$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24ff36ae-648c-32df-a4d6-2cf621014a4d.roa File: 24ff36ae-648c-32df-a4d6-2cf621014a4d.roa (raw, json) Hash identifier: qAD2K9UWaUlrnp/U1wtDxS66o0jvQFTuEKF9ZVFNo4s= Subject key identifier: C9:58:63:C0:8C:80:74:B9:CC:54:25:2E:96:26:31:4C:85:89:53:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498480A07ED5432A030EE080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24ff36ae-648c-32df-a4d6-2cf621014a4d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9498 IP address blocks: 2600:140f:f400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:80:a0:7e:d5:43:2a:03:0e:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed8ebccd-fb27-4fae-8e9a-24960ca5aae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:e7:f4:9c:c9:52:c3:7f:a7:8f:be:0a:02: c4:b5:05:0c:18:9c:48:5a:ec:bf:cc:8c:bb:df:c3: 13:ee:2a:5d:43:a9:32:2d:28:0b:ac:47:71:2b:ba: b7:fa:f7:26:f8:9b:63:fd:91:4a:57:f8:ff:aa:07: c3:55:d8:9e:45:f0:4e:77:72:99:e3:d3:ea:51:b3: d3:8b:e1:52:5d:2a:d1:f8:95:0e:b0:fb:54:18:f1: 7b:5b:a9:54:21:ed:ae:9e:aa:4a:a7:29:db:2e:2d: 51:2f:c2:f2:1f:be:c3:a6:27:6e:0d:33:ca:d1:60: c3:fb:ba:73:8f:5a:d4:5b:ad:84:1a:89:a7:b6:c9: 90:37:83:d2:16:d0:c2:3e:8f:1f:f3:c1:8c:50:5a: 12:32:5d:5e:81:f6:e4:ac:bf:13:52:10:fd:95:0a: b2:e7:18:fe:9c:e9:00:67:06:57:63:77:ed:fa:f6: 7a:0b:4e:80:52:ab:0a:96:8b:30:39:18:67:b1:2e: f4:a8:6c:68:58:38:e9:e7:67:a7:78:d8:ec:84:18: d1:1c:24:02:ec:f5:3f:4e:80:3d:c3:94:c5:c3:8d: 64:28:03:d3:4a:e2:08:a5:07:a2:18:d1:c0:cf:cb: b6:c6:f5:57:96:a1:7f:f5:46:cb:3a:c9:c2:8e:ad: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:63:C0:8C:80:74:B9:CC:54:25:2E:96:26:31:4C:85:89:53:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24ff36ae-648c-32df-a4d6-2cf621014a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:f400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:19:00:bc:d3:67:d9:a7:e2:9c:94:84:0f:3d:df:a6:f4:b3: 5f:b9:e2:5e:b5:74:e1:a8:57:8f:f7:40:b7:82:f8:1d:fc:a6: 7e:1e:97:0c:9c:e1:d3:2b:ab:96:05:ba:81:f1:92:bb:03:f2: 43:9a:55:9e:3b:0d:c8:fa:58:82:af:1d:4a:71:f5:ff:5d:b7: 78:87:3c:f7:7a:62:fe:9e:04:75:6c:d0:2f:1b:c2:15:be:55: c6:11:88:e5:b3:58:47:91:25:8e:ed:25:21:1f:87:ff:61:3d: 97:79:75:7f:4b:63:d0:b6:00:e8:6e:8c:63:65:34:ef:d8:39: 90:58:c7:e2:a0:a7:1b:27:ab:e5:72:8b:7a:cf:13:e8:80:59: d4:03:db:27:de:94:7d:ab:f6:c1:5a:40:7a:ea:40:04:97:e5: 21:06:b4:90:68:e5:7c:40:16:58:8e:07:06:ec:d1:35:2a:bd: 96:1d:94:f1:bb:a2:7f:1f:d5:69:64:06:a0:18:95:b1:e7:8b: 13:6b:e6:37:5d:93:bb:bc:fc:60:60:35:5c:6c:36:c8:38:8a: cb:70:41:ce:d9:a8:6f:b6:a6:c9:ea:b5:21:58:12:fa:1d:7c: 16:4f:01:1e:e5:17:0b:ea:5a:cb:e9:31:e6:28:8e:d4:78:39: a4:2b:6f:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhICgftVDKgMO4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ4ZWJjY2QtZmIyNy00ZmFlLThlOWEtMjQ5NjBjYTVhYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6nn9JzJUsN/p4++CgLEtQUMGJxIWuy/zIy7 38MT7ipdQ6kyLSgLrEdxK7q3+vcm+Jtj/ZFKV/j/qgfDVdieRfBOd3KZ49PqUbPT i+FSXSrR+JUOsPtUGPF7W6lUIe2unqpKpynbLi1RL8LyH77DpiduDTPK0WDD+7pz j1rUW62EGomntsmQN4PSFtDCPo8f88GMUFoSMl1egfbkrL8TUhD9lQqy5xj+nOkA ZwZXY3ft+vZ6C06AUqsKloswORhnsS70qGxoWDjp52eneNjshBjRHCQC7PU/ToA9 w5TFw41kKAPTSuIIpQeiGNHAz8u2xvVXlqF/9UbLOsnCjq2RxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMlYY8CMgHS5zFQlLpYmMUyFiVMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRmZjM2YWUtNjQ4Yy0z MmRmLWE0ZDYtMmNmNjIxMDE0YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD/QA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcZALzTZ9mn4pyUhA8936b0s1+54l61dOGoV4/3QLeC+B38pn4e lwyc4dMrq5YFuoHxkrsD8kOaVZ47Dcj6WIKvHUpx9f9dt3iHPPd6Yv6eBHVs0C8b whW+VcYRiOWzWEeRJY7tJSEfh/9hPZd5dX9LY9C2AOhujGNlNO/YOZBYx+Kgpxsn q+Vyi3rPE+iAWdQD2yfelH2r9sFaQHrqQASX5SEGtJBo5XxAFliOBwbs0TUqvZYd lPG7on8f1WlkBqAYlbHnixNr5jddk7u8/GBgNVxsNsg4istwQc7ZqG+2psnqtSFY EvodfBZPAR7lFwvqWsvpMeYojtR4OaQrbws= -----END CERTIFICATE-----Generated at Tue Oct 27 20:30:16 2026 by rpki-client