$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0afbe239-1e36-33a3-a23d-acf17ecb9932.roa File: 0afbe239-1e36-33a3-a23d-acf17ecb9932.roa (raw, json) Hash identifier: MBYg0wEN3Dmu82GQKWyP8vm7A4/txhIv2GlBgMkBNcM= Subject key identifier: 97:42:FB:D7:AF:80:DF:A7:13:78:EC:36:B7:1D:02:28:8E:BC:3F:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498471A9FAA6891197592140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0afbe239-1e36-33a3-a23d-acf17ecb9932.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 2600:1488:6180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:71:a9:fa:a6:89:11:97:59:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c9117c5-9ff0-45fe-a0c5-16329cd680e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:41:9f:f6:9e:b2:17:40:37:86:dc:d7:25: 3a:98:27:75:fd:e9:78:31:c7:5c:7d:16:f0:a5:be: f5:e5:36:a5:f5:d3:4e:02:e6:11:2e:95:00:65:25: 11:6b:64:5b:45:bc:6d:42:7b:a4:29:87:43:70:d9: b2:4c:c9:42:2f:38:12:05:78:52:c2:37:b3:7e:27: ab:66:41:8a:98:5f:63:c8:df:a0:b3:04:d4:66:f9: dc:48:1f:53:95:cb:d0:d0:71:ae:bc:f6:ad:3f:df: fd:6d:4c:cc:13:af:9f:b5:bc:20:fe:0d:55:53:7e: 6e:af:51:16:a3:6c:8d:39:fe:38:c4:32:76:1f:69: d6:64:d9:54:83:8b:f4:a6:1a:e7:06:66:a3:3e:a5: b2:21:94:2e:8d:2c:33:8f:a7:90:43:ab:b4:63:a5: 08:83:c0:e3:e1:77:0c:bb:57:be:9b:8c:5b:c8:65: 67:f9:a8:e5:5f:f9:7b:fa:13:be:b8:be:c2:f4:c5: bf:2b:2a:9d:16:a0:bb:98:07:cf:56:50:f0:a1:7d: 83:d5:4f:a1:41:5d:fe:ce:d1:fe:a0:5b:4d:0d:ae: 2b:dc:a7:c6:73:9d:db:61:27:74:72:16:7b:3f:cd: 9d:1e:a8:73:19:c8:21:f5:25:73:fe:ac:cb:0f:31: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:42:FB:D7:AF:80:DF:A7:13:78:EC:36:B7:1D:02:28:8E:BC:3F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0afbe239-1e36-33a3-a23d-acf17ecb9932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6180::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e4:f4:96:29:b5:d2:51:3f:ec:28:89:87:5f:6b:3b:08:02: 68:e0:40:09:0e:b4:11:76:59:b5:dc:e3:d5:5e:be:d9:cb:8a: 68:6a:4a:f5:d4:19:46:13:c9:8c:9d:73:ff:07:f4:e5:18:fe: 63:31:24:c7:95:51:6e:bc:1a:0c:97:56:d3:ac:8f:fc:6f:a6: d5:f9:3b:e5:fc:b3:20:0f:3a:25:ab:78:e2:8f:5f:92:43:47: bb:1e:e2:4c:ea:fe:1f:23:3c:73:c5:c5:aa:76:bb:9a:20:21: 3a:bd:d7:e6:9b:0b:dd:44:3e:4f:a7:5e:d5:06:df:4f:c8:a9: d0:00:40:0f:a4:9b:96:75:db:fd:d8:0c:5b:2c:f0:1c:74:97: 62:f5:53:23:fe:71:43:92:35:69:36:c4:99:cc:df:37:2b:a3: d0:b4:d9:02:98:f2:da:4d:f1:6c:8b:cc:b3:47:ee:c7:50:ca: e2:00:13:d1:d1:93:94:d2:77:3a:ee:4c:37:8c:79:9b:ea:34: b9:4e:ad:cc:e8:8e:ba:86:44:45:0f:6f:39:98:ba:f0:75:0c: 41:1b:c7:ee:e8:63:40:45:58:09:46:87:47:92:f9:3e:54:9a: 47:01:b5:40:96:d7:0f:c4:ac:21:2c:1f:1f:69:1f:d6:cf:76: 91:7c:02:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhHGp+qaJEZdZIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGM5MTE3YzUtOWZmMC00NWZlLWEwYzUtMTYzMjljZDY4MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCRBn/aeshdAN4bc1yU6mCd1/el4McdcfRbw pb715Tal9dNOAuYRLpUAZSURa2RbRbxtQnukKYdDcNmyTMlCLzgSBXhSwjezfier ZkGKmF9jyN+gswTUZvncSB9TlcvQ0HGuvPatP9/9bUzME6+ftbwg/g1VU35ur1EW o2yNOf44xDJ2H2nWZNlUg4v0phrnBmajPqWyIZQujSwzj6eQQ6u0Y6UIg8Dj4XcM u1e+m4xbyGVn+ajlX/l7+hO+uL7C9MW/KyqdFqC7mAfPVlDwoX2D1U+hQV3+ztH+ oFtNDa4r3KfGc53bYSd0chZ7P82dHqhzGcgh9SVz/qzLDzF2QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdC+9evgN+nE3jsNrcdAiiOvD/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFmYmUyMzktMWUzNi0z M2EzLWEyM2QtYWNmMTdlY2I5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPk9JYptdJRP+woiYdfazsIAmjgQAkOtBF2WbXc49VevtnLimhq SvXUGUYTyYydc/8H9OUY/mMxJMeVUW68GgyXVtOsj/xvptX5O+X8syAPOiWreOKP X5JDR7se4kzq/h8jPHPFxap2u5ogITq91+abC91EPk+nXtUG30/IqdAAQA+km5Z1 2/3YDFss8Bx0l2L1UyP+cUOSNWk2xJnM3zcro9C02QKY8tpN8WyLzLNH7sdQyuIA E9HRk5TSdzruTDeMeZvqNLlOrczojrqGREUPbzmYuvB1DEEbx+7oY0BFWAlGh0eS +T5UmkcBtUCW1w/ErCEsHx9pH9bPdpF8Av8= -----END CERTIFICATE-----Generated at Wed Oct 21 17:10:29 2026 by rpki-client