$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db3e89cf-97a6-3bcd-89e5-a2ffa65e4bf1.roa File: db3e89cf-97a6-3bcd-89e5-a2ffa65e4bf1.roa (raw, json) Hash identifier: OxoshjY7Ab1ktbdb4/CMIbGMpzVPd+DNuwN0ZvtGpEI= Subject key identifier: 78:A0:13:6C:6B:9B:AB:22:3F:AD:4B:52:20:15:5A:72:3E:50:EA:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497C56238BF165273BA6E3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db3e89cf-97a6-3bcd-89e5-a2ffa65e4bf1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 24319 IP address blocks: 2600:1417:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:56:23:8b:f1:65:27:3b:a6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8f2afe3-fc57-4de3-856a-c331b9df493d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:1c:b1:5b:4a:0e:91:7f:09:5b:81:28:d9: 88:6c:0f:f6:cc:f1:7a:25:41:76:fc:17:ed:ef:38: 79:ff:73:c0:d2:09:76:ba:f6:b0:ec:29:45:4a:90: 13:cb:c8:3f:33:7c:a2:3e:6b:55:a7:6c:35:df:f1: 86:fb:12:e7:6c:8f:2a:98:bd:ce:e2:11:de:ed:bd: 4b:41:fc:cc:71:d4:ab:10:18:8b:77:b2:6e:04:d1: 02:a0:94:70:05:af:87:2d:96:23:98:60:bc:d0:e2: 84:6e:4b:ef:37:8d:98:af:7c:19:49:b6:23:5e:0f: d1:68:68:3a:04:4e:55:c3:20:25:10:c7:88:c8:62: b4:d2:8c:a7:a4:81:91:99:4f:ea:fd:58:8a:f3:37: 5a:1d:ff:00:01:29:ae:a6:43:a0:3b:31:bd:78:76: ec:a0:9d:59:a8:a5:7e:5e:ad:0c:f0:02:f6:d0:c4: 67:d7:ed:a6:a3:ef:a7:1d:99:6e:b7:06:09:1c:22: e6:e1:bc:82:7a:6b:b7:f0:db:ed:92:23:74:5f:24: 34:cb:2b:50:5a:09:7d:2a:98:27:78:d0:55:45:6e: 07:8b:89:a5:0c:88:03:27:f3:7b:a6:85:e8:82:7b: 8c:94:37:72:f3:3b:a0:55:80:1f:68:eb:e0:7e:a2: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:13:6C:6B:9B:AB:22:3F:AD:4B:52:20:15:5A:72:3E:50:EA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db3e89cf-97a6-3bcd-89e5-a2ffa65e4bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:24:88:dc:bb:13:a7:46:92:67:ee:2f:a2:f2:fe:58:cb:70: 50:b0:e1:ca:99:fb:a8:2e:1d:50:a9:21:3a:e5:ef:15:1b:ed: 15:cc:b3:d8:dd:f5:03:ef:02:21:a8:90:88:e7:c1:93:02:74: f4:ed:36:7f:9f:8f:a7:00:cf:ee:31:43:32:d5:20:4d:f1:e9: ee:73:5b:58:7d:71:b2:04:00:87:0d:0c:cd:57:15:ad:ed:2c: 10:de:db:76:6e:9b:c9:99:8f:c9:3a:28:b6:83:93:b1:62:89: cf:4b:55:aa:cf:4e:63:c7:32:19:81:f1:6a:07:6b:22:4c:9f: 6b:9b:6a:c1:63:0d:26:99:cc:4d:13:4c:6b:70:28:6d:6e:ad: 5c:aa:80:0e:6c:46:42:34:8a:56:10:5d:45:a4:04:a0:d7:1a: 0a:85:e1:64:b9:f6:8f:62:13:f0:50:fc:e2:b1:8a:4a:a5:d6: 61:7f:37:31:6a:f1:b0:89:88:a7:da:fb:d9:28:21:46:2c:3a: 14:cc:27:92:e8:61:6b:b5:90:b5:94:34:e4:fe:55:31:66:c6: f1:f8:a0:6a:d5:e2:86:a4:82:2d:06:81:df:f6:08:02:e2:d7: 00:a1:8b:dd:01:ef:4b:d0:db:d7:c0:98:b2:b5:36:62:c0:89: 66:69:ce:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfFYji/FlJzum48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhmMmFmZTMtZmM1Ny00ZGUzLTg1NmEtYzMzMWI5ZGY0OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbMcsVtKDpF/CVuBKNmIbA/2zPF6JUF2/Bft 7zh5/3PA0gl2uvaw7ClFSpATy8g/M3yiPmtVp2w13/GG+xLnbI8qmL3O4hHe7b1L QfzMcdSrEBiLd7JuBNECoJRwBa+HLZYjmGC80OKEbkvvN42Yr3wZSbYjXg/RaGg6 BE5VwyAlEMeIyGK00oynpIGRmU/q/ViK8zdaHf8AASmupkOgOzG9eHbsoJ1ZqKV+ Xq0M8AL20MRn1+2mo++nHZlutwYJHCLm4byCemu38NvtkiN0XyQ0yytQWgl9Kpgn eNBVRW4Hi4mlDIgDJ/N7poXognuMlDdy8zugVYAfaOvgfqI1TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHigE2xrm6siP61LUiAVWnI+UOrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIzZTg5Y2YtOTdhNi0z YmNkLTg5ZTUtYTJmZmE2NWU0YmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYkiNy7E6dGkmfuL6Ly/ljLcFCw4cqZ+6guHVCpITrl7xUb7RXM s9jd9QPvAiGokIjnwZMCdPTtNn+fj6cAz+4xQzLVIE3x6e5zW1h9cbIEAIcNDM1X Fa3tLBDe23Zum8mZj8k6KLaDk7Fiic9LVarPTmPHMhmB8WoHayJMn2ubasFjDSaZ zE0TTGtwKG1urVyqgA5sRkI0ilYQXUWkBKDXGgqF4WS59o9iE/BQ/OKxikql1mF/ NzFq8bCJiKfa+9koIUYsOhTMJ5LoYWu1kLWUNOT+VTFmxvH4oGrV4oakgi0Ggd/2 CALi1wChi90B70vQ29fAmLK1NmLAiWZpzpE= -----END CERTIFICATE-----Generated at Fri Oct 23 02:30:00 2026 by rpki-client