5d:f2:69:4d:6e:1b:99:97:59:28:98: 59:51:d2:ec:00:03:72:9b:7c:f9:7b:62:0b:a0:08: 9c:07:44:4c:b8:33:78:86:04:c2:e6:85:1c:80:c1: d7:de:50:17:35:d2:ee:71:dd:e1:5f:e0:b8:b8:ab: 13:cf:1f:cf:fa:46:82:84:42:d8:ac:06:e3:23:59: 8d:4e:15:01:83:8e:3a:c8:68:d8:39:91:e3:b2:a3: 0c:e9:30:a6:1c:99:67:2c:63:38:67:1b:ee:29:e7: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:60:EE:BC:D3:A3:EF:68:3C:C3:24:DC:11:AC:AC:5A:F4:8F:8E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/0c110f2a-6337-3348-92ef-65d12df9beca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv6: 2606:2c0:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:04:8e:47:d1:dc:d9:d5:05:39:21:03:7f:fb:64:34:c4:4c: 04:f0:ce:c1:64:7d:7e:53:73:80:dc:6d:74:b3:17:27:f2:35: 6f:27:ae:f7:b5:b4:21:a4:8c:58:6c:34:d8:f8:d1:97:e8:00: 9a:89:8c:bf:75:4f:09:2b:1b:60:d0:76:8c:37:d2:8c:a9:55: 57:67:65:e0:5a:a6:74:5c:ae:b9:dc:da:d5:7f:d6:9c:08:ab: a3:cf:4c:28:40:d2:9f:05:ae:b0:31:43:5f:1a:05:7f:48:44: 54:ad:cf:b3:39:ad:41:c0:7f:63:fc:41:71:09:9f:35:eb:ed: 04:9d:5d:55:1b:dc:fb:38:c0:5f:9d:f2:79:e1:64:30:01:c6: 94:1a:52:b9:47:8e:80:10:fd:c5:34:22:ad:3c:4e:dc:ba:fc: 11:7c:79:41:46:e6:66:69:56:24:4b:d1:f4:3b:36:e7:0d:6a: 78:f4:81:56:0a:fc:20:09:80:54:8c:de:4a:07:45:ff:1f:e4: 6b:4c:7d:42:c7:b2:2a:32:1a:c1:54:a7:da:df:c1:eb:54:f7: 9a:75:d1:93:8b:a4:f1:5a:a2:37:73:ce:34:e6:9b:7a:07:26: d0:9a:69:69:14:0a:ae:3b:d0:cd:57:28:ae:eb:78:e7:cb:8c: f7:f7:2b:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdejHle+PEsaJIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjg4MDc3NDMtYjdiMS00ZjU3LWI4YmQtZmU3OWQyY2JhMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/tGCYLKasTh/VkCpJdRFF2HMRS/mW5X8dc9 AW2kJhI3/lPUUoIfsIXmyDMjRDDbxnU8iTaBmA0jdXt9HoGiU2owkpnEaKL1N/7w fWNL89wtM38hC4CvIBN58e1aF18oD37cG5kXHGkdwyDKZwPq2kZwJy4stbkT4EQy WCVVlbJvhnlBxhZRoaL57MCxgCCQz36DFN+AjEghXfJpTW4bmZdZKJhZUdLsAANy m3z5e2ILoAicB0RMuDN4hgTC5oUcgMHX3lAXNdLucd3hX+C4uKsTzx/P+kaChELY rAbjI1mNThUBg446yGjYOZHjsqMM6TCmHJlnLGM4ZxvuKee7NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFONg7rzTo+9oPMMk3BGsrFr0j44PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMGMxMTBmMmEtNjMzNy0z MzQ4LTkyZWYtNjVkMTJkZjliZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYCwAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8EjkfR3NnVBTkhA3/7ZDTETATwzsFkfX5Tc4DcbXSzFyfyNW8n rve1tCGkjFhsNNj40ZfoAJqJjL91TwkrG2DQdow30oypVVdnZeBapnRcrrnc2tV/ 1pwIq6PPTChA0p8FrrAxQ18aBX9IRFStz7M5rUHAf2P8QXEJnzXr7QSdXVUb3Ps4 wF+d8nnhZDABxpQaUrlHjoAQ/cU0Iq08Tty6/BF8eUFG5mZpViRL0fQ7NucNanj0 gVYK/CAJgFSM3koHRf8f5GtMfULHsioyGsFUp9rfwetU95p10ZOLpPFaojdzzjTm m3oHJtCaaWkUCq470M1XKK7reOfLjPf3K8Y= -----END CERTIFICATE-----Generated at Sat Oct 10 07:47:03 2026 by rpki-client