$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa File: f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa (raw, json) Hash identifier: s4lQNnHGkWTZvD2hm3I2PQDcR0QGaPOlVObYku0Lfv4= Subject key identifier: 1E:81:78:E4:B7:18:12:63:F5:7D:9C:F4:20:03:D4:72:5E:CE:A5:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D2C3856EF33265212B310 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:2c:38:56:ef:33:26:52:12:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26dd4492-47f0-4099-be56-6d35798d306b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:21:2c:8b:0a:27:b0:85:c1:f0:4c:69:8b: f1:fb:4f:9e:c4:4b:2e:b2:74:4d:7f:38:2a:40:22: 98:81:06:a3:d5:1e:8b:ad:30:ce:a0:c7:d9:dd:dc: a6:9d:4d:3b:06:d4:e8:22:af:43:72:eb:9b:55:dd: 6c:99:b4:27:68:52:9b:29:77:ee:84:e0:4a:77:83: 5f:f6:0c:ee:12:49:e8:f0:fa:92:10:c8:a1:40:e9: 44:f5:0e:5f:cc:c9:60:d0:78:3f:0a:39:27:82:17: 40:a3:c3:eb:13:88:2d:e5:cd:ef:a1:00:f6:ee:d3: 16:02:83:96:93:bb:da:11:56:ed:c7:7c:14:db:7c: dc:7e:5b:52:ec:6c:21:7b:af:a1:4d:e7:02:31:3a: a1:53:8f:85:b3:8e:76:6b:a0:a1:c7:e2:43:bc:a4: 63:3e:94:3d:cc:84:0f:41:74:04:55:26:3d:a0:0e: 94:6e:b0:f0:fb:48:69:a1:9e:b0:ea:d4:bf:95:0f: c7:6e:4a:9a:08:5a:cd:dc:13:57:eb:66:8e:a9:17: f6:db:28:3d:18:b1:bf:f7:04:22:54:ec:69:63:b8: ed:67:2f:69:fb:b5:b5:f7:40:45:f9:19:99:07:1f: 3d:3c:08:3f:3b:45:bf:1a:50:7c:9e:94:60:67:d8: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:81:78:E4:B7:18:12:63:F5:7D:9C:F4:20:03:D4:72:5E:CE:A5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ba:d3:74:e7:3b:2a:5d:83:8c:3b:de:44:a7:1a:99:a7:53: 54:00:dc:12:84:7c:73:0e:a7:c2:d4:80:21:17:85:61:1d:3e: 74:fc:7d:08:1f:45:3a:ad:9a:6d:2d:7b:99:48:eb:9d:80:d0: 77:76:5a:c9:7f:fe:f5:5b:a2:32:42:e5:1d:50:26:83:c9:da: 79:b7:61:df:31:16:7f:ad:d7:cc:0b:8d:6a:79:31:ec:ed:51: 83:c6:16:20:ba:6b:2d:28:77:d7:1e:f3:4c:ef:69:da:cd:13: f0:71:c0:96:2b:85:10:92:eb:96:04:ee:48:d4:1b:ee:94:01: 7c:33:1e:48:b9:cb:47:d3:90:48:19:fb:bd:df:b7:fc:1e:64: d5:c5:01:49:12:c0:40:a2:06:5d:3a:d5:0b:e0:0e:bd:c2:46: 1d:54:60:0f:c3:65:fc:9b:01:83:74:5b:90:38:3b:68:a5:00: 1c:07:0a:ae:36:20:78:e2:27:03:4a:11:d2:c4:58:72:b7:d3: 53:21:e0:eb:80:94:35:74:6e:13:b5:f6:48:ca:f4:d9:12:a9: f0:3e:99:c8:e9:a8:45:a6:f8:12:2c:ff:bd:9b:99:ea:2e:b5: fa:f4:fc:36:48:6e:c7:52:63:4e:13:0d:5a:65:36:1f:6f:b7: 20:f3:db:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfSw4Vu8zJlISsxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjZkZDQ0OTItNDdmMC00MDk5LWJlNTYtNmQzNTc5OGQzMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheYhLIsKJ7CFwfBMaYvx+0+exEsusnRNfzgq QCKYgQaj1R6LrTDOoMfZ3dymnU07BtToIq9DcuubVd1smbQnaFKbKXfuhOBKd4Nf 9gzuEkno8PqSEMihQOlE9Q5fzMlg0Hg/CjknghdAo8PrE4gt5c3voQD27tMWAoOW k7vaEVbtx3wU23zcfltS7Gwhe6+hTecCMTqhU4+Fs452a6Chx+JDvKRjPpQ9zIQP QXQEVSY9oA6UbrDw+0hpoZ6w6tS/lQ/HbkqaCFrN3BNX62aOqRf22yg9GLG/9wQi VOxpY7jtZy9p+7W190BF+RmZBx89PAg/O0W/GlB8npRgZ9iUowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6BeOS3GBJj9X2c9CAD1HJezqVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjcwYjNkN2MtMmVlNS0z NDViLTk4NGQtY2NjNTVlY2Q3ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABu603TnOypdg4w73kSnGpmnU1QA3BKEfHMOp8LUgCEXhWEdPnT8 fQgfRTqtmm0te5lI652A0Hd2Wsl//vVbojJC5R1QJoPJ2nm3Yd8xFn+t18wLjWp5 MeztUYPGFiC6ay0od9ce80zvadrNE/BxwJYrhRCS65YE7kjUG+6UAXwzHki5y0fT kEgZ+73ft/weZNXFAUkSwECiBl061QvgDr3CRh1UYA/DZfybAYN0W5A4O2ilABwH Cq42IHjiJwNKEdLEWHK301Mh4OuAlDV0bhO19kjK9NkSqfA+mcjpqEWm+BIs/72b meoutfr0/DZIbsdSY04TDVplNh9vtyDz26Q= -----END CERTIFICATE-----Generated at Wed Oct 21 09:21:25 2026 by rpki-client