$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb4585f2-c88c-361c-924f-bd25a96d7fa5.roa File: bb4585f2-c88c-361c-924f-bd25a96d7fa5.roa (raw, json) Hash identifier: 8Jvdy7ivnWX/k9lTCGqgX5BEDOp5w+3rxXyUCGKG9Ug= Subject key identifier: A1:8F:5D:73:41:D9:CB:82:91:75:49:EB:AB:5E:07:E3:8E:19:8E:79 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49730FE7481846AE663FE840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb4585f2-c88c-361c-924f-bd25a96d7fa5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2001:4860:4848::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0f:e7:48:18:46:ae:66:3f:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0200348-eafd-4449-af99-3f7e04f392d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:ce:ac:ed:2d:cc:b4:2f:4c:a3:41:7c:95: ea:81:dd:d5:13:c8:a8:94:e4:40:20:55:00:8f:b6: 90:12:20:d2:51:3f:b7:5e:77:ab:d2:86:9f:77:76: cf:cb:76:3e:56:62:4e:f2:4a:55:9d:6d:9c:f0:41: 3c:ea:d2:54:c7:06:b3:5d:fa:86:9d:94:12:bf:fb: da:08:f6:ed:86:96:2d:78:3b:bf:17:ea:0b:b5:d3: da:e0:1d:b6:88:21:1f:0e:9c:7f:4c:5e:60:7e:42: 94:05:5e:cc:39:28:53:d5:1d:22:e6:25:f8:04:6d: e7:2d:5f:eb:7c:1d:23:8c:af:73:e3:42:b6:92:cb: 98:91:91:3c:27:ec:a8:64:f5:63:4d:60:be:67:16: c1:01:2d:51:25:40:97:4a:e9:48:be:f5:73:73:42: f1:b0:a2:b1:ad:c0:1a:ed:da:9c:67:de:a3:3b:8d: f8:a3:c8:83:f7:b6:61:9f:7e:13:13:cc:c3:0e:38: 32:7b:58:d5:4d:d9:33:e6:bb:a2:50:45:64:1d:18: c2:4f:4f:f4:c8:3a:64:bc:25:c4:e6:c0:95:a0:76: 45:0e:c2:b3:87:a8:70:e4:01:4e:7b:95:50:43:c5: cc:30:f6:35:ba:76:9c:aa:bc:57:8e:5d:3f:fb:cd: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:5D:73:41:D9:CB:82:91:75:49:EB:AB:5E:07:E3:8E:19:8E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb4585f2-c88c-361c-924f-bd25a96d7fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4848::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b8:b0:c6:ea:63:4a:e2:41:7d:2a:b1:d0:f8:66:bc:8e:62: e7:f0:79:c1:18:df:1e:02:fd:61:6c:90:6e:f1:b0:23:98:61: ed:76:5c:dc:56:d5:6e:ff:a9:37:ca:34:d7:60:ed:e3:78:20: 1e:b0:e9:84:1e:26:11:2a:5d:d8:74:cf:46:16:04:b9:f1:cc: 68:5c:b9:4a:01:5c:da:08:81:79:8d:87:12:32:d0:d0:e1:e5: 13:80:3e:a3:13:91:e5:8c:3e:96:ac:cc:fc:8b:4f:88:40:2f: f4:a5:90:57:47:2f:89:4b:ee:b1:a4:bd:90:4f:31:60:06:0b: a5:24:20:79:21:33:b1:87:2d:1b:ff:ee:a1:f4:63:37:95:9c: 70:f1:a3:c0:08:92:c4:d3:e7:87:e6:63:c7:01:fc:af:1a:c7: 10:10:c3:0c:ae:34:8d:a8:92:6b:bd:af:f0:1d:e6:9c:a8:60: 86:38:00:31:a3:3c:a6:31:4a:14:a8:30:2e:d7:8c:64:75:52: 93:59:dd:3c:d9:d6:3b:e2:ee:f6:3a:46:89:fb:50:0e:2f:22: f8:19:ca:bb:0e:94:b8:7c:1b:d8:3e:4e:11:da:31:3f:ec:68: f7:c0:f8:f5:14:9e:15:dc:88:a6:6e:e3:d0:be:2b:97:60:bb: 4c:6a:9e:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcw/nSBhGrmY/6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjAyMDAzNDgtZWFmZC00NDQ5LWFmOTktM2Y3ZTA0ZjM5MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN7OrO0tzLQvTKNBfJXqgd3VE8iolORAIFUA j7aQEiDSUT+3Xner0oafd3bPy3Y+VmJO8kpVnW2c8EE86tJUxwazXfqGnZQSv/va CPbthpYteDu/F+oLtdPa4B22iCEfDpx/TF5gfkKUBV7MOShT1R0i5iX4BG3nLV/r fB0jjK9z40K2ksuYkZE8J+yoZPVjTWC+ZxbBAS1RJUCXSulIvvVzc0LxsKKxrcAa 7dqcZ96jO434o8iD97Zhn34TE8zDDjgye1jVTdkz5ruiUEVkHRjCT0/0yDpkvCXE 5sCVoHZFDsKzh6hw5AFOe5VQQ8XMMPY1unacqrxXjl0/+80AfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKGPXXNB2cuCkXVJ66teB+OOGY55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmI0NTg1ZjItYzg4Yy0z NjFjLTkyNGYtYmQyNWE5NmQ3ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEhI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+4sMbqY0riQX0qsdD4ZryOYufwecEY3x4C/WFskG7xsCOYYe12 XNxW1W7/qTfKNNdg7eN4IB6w6YQeJhEqXdh0z0YWBLnxzGhcuUoBXNoIgXmNhxIy 0NDh5ROAPqMTkeWMPpaszPyLT4hAL/SlkFdHL4lL7rGkvZBPMWAGC6UkIHkhM7GH LRv/7qH0YzeVnHDxo8AIksTT54fmY8cB/K8axxAQwwyuNI2okmu9r/Ad5pyoYIY4 ADGjPKYxShSoMC7XjGR1UpNZ3TzZ1jvi7vY6Ron7UA4vIvgZyrsOlLh8G9g+ThHa MT/saPfA+PUUnhXciKZu49C+K5dgu0xqnlk= -----END CERTIFICATE-----Generated at Fri Sep 25 17:32:46 2026 by rpki-client