$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa File: 04dbe57b-abe5-37c5-9c22-633c31b5d406.roa (raw, json) Hash identifier: qatC+xZHDJxIHFW0NWnKCh9RzplYHz9yTx7t9+r32rs= Subject key identifier: 06:A0:DA:4B:82:70:FE:D9:CE:D4:51:CC:D2:21:2E:3A:EC:BA:2C:82 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584F71ED898CAF5E6D7BEE8D7700 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 6639 IP address blocks: 2606:600::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:89:8c:af:5e:6d:7b:ee:8d:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=9bdf2495-9480-4043-8960-194056023e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:b0:99:f3:6a:fa:98:b8:4a:23:cd:f8:17: 95:c3:88:91:ad:2a:9d:d5:bd:c4:91:4a:7a:30:51: b5:f6:d6:85:ef:20:f0:54:a2:bc:97:cd:35:cf:ef: af:c1:d7:7b:3a:48:4a:27:3c:2e:00:25:16:14:2a: 0e:7d:fa:1b:d1:21:44:71:76:ee:ea:eb:32:1a:fa: be:07:e5:42:35:b5:cd:3c:c2:68:19:0e:7a:6f:89: fe:71:4c:22:a0:fc:4b:88:72:e3:e1:d5:83:b4:72: 4e:fa:d4:86:6b:32:d2:b2:1f:a5:80:5b:d8:65:48: d9:e8:af:67:4e:a7:50:38:c0:32:5c:b3:d1:a5:14: c1:c8:34:59:5d:ec:cd:6f:df:70:7e:7e:25:b3:5b: 2f:c9:dd:02:69:de:4d:8f:b5:f7:9e:86:3d:4f:de: 55:da:29:bb:03:86:68:27:24:9e:99:d8:82:13:95: cb:c6:3b:96:74:c8:ea:8b:f7:92:66:41:9d:93:58: b3:2b:63:5e:b1:6b:83:1f:28:cc:8d:dc:5a:52:54: 16:b7:24:67:ef:33:27:ae:10:21:d7:02:bb:03:48: 96:9f:e5:ae:a9:9b:92:d5:79:ff:bb:fa:72:2d:c1: a2:7e:71:c8:c4:44:70:be:6e:7c:f3:a5:e1:0b:bc: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A0:DA:4B:82:70:FE:D9:CE:D4:51:CC:D2:21:2E:3A:EC:BA:2C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/04dbe57b-abe5-37c5-9c22-633c31b5d406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv6: 2606:600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:be:b6:1f:66:07:9e:86:4a:4c:88:9f:4d:d8:67:2c:95:8e: 7c:b9:cf:2a:aa:d1:a4:32:7e:41:e8:bc:1a:38:18:76:ed:91: 9a:ec:4c:30:bf:6b:c0:be:83:51:5e:a1:59:76:92:c6:59:40: ae:4e:dc:17:c1:58:af:22:16:78:20:b9:13:58:5f:10:a4:4b: 90:e0:f1:8b:68:85:45:7b:bb:55:e7:ef:03:26:18:95:9b:8c: 51:fd:70:7b:28:64:13:fb:7e:db:2f:83:74:1c:f2:08:17:66: 95:6b:e5:35:db:c2:b7:4f:4b:4e:71:9d:bf:14:11:d2:71:16: 80:76:62:6e:36:e2:92:16:52:33:7c:89:3a:08:b3:21:21:bf: ec:9e:7b:00:7d:91:7d:12:de:c8:45:5b:87:48:aa:f5:84:53: a6:cb:1f:f6:34:ff:38:b8:35:d2:e6:01:e2:09:21:fd:ae:ed: 43:fd:93:b1:28:95:aa:ef:5f:ab:4c:2e:08:89:c4:c7:b7:44: 21:d6:91:b3:ae:06:de:c9:b1:b1:b9:7e:3f:9d:2e:d1:ac:0a: b6:e1:80:31:03:30:56:3e:4b:18:8c:e5:d6:e9:2e:af:ac:4e: ec:1d:a5:59:54:e6:e3:56:64:24:42:8f:b4:e9:6d:0c:8e:35: db:e2:69:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9x7YmMr15te+6NdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OWJkZjI0OTUtOTQ4MC00MDQzLTg5NjAtMTk0MDU2MDIzZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZuwmfNq+pi4SiPN+BeVw4iRrSqd1b3EkUp6 MFG19taF7yDwVKK8l801z++vwdd7OkhKJzwuACUWFCoOffob0SFEcXbu6usyGvq+ B+VCNbXNPMJoGQ56b4n+cUwioPxLiHLj4dWDtHJO+tSGazLSsh+lgFvYZUjZ6K9n TqdQOMAyXLPRpRTByDRZXezNb99wfn4ls1svyd0Cad5Nj7X3noY9T95V2im7A4Zo JySemdiCE5XLxjuWdMjqi/eSZkGdk1izK2NesWuDHyjMjdxaUlQWtyRn7zMnrhAh 1wK7A0iWn+WuqZuS1Xn/u/pyLcGifnHIxERwvm5886XhC7x3aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAag2kuCcP7ZztRRzNIhLjrsuiyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMDRkYmU1N2ItYWJlNS0z N2M1LTljMjItNjMzYzMxYjVkNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYGADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHvrYfZgeehkpMiJ9N2GcslY58uc8qqtGkMn5B6LwaOBh27ZGa7Eww v2vAvoNRXqFZdpLGWUCuTtwXwVivIhZ4ILkTWF8QpEuQ4PGLaIVFe7tV5+8DJhiV m4xR/XB7KGQT+37bL4N0HPIIF2aVa+U128K3T0tOcZ2/FBHScRaAdmJuNuKSFlIz fIk6CLMhIb/snnsAfZF9Et7IRVuHSKr1hFOmyx/2NP84uDXS5gHiCSH9ru1D/ZOx KJWq71+rTC4IicTHt0Qh1pGzrgbeybGxuX4/nS7RrAq24YAxAzBWPksYjOXW6S6v rE7sHaVZVObjVmQkQo+06W0MjjXb4mkG -----END CERTIFICATE-----Generated at Tue Oct 13 17:42:14 2026 by rpki-client