$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e84294f3-1571-381d-8873-6a9c39220026.roa File: e84294f3-1571-381d-8873-6a9c39220026.roa (raw, json) Hash identifier: z+nd7mm/lG6Nmvi69b0GEDTB5FpagrIEKiVNRDrtEzI= Subject key identifier: 5A:BF:A2:56:24:4F:B2:E6:0E:1E:77:FA:C9:30:A9:33:49:F9:C2:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4987DF6E7FC34D5FC1825700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e84294f3-1571-381d-8873-6a9c39220026.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2001:4860:4847::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:df:6e:7f:c3:4d:5f:c1:82:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cdab25f6-8f92-4960-bfcd-6fcaee666cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:c3:fb:c9:e3:32:61:50:d2:d6:a2:4c:6b: 5f:01:c1:9a:4d:d1:e6:52:9c:f9:60:a5:34:68:5e: 10:7d:2c:10:68:8f:dc:f8:e3:5a:a0:96:9e:d5:2e: 6a:e9:42:8d:f7:b2:32:d5:8e:09:76:d8:fa:00:43: a1:c4:4a:27:43:4a:3a:bd:24:5e:3f:38:d4:80:47: 50:26:7d:76:15:69:d5:41:d5:4f:13:c0:45:00:96: a3:ac:0d:c9:4f:b7:34:9d:a4:94:dc:35:c0:db:b2: ed:4e:28:e1:e4:ea:bf:8e:65:50:c5:6a:ad:6e:98: 5b:87:6a:c1:f2:9c:89:53:05:9b:a9:0d:cd:96:d8: 4d:7c:39:30:b5:af:3f:5e:af:bf:4a:ae:49:42:4e: e0:9e:f0:1d:63:34:37:de:cd:02:f2:42:29:21:05: 5a:4d:4d:9d:04:2b:87:a9:23:20:75:9d:bb:79:07: f2:2f:62:79:32:7f:79:54:c2:4a:cb:11:c3:7c:4c: db:39:c2:cb:6c:c3:7c:8d:da:78:df:ae:41:36:31: 11:8b:70:65:dd:eb:64:2f:73:cb:82:c7:ed:f2:35: c4:a4:ea:50:ab:1a:86:4a:9a:31:53:42:49:a7:a1: c0:78:a2:4f:dd:c2:fc:15:f3:53:5e:f0:92:43:58: a6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:A2:56:24:4F:B2:E6:0E:1E:77:FA:C9:30:A9:33:49:F9:C2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e84294f3-1571-381d-8873-6a9c39220026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4847::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:50:21:b3:f6:e2:0a:cf:2d:ac:83:2a:fe:b7:44:ff:37:d8: ea:8e:3b:98:3a:56:75:50:40:8b:d7:65:a3:00:94:3a:e7:12: 73:12:08:16:d1:18:4d:75:38:17:76:e3:51:91:95:23:59:d8: 07:4d:7c:0f:f9:f8:47:9d:67:bb:34:b7:a1:36:5a:73:68:96: 29:8c:d7:24:23:53:d9:14:ab:ff:f7:21:2b:7f:a8:37:ab:07: e3:b3:10:b9:8a:33:43:72:c8:73:11:78:57:86:ae:f9:3c:58: fb:80:9f:2f:ea:a8:54:9d:86:f4:58:18:eb:39:2d:c8:c3:f7: 0a:15:4a:be:33:18:fc:6b:c5:16:ae:7a:b7:63:5a:43:fa:9b: 95:cb:cd:a1:95:28:46:70:29:51:44:31:89:bd:6a:39:6d:21: 4c:67:bd:30:d4:f0:29:93:07:58:30:45:01:f2:d7:5b:4a:86: bf:78:70:a8:8e:82:84:c3:92:a0:7c:b8:ee:66:d8:b0:46:fc: 1e:c1:d1:20:f8:b0:43:44:41:35:78:d1:02:ce:78:67:8e:da: b1:6a:26:bb:e8:7f:72:62:ec:93:28:12:d8:f6:b2:68:44:6d: 63:c8:7a:5b:12:cb:4f:e1:a3:f8:15:c1:b8:97:b4:0b:9b:53: a1:cb:11:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh99uf8NNX8GCVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RhYjI1ZjYtOGY5Mi00OTYwLWJmY2QtNmZjYWVlNjY2Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GnD+8njMmFQ0taiTGtfAcGaTdHmUpz5YKU0 aF4QfSwQaI/c+ONaoJae1S5q6UKN97Iy1Y4Jdtj6AEOhxEonQ0o6vSRePzjUgEdQ Jn12FWnVQdVPE8BFAJajrA3JT7c0naSU3DXA27LtTijh5Oq/jmVQxWqtbphbh2rB 8pyJUwWbqQ3NlthNfDkwta8/Xq+/Sq5JQk7gnvAdYzQ33s0C8kIpIQVaTU2dBCuH qSMgdZ27eQfyL2J5Mn95VMJKyxHDfEzbOcLLbMN8jdp4365BNjERi3Bl3etkL3PL gsft8jXEpOpQqxqGSpoxU0JJp6HAeKJP3cL8FfNTXvCSQ1imJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFq/olYkT7LmDh53+skwqTNJ+cKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTg0Mjk0ZjMtMTU3MS0z ODFkLTg4NzMtNmE5YzM5MjIwMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEhH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1QIbP24grPLayDKv63RP832OqOO5g6VnVQQIvXZaMAlDrnEnMS CBbRGE11OBd241GRlSNZ2AdNfA/5+EedZ7s0t6E2WnNolimM1yQjU9kUq//3ISt/ qDerB+OzELmKM0NyyHMReFeGrvk8WPuAny/qqFSdhvRYGOs5LcjD9woVSr4zGPxr xRauerdjWkP6m5XLzaGVKEZwKVFEMYm9ajltIUxnvTDU8CmTB1gwRQHy11tKhr94 cKiOgoTDkqB8uO5m2LBG/B7B0SD4sENEQTV40QLOeGeO2rFqJrvof3Ji7JMoEtj2 smhEbWPIelsSy0/ho/gVwbiXtAubU6HLEeM= -----END CERTIFICATE-----Generated at Fri Sep 25 14:57:38 2026 by rpki-client