$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa File: cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa (raw, json) Hash identifier: PfZb9+EtP5+OEbAkhAvDpEj0sPzLj0sCUT7i6jQWoS0= Subject key identifier: 39:23:BA:A2:75:78:E1:7F:3B:B8:D9:1E:A9:A0:F7:33:9E:81:FB:A5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD5881C7A89E1381E65180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 6167 IP address blocks: 2600:1008:a020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:58:81:c7:a8:9e:13:81:e6:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=e0ff4f24-fee8-4080-ba91-b4d34b5e1bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:ab:67:35:f6:f6:20:0d:35:93:f7:e8:b6: ff:7c:44:36:b4:42:d8:27:b9:ea:34:6b:57:27:c9: 53:da:0d:5e:92:d6:98:22:2a:29:13:08:cf:42:db: 03:23:03:35:28:6d:22:01:4a:7e:eb:59:d0:95:34: ec:eb:d7:e2:d8:b7:70:35:17:f9:8e:9a:dc:f6:3e: de:e8:62:b8:6f:94:0b:97:21:10:12:f0:13:72:80: 92:a0:a8:f8:e6:70:7b:39:85:7c:90:82:70:e9:a0: 7a:31:6f:d0:65:5d:c0:9d:66:77:f7:17:5a:a7:30: 97:aa:d2:70:24:a5:67:42:49:cf:dd:ef:6f:3f:e8: 3b:fe:bb:18:82:96:15:3e:54:a0:02:01:6f:1a:fc: 4d:52:c3:9a:0e:e8:5d:72:f8:ca:e7:de:41:58:b1: 47:a3:3b:7e:a4:5a:62:c9:db:8f:c2:f0:dc:44:54: 21:cc:b2:9f:01:68:67:68:4e:01:7e:6d:e7:58:54: 98:22:73:3f:ef:a6:00:43:b0:94:32:09:a7:e4:73: e2:23:aa:c4:89:91:56:e6:30:19:ab:56:98:a9:23: 64:a9:ac:71:8f:23:05:ed:f5:05:13:1f:e2:5c:21: 86:8b:55:50:20:e9:b0:33:7f:6b:34:2e:34:a9:74: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:BA:A2:75:78:E1:7F:3B:B8:D9:1E:A9:A0:F7:33:9E:81:FB:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:a020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4a:5f:78:52:b6:2d:3b:ac:52:de:3f:59:3a:ab:a2:08:b2: d1:75:f3:55:5c:47:a2:4f:69:87:1b:98:23:6e:ba:41:e5:ae: d3:32:a4:95:4b:47:8f:10:b3:c5:58:bf:a1:18:a3:ab:bd:51: a0:e7:ca:53:d5:18:1a:36:53:d3:19:cc:d5:ca:a4:f3:85:d1: 6d:99:7a:85:2e:d3:3f:09:01:4e:8b:ed:c9:81:45:0c:f0:11: 3d:87:2c:f4:ce:a0:4c:eb:21:cd:90:e8:19:54:e7:56:81:ca: 7e:82:35:7f:45:fc:cd:7b:17:11:6b:96:26:d8:18:7b:af:27: da:6c:26:ec:1e:0b:f3:3f:b3:17:ef:9b:29:05:89:0c:24:57: c3:66:3a:a8:bb:04:3a:40:e1:f1:f0:8f:d2:dc:4c:b5:42:41: af:7a:31:b8:f8:88:c9:b0:f0:d8:80:4f:42:2b:98:4d:97:66: 19:0b:fb:30:81:2f:7f:46:5d:a9:9b:30:6b:75:2d:56:2c:82: 3b:a8:70:d8:21:41:74:32:af:5b:3c:60:7b:ce:1b:0f:a3:31: 36:21:10:e8:31:76:70:a9:bc:48:5f:fd:64:ef:0b:e1:39:aa: 5f:1e:c1:c4:8a:26:d2:83:ce:57:f7:b7:83:ad:92:28:66:3e: b5:92:2b:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rViBx6ieE4HmUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTBmZjRmMjQtZmVlOC00MDgwLWJhOTEtYjRkMzRiNWUxYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f+rZzX29iANNZP36Lb/fEQ2tELYJ7nqNGtX J8lT2g1ektaYIiopEwjPQtsDIwM1KG0iAUp+61nQlTTs69fi2LdwNRf5jprc9j7e 6GK4b5QLlyEQEvATcoCSoKj45nB7OYV8kIJw6aB6MW/QZV3AnWZ39xdapzCXqtJw JKVnQknP3e9vP+g7/rsYgpYVPlSgAgFvGvxNUsOaDuhdcvjK595BWLFHozt+pFpi yduPwvDcRFQhzLKfAWhnaE4Bfm3nWFSYInM/76YAQ7CUMgmn5HPiI6rEiZFW5jAZ q1aYqSNkqaxxjyMF7fUFEx/iXCGGi1VQIOmwM39rNC40qXTPIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkjuqJ1eOF/O7jZHqmg9zOegfulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZhNmViNmItZjIzNC0z ZDY4LWFkNWMtMDFhZDkxMzcwNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCKAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1KX3hSti07rFLeP1k6q6IIstF181VcR6JPaYcbmCNuukHlrtMy pJVLR48Qs8VYv6EYo6u9UaDnylPVGBo2U9MZzNXKpPOF0W2ZeoUu0z8JAU6L7cmB RQzwET2HLPTOoEzrIc2Q6BlU51aByn6CNX9F/M17FxFrlibYGHuvJ9psJuweC/M/ sxfvmykFiQwkV8NmOqi7BDpA4fHwj9LcTLVCQa96Mbj4iMmw8NiAT0IrmE2XZhkL +zCBL39GXambMGt1LVYsgjuocNghQXQyr1s8YHvOGw+jMTYhEOgxdnCpvEhf/WTv C+E5ql8ewcSKJtKDzlf3t4OtkihmPrWSK7s= -----END CERTIFICATE-----Generated at Sun Sep 27 02:42:31 2026 by rpki-client