$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0966fcc-4a47-3df9-b706-dd853d1d1800.roa File: d0966fcc-4a47-3df9-b706-dd853d1d1800.roa (raw, json) Hash identifier: rauEI29ALuQIavQiI8E0XRA/KCh0b2eP21RlG3ddLf8= Subject key identifier: F4:15:8B:00:07:2D:03:8A:90:88:70:B4:98:35:17:9D:4D:A6:A2:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EC09E21D8F8C396A5D7B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0966fcc-4a47-3df9-b706-dd853d1d1800.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2601:84::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:c0:9e:21:d8:f8:c3:96:a5:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f988b510-72cc-4976-83f9-87ba32fa689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:cd:9a:ec:e9:36:e5:3f:e5:89:95:33:40: 77:35:22:33:a7:60:f4:2a:a4:96:66:c5:a2:c6:84: f0:3a:3f:68:c8:b5:e7:ab:7d:4e:92:ed:2f:4e:53: d7:4c:f9:b7:b0:62:35:c7:1b:5d:9d:48:01:f2:a2: 2d:41:62:10:9f:9b:26:b2:47:ca:12:04:7c:94:e6: bd:13:fb:05:44:f0:fa:20:4f:34:c6:7a:52:d6:4b: 20:66:d7:d0:7d:10:36:49:38:96:87:3b:54:0f:aa: 8a:53:c5:1f:76:11:84:22:8a:a2:45:20:d5:ba:ae: bf:0a:50:fd:d5:87:90:3f:50:4e:c8:03:4b:5e:9e: 7b:95:af:9b:30:25:0f:39:9e:15:ca:9d:7c:40:f9: f1:dd:67:e7:db:db:1a:49:02:cc:99:a4:c5:0e:59: a3:f6:19:e0:5d:1a:9f:20:ad:58:59:db:b9:5d:45: 16:f9:d8:47:0f:0c:40:4f:85:01:ab:d4:af:eb:05: c3:b3:62:89:91:2b:84:ca:19:c4:ce:29:94:9b:94: 2a:5f:28:29:94:30:3c:41:8e:7c:e2:ca:1b:e8:67: ee:22:de:6e:0c:f9:0b:18:d4:8b:ee:64:63:40:c4: c8:1b:42:ea:1c:56:6d:1d:c9:22:dd:f4:ed:f9:c0: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:15:8B:00:07:2D:03:8A:90:88:70:B4:98:35:17:9D:4D:A6:A2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0966fcc-4a47-3df9-b706-dd853d1d1800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:84::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e3:71:99:44:94:26:44:bf:a2:6a:ac:49:8c:09:a5:2d:d2: 5a:0b:a1:2d:8e:1d:bb:72:08:6b:0c:6c:1e:44:15:1a:04:cb: f4:cb:3c:42:a1:c3:ac:2d:bf:f6:3d:4e:ce:53:1b:f3:e4:27: 6a:cc:78:06:6c:a4:8f:a9:de:30:87:2b:9c:a1:b7:8b:c9:c5: d6:1c:ef:c1:e8:6f:fe:ad:84:56:ac:60:98:b4:45:15:84:c1: b6:57:d6:3a:c3:1a:50:64:15:24:c0:d3:a1:17:21:e2:13:e7: 1a:42:ac:d1:e5:22:7b:80:5a:cb:5e:5e:48:93:8a:fd:a4:a9: 5a:16:20:d8:bd:8f:fe:d3:ef:1a:66:52:6e:b2:6b:03:82:c7: 1f:af:9f:08:de:6d:6c:41:31:97:ae:be:88:01:83:7f:8e:a6: cb:57:05:d4:ab:31:3d:f1:55:f3:c2:0d:78:30:29:3d:a9:49: 70:c6:0b:37:f5:8c:64:03:cd:fa:f9:10:14:8f:80:77:56:71: cb:85:03:b3:0d:9f:9d:2d:bb:37:14:d9:51:49:4a:22:f6:17: cb:06:b8:01:92:85:fb:e6:7b:2c:8b:c7:4a:5d:16:83:5c:14: a7:f2:85:9a:64:c6:16:cf:49:ff:18:35:3f:cd:ba:f9:d0:72: 16:7e:8c:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnsCeIdj4w5al17AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjk4OGI1MTAtNzJjYy00OTc2LTgzZjktODdiYTMyZmE2ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XbNmuzpNuU/5YmVM0B3NSIzp2D0KqSWZsWi xoTwOj9oyLXnq31Oku0vTlPXTPm3sGI1xxtdnUgB8qItQWIQn5smskfKEgR8lOa9 E/sFRPD6IE80xnpS1ksgZtfQfRA2STiWhztUD6qKU8UfdhGEIoqiRSDVuq6/ClD9 1YeQP1BOyANLXp57la+bMCUPOZ4Vyp18QPnx3Wfn29saSQLMmaTFDlmj9hngXRqf IK1YWdu5XUUW+dhHDwxAT4UBq9Sv6wXDs2KJkSuEyhnEzimUm5QqXygplDA8QY58 4sob6GfuIt5uDPkLGNSL7mRjQMTIG0LqHFZtHcki3fTt+cBcbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPQViwAHLQOKkIhwtJg1F51NpqLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA5NjZmY2MtNGE0Ny0z ZGY5LWI3MDYtZGQ4NTNkMWQxODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAhAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAweNxmUSUJkS/omqsSYwJpS3SWguhLY4du3IIawxsHkQVGgTL9Ms8 QqHDrC2/9j1OzlMb8+Qnasx4Bmykj6neMIcrnKG3i8nF1hzvwehv/q2EVqxgmLRF FYTBtlfWOsMaUGQVJMDToRch4hPnGkKs0eUie4Bay15eSJOK/aSpWhYg2L2P/tPv GmZSbrJrA4LHH6+fCN5tbEExl66+iAGDf46my1cF1KsxPfFV88INeDApPalJcMYL N/WMZAPN+vkQFI+Ad1Zxy4UDsw2fnS27NxTZUUlKIvYXywa4AZKF++Z7LIvHSl0W g1wUp/KFmmTGFs9J/xg1P826+dByFn6MRQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:50:27 2026 by rpki-client