$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa File: cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa (raw, json) Hash identifier: yRMPVbEUFXwLOD5c8MebwodoaDsCC2hWnD6oDde5EyQ= Subject key identifier: 79:23:CD:78:51:D5:C9:7E:71:64:F3:CD:91:82:61:41:9A:B9:EB:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49854CF689EB41B6B6887880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2001:4860:4824::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:4c:f6:89:eb:41:b6:b6:88:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5d3a1ada-a948-4a77-8882-ae4b15cb6eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:62:c3:ab:f6:99:7d:8e:f4:3d:22:7c:02: c4:f7:cf:19:78:41:17:59:15:16:dc:d6:46:16:39: d5:d2:d7:11:82:cc:9e:c3:e6:ab:45:6f:12:60:74: 86:cd:65:5c:67:ed:e4:96:e0:91:4d:8f:a6:47:d1: 33:33:4a:b6:e6:01:a1:bb:82:72:45:68:f6:55:ef: 59:c8:b1:37:db:e1:65:da:bc:0f:e0:29:93:57:36: 64:c9:69:14:15:ad:a4:1e:92:2e:fa:f4:32:f6:4c: 08:be:88:d9:75:03:1d:62:b9:90:95:ae:d2:5a:49: df:ea:68:58:12:7b:bc:75:22:0a:48:9e:63:a1:b4: 58:1d:6a:1a:43:86:01:92:f3:10:13:51:04:2d:ae: e1:b9:10:74:9d:00:d2:b3:6b:05:43:9a:fc:fe:0d: dd:89:37:f7:53:02:eb:7e:57:90:a0:be:f0:63:11: 79:b5:6e:68:8e:60:3b:cb:96:bb:71:70:bf:8d:cf: c0:17:aa:be:c2:be:22:db:e2:23:ae:4a:51:62:ad: cb:6f:99:3c:98:aa:0d:20:d7:86:a5:52:fc:69:d4: af:c4:9c:4a:09:f5:88:1d:a1:53:ff:c6:87:24:1b: 3e:09:ce:60:b1:f7:72:57:31:77:a3:46:4e:6f:61: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:23:CD:78:51:D5:C9:7E:71:64:F3:CD:91:82:61:41:9A:B9:EB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4824::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:81:da:68:28:4c:e5:45:1e:80:54:a4:46:c2:8f:b9:cf:66: be:90:b8:73:a2:0b:65:b5:af:c8:f3:d6:fa:2e:45:a1:f7:0d: e2:a9:42:ec:96:35:20:3e:77:75:cb:f2:02:20:30:7d:4f:d9: 77:3f:8c:36:48:f5:f2:37:75:ba:62:61:5c:9d:e7:3e:c6:d2: ba:18:37:57:df:8e:b0:0a:b9:a6:05:3a:99:37:81:68:f9:30: 31:1d:ae:5c:b6:62:e1:ba:36:ee:a1:8a:65:7e:56:52:48:f9: c8:bd:a2:26:80:9d:cf:83:a7:43:64:dc:f4:d9:b7:e3:bf:a4: 55:eb:24:6e:00:e0:e1:af:22:2e:c5:b5:1f:72:90:c1:52:93: 5b:ee:68:23:b4:41:75:03:77:4e:d8:b2:85:0c:61:a0:3e:be: b9:6d:49:a9:56:a0:c8:9b:b1:a6:e3:9f:30:c1:81:10:47:f4: 3c:09:71:97:91:ab:bd:61:8d:f6:bc:bb:c9:fb:bd:6b:d2:3e: 67:3e:10:2e:11:36:6c:4e:34:5a:54:7f:de:de:e7:4b:7a:30: 85:28:fc:5c:f6:a4:7e:99:7d:4b:0d:b3:f0:01:ac:20:6f:93: 58:50:86:a2:46:36:ac:b9:e5:75:e7:de:99:8c:99:36:c0:23: 38:3d:40:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhUz2ietBtraIeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWQzYTFhZGEtYTk0OC00YTc3LTg4ODItYWU0YjE1Y2I2ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsRiw6v2mX2O9D0ifALE988ZeEEXWRUW3NZG FjnV0tcRgsyew+arRW8SYHSGzWVcZ+3kluCRTY+mR9EzM0q25gGhu4JyRWj2Ve9Z yLE32+Fl2rwP4CmTVzZkyWkUFa2kHpIu+vQy9kwIvojZdQMdYrmQla7SWknf6mhY Enu8dSIKSJ5jobRYHWoaQ4YBkvMQE1EELa7huRB0nQDSs2sFQ5r8/g3diTf3UwLr fleQoL7wYxF5tW5ojmA7y5a7cXC/jc/AF6q+wr4i2+IjrkpRYq3Lb5k8mKoNINeG pVL8adSvxJxKCfWIHaFT/8aHJBs+Cc5gsfdyVzF3o0ZOb2FbcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkjzXhR1cl+cWTzzZGCYUGaueuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2RiMWUxZTgtMzdiYi0z NTBmLThlZTgtYTNiMzQ1ODU4OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSB2mgoTOVFHoBUpEbCj7nPZr6QuHOiC2W1r8jz1vouRaH3DeKp QuyWNSA+d3XL8gIgMH1P2Xc/jDZI9fI3dbpiYVyd5z7G0roYN1ffjrAKuaYFOpk3 gWj5MDEdrly2YuG6Nu6himV+VlJI+ci9oiaAnc+Dp0Nk3PTZt+O/pFXrJG4A4OGv Ii7FtR9ykMFSk1vuaCO0QXUDd07YsoUMYaA+vrltSalWoMibsabjnzDBgRBH9DwJ cZeRq71hjfa8u8n7vWvSPmc+EC4RNmxONFpUf97e50t6MIUo/Fz2pH6ZfUsNs/AB rCBvk1hQhqJGNqy55XXn3pmMmTbAIzg9QMA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:05:10 2026 by rpki-client