$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c858eee7-be6f-39bd-9427-4f81e1a4f396.roa File: c858eee7-be6f-39bd-9427-4f81e1a4f396.roa (raw, json) Hash identifier: qBMO/7ELCdQtKZ6swAMmRgl8JfOVygdU/MWsOSJG/mU= Subject key identifier: 2B:DE:FB:5A:FC:E2:1A:43:56:B1:27:9F:0C:5B:CA:D2:8B:CE:09:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D3D7D69D928D8561CAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c858eee7-be6f-39bd-9427-4f81e1a4f396.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 2600:1488:4015::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:3d:7d:69:d9:28:d8:56:1c:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a0e96fbb-99aa-4301-b16e-12691f218ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:73:6e:7c:99:9a:3a:f8:33:9a:b6:8b:65: 11:ae:18:63:25:a9:27:8d:73:28:17:47:36:b6:b7: 75:28:7b:99:e0:ee:22:80:74:91:b4:02:1a:b2:c3: 71:0e:76:ca:c2:be:98:ff:d6:da:94:ef:b0:00:63: 0b:23:ac:d3:48:ba:4f:95:ee:f3:6d:2f:7d:74:b3: 87:cb:b0:64:aa:b1:aa:ee:f2:9a:c0:d5:20:9c:56: 26:08:f8:af:f0:50:ad:c8:b6:88:a8:d8:62:0e:e2: 7f:44:b4:c5:03:16:71:a3:55:92:26:9b:10:34:2f: 7c:79:fc:32:b9:42:dc:5e:b6:d1:e6:02:0e:7c:d9: 57:b3:aa:7c:30:de:a3:4b:0c:75:38:5a:af:21:f8: bb:51:7c:7d:cf:e7:8e:15:6b:bf:ff:38:53:44:6f: fa:a7:f4:11:f1:a0:4f:2a:c4:64:32:b1:9a:73:72: 7a:71:3e:c9:29:24:fd:32:65:8a:ca:92:aa:53:30: 16:4e:04:d6:95:57:56:08:b3:6a:15:1c:15:76:d4: b6:cf:e8:16:c6:f8:16:fa:45:05:11:fe:39:a3:ae: 75:f3:f1:49:22:b8:bf:d0:29:1f:70:c1:36:a7:f1: 17:44:15:bb:54:52:79:fd:95:c2:c0:84:03:d0:be: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:FB:5A:FC:E2:1A:43:56:B1:27:9F:0C:5B:CA:D2:8B:CE:09:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c858eee7-be6f-39bd-9427-4f81e1a4f396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:4015::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:69:ba:6c:81:27:97:69:d6:69:27:fa:33:77:ad:9e:60:5a: 77:bf:59:9c:0b:74:d5:26:9a:ca:7d:ee:77:49:4f:c2:48:ac: bf:9b:5e:52:ba:93:17:3f:db:ab:2d:5b:ee:af:12:f9:92:47: ff:7a:4e:1c:22:5f:a0:41:c1:3d:f8:6c:89:ef:75:fa:55:2a: 0a:7d:f4:f4:d3:db:d1:92:b0:56:09:67:04:3f:32:43:af:ce: 7e:ba:d9:fa:d5:cc:81:76:c6:f5:ae:a7:d5:01:a9:ac:53:2d: 20:1c:f5:3a:49:a0:71:b3:96:39:77:bf:05:9e:69:be:8d:3d: 67:a7:14:c5:b9:93:96:51:08:04:ca:51:f4:ed:a9:7e:95:e6: 15:65:49:93:4c:2f:8f:0b:b9:80:08:08:0e:a9:93:ea:26:b8: eb:d5:4d:30:42:58:bb:27:47:aa:cb:cf:c5:b9:21:06:a3:d5: ea:b0:c0:14:de:1b:8c:d2:8c:66:81:28:df:43:42:38:fb:f4: bb:5b:1d:c2:a9:69:0f:c6:4b:97:79:3b:56:fe:fa:fd:64:47: aa:0e:10:25:08:e5:78:00:54:07:9d:ed:76:f9:a8:ce:92:59: bd:30:07:ec:96:68:a1:58:2c:a9:22:7c:47:61:5a:3f:1e:d1: 66:55:82:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9QbT19adko2FYcrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTBlOTZmYmItOTlhYS00MzAxLWIxNmUtMTI2OTFmMjE4ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxzbnyZmjr4M5q2i2URrhhjJaknjXMoF0c2 trd1KHuZ4O4igHSRtAIassNxDnbKwr6Y/9balO+wAGMLI6zTSLpPle7zbS99dLOH y7BkqrGq7vKawNUgnFYmCPiv8FCtyLaIqNhiDuJ/RLTFAxZxo1WSJpsQNC98efwy uULcXrbR5gIOfNlXs6p8MN6jSwx1OFqvIfi7UXx9z+eOFWu//zhTRG/6p/QR8aBP KsRkMrGac3J6cT7JKST9MmWKypKqUzAWTgTWlVdWCLNqFRwVdtS2z+gWxvgW+kUF Ef45o6518/FJIri/0CkfcME2p/EXRBW7VFJ5/ZXCwIQD0L5VdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCve+1r84hpDVrEnnwxbytKLzgkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg1OGVlZTctYmU2Zi0z OWJkLTk0MjctNGY4MWUxYTRmMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9pumyBJ5dp1mkn+jN3rZ5gWne/WZwLdNUmmsp97ndJT8JIrL+b XlK6kxc/26stW+6vEvmSR/96ThwiX6BBwT34bInvdfpVKgp99PTT29GSsFYJZwQ/ MkOvzn662frVzIF2xvWup9UBqaxTLSAc9TpJoHGzljl3vwWeab6NPWenFMW5k5ZR CATKUfTtqX6V5hVlSZNML48LuYAICA6pk+omuOvVTTBCWLsnR6rLz8W5IQaj1eqw wBTeG4zSjGaBKN9DQjj79LtbHcKpaQ/GS5d5O1b++v1kR6oOECUI5XgAVAed7Xb5 qM6SWb0wB+yWaKFYLKkifEdhWj8e0WZVgp8= -----END CERTIFICATE-----Generated at Thu Oct 22 15:47:53 2026 by rpki-client