$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa File: d2221840-baa4-36e4-96aa-6942aeccfff6.roa (raw, json) Hash identifier: 5tnGbhrHdjqBVFe26GUjjlscmlB6K5PSuHr4D2bsLg4= Subject key identifier: 8E:DC:A8:16:71:A8:59:78:B5:84:07:32:94:0D:2A:96:19:DC:EB:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4974B0FAF5381ADD98EDD300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2001:4860:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b0:fa:f5:38:1a:dd:98:ed:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b092d482-ce9e-415d-a2b5-363d61895358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:d7:91:b4:22:9d:f5:01:1d:48:d0:dc:bd: 4f:47:81:7b:f3:15:f4:5a:4c:10:a9:b5:a5:07:c6: 28:fd:37:42:26:5f:0e:4e:66:9a:a0:d7:bc:ae:40: 21:5d:68:45:e2:a9:c5:a4:f0:ff:d2:71:ba:03:fe: 19:eb:c1:01:7a:57:01:ef:26:65:5f:08:9b:b2:40: 0e:55:84:78:b4:de:f2:77:bc:73:0c:52:1f:55:c1: 5b:88:83:a6:16:1f:a2:74:ce:59:8b:fa:01:17:cb: 8c:60:c2:a9:4f:2c:c4:16:05:68:93:ef:28:3e:a0: 74:e0:8b:10:a1:72:ac:9b:68:f7:ab:a9:31:53:63: 19:b2:e2:e0:15:81:b7:26:fe:f7:8a:0a:79:93:2d: 8b:98:33:ce:2e:ca:51:37:95:0b:8d:3a:c6:50:53: 41:b8:f1:d1:d4:78:33:47:1d:c8:3b:09:41:30:97: 11:c1:12:c0:f6:69:88:52:84:04:fa:6d:b0:2a:1a: b4:2f:cd:9d:91:5a:90:4e:3c:44:a4:ff:91:3b:6e: 53:11:03:0e:6c:4a:6f:d6:7c:0d:cd:0f:67:d0:28: 15:b1:24:d9:60:e6:f7:1f:56:a3:dc:bf:f3:5d:ca: 61:3d:fc:83:95:0c:10:c4:01:b8:84:b2:23:c4:eb: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DC:A8:16:71:A8:59:78:B5:84:07:32:94:0D:2A:96:19:DC:EB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4840::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b5:3b:9a:41:9d:35:3a:fc:da:c1:41:c7:47:0f:4b:b4:7c: c6:28:99:dc:39:f3:88:c5:4b:3c:79:72:8a:0d:5f:83:32:6f: 94:bc:3f:60:ce:ba:25:98:36:63:45:65:a1:a9:95:83:e7:00: 22:59:dc:e9:3f:b6:f6:67:4a:e3:43:c6:5a:23:ec:f1:d8:ef: d2:ed:ca:98:51:4f:4c:ca:31:75:c4:fd:de:e1:91:04:e2:bc: 59:4d:69:7c:47:09:7e:29:d4:10:44:d8:4f:07:de:dd:2a:f9: 70:77:5b:82:e0:36:4c:25:68:c8:33:e9:02:0d:ed:17:45:ec: 26:54:80:30:e2:cb:62:db:1d:a2:3c:81:ed:6f:35:0f:23:be: 31:c3:fc:ea:0a:57:eb:53:0d:6f:1e:bb:29:4c:da:5e:18:f9: 49:d4:1c:56:3b:3c:74:2a:89:47:9b:94:01:84:aa:74:e7:20: f1:9e:b2:af:ab:61:d5:08:ec:6c:53:58:66:37:b5:16:36:f5: fb:ea:71:b5:8d:27:63:1e:6b:58:ef:67:1b:59:24:dd:41:15: 6b:1b:cd:e4:bd:29:a7:fe:1b:b8:6e:d1:c7:bf:09:41:1f:fc: d0:3e:58:17:17:1a:69:4a:92:0b:6e:3d:1e:b4:64:02:73:0b: 09:e0:16:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdLD69Tga3Zjt0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjA5MmQ0ODItY2U5ZS00MTVkLWEyYjUtMzYzZDYxODk1MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjXkbQinfUBHUjQ3L1PR4F78xX0WkwQqbWl B8Yo/TdCJl8OTmaaoNe8rkAhXWhF4qnFpPD/0nG6A/4Z68EBelcB7yZlXwibskAO VYR4tN7yd7xzDFIfVcFbiIOmFh+idM5Zi/oBF8uMYMKpTyzEFgVok+8oPqB04IsQ oXKsm2j3q6kxU2MZsuLgFYG3Jv73igp5ky2LmDPOLspRN5ULjTrGUFNBuPHR1Hgz Rx3IOwlBMJcRwRLA9mmIUoQE+m2wKhq0L82dkVqQTjxEpP+RO25TEQMObEpv1nwN zQ9n0CgVsSTZYOb3H1aj3L/zXcphPfyDlQwQxAG4hLIjxOsnowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI7cqBZxqFl4tYQHMpQNKpYZ3Os8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDIyMjE4NDAtYmFhNC0z NmU0LTk2YWEtNjk0MmFlY2NmZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEhA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKy1O5pBnTU6/NrBQcdHD0u0fMYomdw584jFSzx5cooNX4Myb5S8 P2DOuiWYNmNFZaGplYPnACJZ3Ok/tvZnSuNDxloj7PHY79LtyphRT0zKMXXE/d7h kQTivFlNaXxHCX4p1BBE2E8H3t0q+XB3W4LgNkwlaMgz6QIN7RdF7CZUgDDiy2Lb HaI8ge1vNQ8jvjHD/OoKV+tTDW8euylM2l4Y+UnUHFY7PHQqiUeblAGEqnTnIPGe sq+rYdUI7GxTWGY3tRY29fvqcbWNJ2Mea1jvZxtZJN1BFWsbzeS9Kaf+G7hu0ce/ CUEf/NA+WBcXGmlKkgtuPR60ZAJzCwngFvA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:52:05 2026 by rpki-client