$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9fc36ab-7e17-33a3-8edb-a26ecc4aa558.roa File: b9fc36ab-7e17-33a3-8edb-a26ecc4aa558.roa (raw, json) Hash identifier: PBfnRLTz7xfHMy2rJGKS2GZk+mErkLhznJK/Uh0kf5s= Subject key identifier: 18:36:1E:12:C7:D9:A2:48:EC:0D:49:AC:CA:23:95:E2:F3:04:7C:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4976F8864C5948ED2F7C6060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9fc36ab-7e17-33a3-8edb-a26ecc4aa558.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 2600:3c18::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:f8:86:4c:59:48:ed:2f:7c:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=acbd43c6-a1e7-4d91-ab88-f51cd5cd725e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:47:da:60:40:60:d8:1d:c4:30:80:94:ae: 11:e4:e9:b6:01:b1:40:1e:9a:39:4a:36:8a:a1:c0: 12:42:28:2b:34:74:fd:83:b1:4a:7d:5b:d6:ce:54: a7:68:ed:a1:5b:85:32:07:d5:82:b2:f2:5a:c3:3a: a5:9f:b6:b7:bf:e3:57:e3:2b:f7:c7:49:2c:88:de: e0:95:27:b1:63:33:09:01:ca:a8:69:74:b8:d4:bd: 75:be:db:65:c6:e7:32:51:f7:62:2d:ea:ab:b6:00: 55:08:52:4d:49:55:a5:ca:da:f3:31:b7:37:64:18: a2:04:23:56:19:40:74:69:19:7d:29:1f:17:bd:b2: 38:c0:d8:8e:a3:d5:53:b4:f9:d2:fb:b4:71:f7:04: 3a:ae:73:7f:e3:34:67:3e:d7:39:35:c2:fa:01:fb: fc:92:5e:ed:a8:ca:32:f8:76:16:24:d2:44:03:fd: a6:24:86:fd:56:b4:22:db:41:1a:1b:36:1e:f9:a8: fd:b9:73:6d:08:c8:13:ff:41:47:48:84:8c:91:a7: 25:85:82:61:57:83:1b:60:47:33:fc:ee:f0:d3:ad: fc:6f:14:e2:f0:2d:ab:59:25:1b:4f:7d:71:cc:62: 5f:d4:12:a1:c7:80:4a:b2:e0:86:32:e3:94:0f:d8: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:36:1E:12:C7:D9:A2:48:EC:0D:49:AC:CA:23:95:E2:F3:04:7C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9fc36ab-7e17-33a3-8edb-a26ecc4aa558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:3c18::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f6:89:0a:03:c9:bb:ed:d6:1c:e0:b1:4c:2b:35:3e:dd:e6: 1d:7d:36:4b:d3:cb:29:3f:d6:e9:c7:3c:6c:fe:ea:7d:8c:81: 38:2f:e9:c4:f1:03:73:32:12:f0:89:c0:cc:ac:c7:7d:a1:19: be:0c:d8:a4:b3:9d:ad:ee:fb:6d:ec:20:fa:df:fe:89:37:dd: ac:6e:57:5b:22:6c:15:98:e6:90:07:6f:54:c7:b5:52:37:1e: 0c:6d:72:b4:c5:32:19:38:16:a5:4b:a2:d9:c0:cd:82:65:3d: f3:e8:38:85:33:16:3b:0c:af:91:c4:22:0f:3c:8e:4f:28:ad: 41:06:33:da:e3:21:60:9f:8a:32:58:25:6c:05:20:8a:58:7b: 0a:2b:c5:9f:7c:56:b7:b8:30:0e:94:9b:af:f8:e8:dc:94:8c: 26:a2:ea:29:c8:af:18:65:7e:20:9c:0a:74:d7:2d:b7:19:d3: c2:98:78:71:60:77:e1:12:6b:4d:74:b2:50:ae:ba:48:19:7d: 0d:96:ac:07:43:8c:f8:6c:f5:c3:b4:4b:4b:36:0c:0c:10:da: 33:32:91:5d:84:9b:6c:01:4b:dd:f6:bd:22:dd:31:6f:ec:8f: 3d:4c:e2:da:7c:c7:d6:5d:fc:c1:1a:77:3d:93:a9:dc:86:f3: 10:20:e8:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdviGTFlI7S98YGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWNiZDQzYzYtYTFlNy00ZDkxLWFiODgtZjUxY2Q1Y2Q3MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXNH2mBAYNgdxDCAlK4R5Om2AbFAHpo5SjaK ocASQigrNHT9g7FKfVvWzlSnaO2hW4UyB9WCsvJawzqln7a3v+NX4yv3x0ksiN7g lSexYzMJAcqoaXS41L11vttlxucyUfdiLeqrtgBVCFJNSVWlytrzMbc3ZBiiBCNW GUB0aRl9KR8XvbI4wNiOo9VTtPnS+7Rx9wQ6rnN/4zRnPtc5NcL6Afv8kl7tqMoy +HYWJNJEA/2mJIb9VrQi20EaGzYe+aj9uXNtCMgT/0FHSISMkaclhYJhV4MbYEcz /O7w0638bxTi8C2rWSUbT31xzGJf1BKhx4BKsuCGMuOUD9i+RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBg2HhLH2aJI7A1JrMojleLzBHzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjlmYzM2YWItN2UxNy0z M2EzLThlZGItYTI2ZWNjNGFhNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgA8GDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/9okKA8m77dYc4LFMKzU+3eYdfTZL08spP9bpxzxs/up9jIE4L+nE 8QNzMhLwicDMrMd9oRm+DNiks52t7vtt7CD63/6JN92sbldbImwVmOaQB29Ux7VS Nx4MbXK0xTIZOBalS6LZwM2CZT3z6DiFMxY7DK+RxCIPPI5PKK1BBjPa4yFgn4oy WCVsBSCKWHsKK8WffFa3uDAOlJuv+OjclIwmouopyK8YZX4gnAp01y23GdPCmHhx YHfhEmtNdLJQrrpIGX0NlqwHQ4z4bPXDtEtLNgwMENozMpFdhJtsAUvd9r0i3TFv 7I89TOLafMfWXfzBGnc9k6nchvMQIOgK -----END CERTIFICATE-----Generated at Fri Oct 23 06:12:52 2026 by rpki-client