$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa File: ccfef573-0244-34d8-a044-75e3ee3d0aea.roa (raw, json) Hash identifier: bqBdsoxcniMGvRzqONzGwWWBNQJs/8V2kafwX/bSpBM= Subject key identifier: 06:AD:90:F9:04:73:4A:5D:D8:F3:BF:69:DD:BE:9E:F7:10:E5:8F:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F698D8B3017385B29501C3E90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 2600:1408:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8b:30:17:38:5b:29:50:1c:3e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=f19eeeb9-9963-4040-b0f6-7af8042ad945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:67:0f:10:73:fb:b2:c6:80:d2:f2:96:e8: f5:ac:f4:da:7d:f6:83:ca:2a:fb:a3:14:35:ed:6c: 8a:58:6e:b7:b5:33:e9:4d:a5:83:03:44:fa:dd:99: a7:11:73:ce:42:e9:63:5e:4a:ea:3a:a3:44:e4:c1: e9:53:cf:8d:b8:5a:53:38:7e:e6:2a:1a:1f:18:7b: b8:e3:98:b5:fc:c8:56:b5:44:ce:75:30:4b:66:b0: e5:16:a4:42:08:ef:f7:5a:ed:7c:58:c2:40:9d:c3: 04:e0:1b:e1:19:99:9c:f4:b6:31:b9:99:70:60:43: 2c:6c:3a:44:d1:31:2d:b4:24:1b:67:bd:42:41:b7: a4:31:97:b2:1d:d4:36:9c:64:00:77:e2:a1:32:79: a9:da:8c:a1:57:aa:e8:61:92:7c:38:b0:1c:4c:cb: d6:dc:f7:95:b5:e2:43:7c:dc:5d:3e:df:eb:b7:9c: a7:12:52:69:90:97:52:c7:7c:dc:c7:36:c1:f9:bf: 1e:79:a6:8b:d8:08:73:6d:0e:f0:bb:0d:11:f0:41: 4b:43:eb:c0:55:4c:d6:3a:8c:18:b1:48:d5:85:f3: 87:5f:0c:7e:8f:a3:4c:ad:09:8b:81:be:6d:1b:d4: e4:df:f3:ea:9e:73:88:b9:96:1f:9b:81:69:d6:04: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AD:90:F9:04:73:4A:5D:D8:F3:BF:69:DD:BE:9E:F7:10:E5:8F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4b:b3:00:b6:39:45:bb:c9:89:f3:9b:a8:ba:da:a7:b3:9a: f2:d3:cd:81:0a:02:32:05:29:a8:12:56:41:ff:b9:8c:de:f1: 8c:d2:af:db:37:d5:5f:09:e6:e8:5f:9b:b4:9b:57:fc:b3:29: ab:39:49:ed:75:e2:a8:62:6f:1f:6c:e6:61:8a:d1:12:1b:7d: 8c:02:89:91:d9:49:22:35:6e:c9:a0:cf:57:b8:be:10:8d:7c: 82:fe:2d:1e:70:67:62:8f:96:86:08:65:4e:01:83:f9:5b:c9: a8:68:c6:f3:50:e5:c9:17:9e:cc:19:92:76:7d:29:99:5d:47: 42:40:e9:dc:5e:6d:65:1e:33:d2:2b:a2:ef:7e:be:9a:3b:80: da:c0:11:42:78:e6:4f:39:ce:ed:6e:5a:76:2c:ba:78:23:03: 7a:5d:0e:b2:70:65:b4:bd:ec:15:7c:aa:0e:dd:de:95:ad:2b: f6:da:94:50:1d:ea:31:47:27:80:4b:19:05:54:8c:01:fe:66: c4:e1:60:68:3d:3f:2a:3a:7c:f4:de:af:e5:f4:cc:9a:d2:3f: 4e:e7:65:1c:11:7e:ca:98:49:b8:9e:64:2c:90:9f:bc:50:11: 3f:91:86:46:89:fc:5f:2d:11:8e:02:a6:ce:75:69:04:93:f7: 14:0a:06:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9pjYswFzhbKVAcPpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZjE5ZWVlYjktOTk2My00MDQwLWIwZjYtN2FmODA0MmFkOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvpnDxBz+7LGgNLyluj1rPTaffaDyir7oxQ1 7WyKWG63tTPpTaWDA0T63ZmnEXPOQuljXkrqOqNE5MHpU8+NuFpTOH7mKhofGHu4 45i1/MhWtUTOdTBLZrDlFqRCCO/3Wu18WMJAncME4BvhGZmc9LYxuZlwYEMsbDpE 0TEttCQbZ71CQbekMZeyHdQ2nGQAd+KhMnmp2oyhV6roYZJ8OLAcTMvW3PeVteJD fNxdPt/rt5ynElJpkJdSx3zcxzbB+b8eeaaL2AhzbQ7wuw0R8EFLQ+vAVUzWOowY sUjVhfOHXwx+j6NMrQmLgb5tG9Tk3/PqnnOIuZYfm4Fp1gTmpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAatkPkEc0pd2PO/ad2+nvcQ5Y+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NmZWY1NzMtMDI0NC0z NGQ4LWEwNDQtNzVlM2VlM2QwYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdLswC2OUW7yYnzm6i62qezmvLTzYEKAjIFKagSVkH/uYze8YzS r9s31V8J5uhfm7SbV/yzKas5Se114qhibx9s5mGK0RIbfYwCiZHZSSI1bsmgz1e4 vhCNfIL+LR5wZ2KPloYIZU4Bg/lbyahoxvNQ5ckXnswZknZ9KZldR0JA6dxebWUe M9Irou9+vpo7gNrAEUJ45k85zu1uWnYsungjA3pdDrJwZbS97BV8qg7d3pWtK/ba lFAd6jFHJ4BLGQVUjAH+ZsThYGg9Pyo6fPTer+X0zJrSP07nZRwRfsqYSbieZCyQ n7xQET+RhkaJ/F8tEY4Cps51aQST9xQKBn4= -----END CERTIFICATE-----Generated at Wed Oct 21 01:44:13 2026 by rpki-client