$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe94ba6c-86d3-30a8-b1e8-4e0db63e73a6.roa File: fe94ba6c-86d3-30a8-b1e8-4e0db63e73a6.roa (raw, json) Hash identifier: QXtHMHh4SjOjVpi9YbArX5tzuHEpwbkhkOkwZdfvPls= Subject key identifier: 01:C2:50:F3:A0:3D:2D:95:D1:69:1A:87:6B:DE:74:2D:EE:B1:E2:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D68C3C80F689A607D0D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe94ba6c-86d3-30a8-b1e8-4e0db63e73a6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2601:89:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:68:c3:c8:0f:68:9a:60:7d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9612b4de-5e8d-4d80-8ec9-26daa12295e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:6b:02:41:fa:73:83:02:ba:98:85:d9:19: ac:10:2a:07:af:f9:b9:47:81:0e:a0:f0:17:be:da: c9:dd:d1:2c:48:e5:d8:63:26:03:4c:e0:c8:d8:1c: c0:b7:b8:78:5f:b1:36:2a:70:95:7f:e9:76:5a:cd: b3:95:38:43:7f:37:bb:1f:2a:fb:d2:e3:32:32:56: cf:ef:c4:27:07:c0:69:24:97:4e:9d:a9:92:6e:cf: ad:8c:f9:35:d5:ef:d6:e6:f8:f0:a1:40:07:c4:b3: f9:f1:2b:9f:2a:d8:ab:88:b8:4c:71:de:8f:13:e5: ec:f7:5a:bb:2e:e0:fe:00:0a:6a:57:c5:fd:63:db: d8:35:b9:fb:92:26:21:64:f5:4d:6a:ca:94:87:18: da:30:53:c8:f4:a8:ba:ce:98:fa:2a:16:77:1f:0b: 7e:35:dc:76:0e:56:eb:28:50:c3:3c:83:14:b0:61: 60:c4:b0:3b:04:62:42:fc:8f:a0:29:83:c2:8b:02: 5d:cb:5f:b4:8e:94:53:ee:10:84:79:5e:06:ca:67: e0:68:9a:dd:9e:3c:6c:06:9e:79:b0:c5:54:4b:ed: 0f:24:f9:b4:fd:aa:e8:81:c4:73:3d:f4:5a:77:10: f8:b6:e4:b8:d6:44:6e:30:42:88:3e:eb:28:6d:7a: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C2:50:F3:A0:3D:2D:95:D1:69:1A:87:6B:DE:74:2D:EE:B1:E2:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe94ba6c-86d3-30a8-b1e8-4e0db63e73a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:89:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:29:47:c4:b4:88:a3:e4:91:34:ac:90:ee:dc:e2:38:61:37: da:75:f1:60:01:2a:36:8a:ea:af:ac:5e:e3:82:5e:3a:7b:c3: aa:28:39:36:5b:5e:33:d0:11:53:5d:23:d8:2e:6e:e0:99:13: 18:27:86:3e:56:cb:73:47:db:8e:b2:34:cd:39:53:48:ce:ff: 95:61:05:a9:82:fa:e3:b2:4f:79:f2:8c:53:e0:9c:7f:18:e4: 28:7b:c9:67:84:c5:7b:c5:6b:a3:54:43:9d:03:8c:83:38:3b: 8e:5b:81:75:dc:ff:2f:9d:85:c5:ce:9e:97:13:b3:a0:03:19: 22:a5:4b:da:98:1c:5b:6f:e3:bc:89:73:3c:64:d0:48:12:29: c7:b7:f6:53:f8:72:9e:40:0a:76:47:d5:bd:db:e8:a5:dc:15: f8:76:0b:d2:36:a7:ca:cd:17:6a:1f:84:48:40:28:aa:69:0d: e3:0e:32:47:56:c5:c4:86:b6:11:1e:10:be:bd:98:70:54:d9: 01:5c:3b:36:96:5a:6e:a6:71:d1:51:26:4c:1d:56:ab:36:79: 68:7a:0c:63:1f:76:60:0c:88:d0:e9:92:e0:48:1c:bc:9c:07: ff:62:66:f3:38:6a:21:00:90:6f:cd:21:67:2f:48:92:37:2b: 49:8b:5a:e1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnWjDyA9ommB9DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTYxMmI0ZGUtNWU4ZC00ZDgwLThlYzktMjZkYWExMjI5NWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+RrAkH6c4MCupiF2RmsECoHr/m5R4EOoPAX vtrJ3dEsSOXYYyYDTODI2BzAt7h4X7E2KnCVf+l2Ws2zlThDfze7Hyr70uMyMlbP 78QnB8BpJJdOnamSbs+tjPk11e/W5vjwoUAHxLP58SufKtiriLhMcd6PE+Xs91q7 LuD+AApqV8X9Y9vYNbn7kiYhZPVNasqUhxjaMFPI9Ki6zpj6KhZ3Hwt+Ndx2Dlbr KFDDPIMUsGFgxLA7BGJC/I+gKYPCiwJdy1+0jpRT7hCEeV4GymfgaJrdnjxsBp55 sMVUS+0PJPm0/arogcRzPfRadxD4tuS41kRuMEKIPusobXqWtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAHCUPOgPS2V0Wkah2vedC3useIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmU5NGJhNmMtODZkMy0z MGE4LWIxZTgtNGUwZGI2M2U3M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAicAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALilHxLSIo+SRNKyQ7tziOGE32nXxYAEqNorqr6xe44JeOnvDqig5 NlteM9ARU10j2C5u4JkTGCeGPlbLc0fbjrI0zTlTSM7/lWEFqYL647JPefKMU+Cc fxjkKHvJZ4TFe8Vro1RDnQOMgzg7jluBddz/L52Fxc6elxOzoAMZIqVL2pgcW2/j vIlzPGTQSBIpx7f2U/hynkAKdkfVvdvopdwV+HYL0janys0Xah+ESEAoqmkN4w4y R1bFxIa2ER4Qvr2YcFTZAVw7NpZabqZx0VEmTB1WqzZ5aHoMYx92YAyI0OmS4Egc vJwH/2Jm8zhqIQCQb80hZy9IkjcrSYta4Q== -----END CERTIFICATE-----Generated at Mon Sep 21 13:57:57 2026 by rpki-client