$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa File: dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa (raw, json) Hash identifier: YBAqNu3oQjKoruDay1fGsQg+8rFUl1SJ1TcbXZa1BoA= Subject key identifier: 60:2E:3C:74:51:E3:26:9A:24:2B:7B:6B:F0:84:42:7B:7D:17:58:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F62930D5969613A7BBBE6A480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 13335 IP address blocks: 2606:54c2:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0d:59:69:61:3a:7b:bb:e6:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f1fdbcbe-c3a1-437b-8828-88170088f3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:8d:e9:ea:c2:48:31:b2:9f:6d:82:d2:28: de:a4:a5:6f:b9:b7:60:d3:c6:48:b1:41:42:24:64: 62:e8:c9:cd:cf:ab:ed:14:69:23:7a:a9:69:5e:32: 28:d2:a9:b2:d5:5e:32:d5:1e:d0:b5:6d:d4:90:8e: e7:a0:01:76:01:91:b5:4f:b3:a9:bb:2f:e3:6b:40: 3b:c4:08:30:a0:1e:d0:f4:f1:ec:eb:22:da:72:da: 81:6b:39:4f:8b:7d:40:dc:bf:85:32:d7:b1:d8:3a: 25:8d:9d:67:df:50:b2:55:04:e8:13:11:fd:fb:ef: 2f:d6:39:ad:15:d2:de:19:95:21:f2:be:f1:f6:be: 02:18:b4:21:58:6e:72:92:24:61:71:ff:4b:22:23: 35:8a:dd:56:41:ba:af:97:75:d0:fd:63:e8:1b:c0: 64:1d:ef:e0:2f:f1:67:f7:a3:d4:38:5c:50:a5:37: ef:a7:ba:46:b9:ce:99:ef:34:59:30:bc:4c:99:cc: 07:de:35:4c:a8:ee:c1:b8:c1:22:ed:ad:06:96:01: ba:17:23:1d:67:12:ca:d7:3e:8c:cc:c9:50:dc:78: 11:ae:f0:9e:05:8c:af:1f:9c:59:b3:d6:27:87:a1: f8:89:ad:35:2a:fb:33:55:b1:41:41:be:a9:4f:f7: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2E:3C:74:51:E3:26:9A:24:2B:7B:6B:F0:84:42:7B:7D:17:58:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dffea1ec-585e-31bd-894c-f83a5d3c6bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:54c2:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1e:02:a3:dd:30:46:e7:59:44:44:80:2b:4d:2b:dc:10:9d: 8c:e1:d8:3d:e5:0e:4d:71:9c:4b:50:1f:5f:0b:b1:dd:30:7a: 50:70:aa:59:aa:d3:45:9a:c7:bf:bc:c9:81:6c:34:86:49:26: 2f:ee:77:34:2d:c8:3e:2d:d5:95:98:4c:17:d3:ca:91:54:10: 5c:5e:e3:e1:66:d4:9f:0f:01:70:7b:46:11:eb:37:93:80:7b: 7d:a9:0f:1d:9c:c7:36:ed:ff:03:95:54:63:23:bd:d8:07:0c: 20:0d:f5:b2:59:92:3f:ca:bd:7a:14:fe:4a:f4:6a:9c:cf:c6: 44:53:5d:71:a3:74:5f:4c:9f:db:f5:10:65:cf:b1:23:d0:51: 47:4b:62:35:73:60:05:05:06:cb:91:86:0e:a4:d1:84:bb:62: 9e:71:a5:13:0e:c7:b6:c0:b2:91:4a:de:03:26:dd:73:13:24: 3f:ca:e5:76:df:4c:9b:ae:60:85:15:2e:53:96:41:2d:29:0b: 14:af:47:2a:5b:d0:be:a1:62:e2:24:a6:08:cd:4d:17:85:e7: 56:54:2a:55:6e:e6:9c:19:f5:6b:77:48:36:53:51:20:fb:09: fb:de:8a:5f:3a:d9:de:6c:6a:12:79:9e:d6:b7:5b:4b:a6:12: f1:90:f6:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikw1ZaWE6e7vmpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjFmZGJjYmUtYzNhMS00MzdiLTg4MjgtODgxNzAwODhmM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPyN6erCSDGyn22C0ijepKVvubdg08ZIsUFC JGRi6MnNz6vtFGkjeqlpXjIo0qmy1V4y1R7QtW3UkI7noAF2AZG1T7Opuy/ja0A7 xAgwoB7Q9PHs6yLactqBazlPi31A3L+FMtex2DoljZ1n31CyVQToExH9++8v1jmt FdLeGZUh8r7x9r4CGLQhWG5ykiRhcf9LIiM1it1WQbqvl3XQ/WPoG8BkHe/gL/Fn 96PUOFxQpTfvp7pGuc6Z7zRZMLxMmcwH3jVMqO7BuMEi7a0GlgG6FyMdZxLK1z6M zMlQ3HgRrvCeBYyvH5xZs9Ynh6H4ia01KvszVbFBQb6pT/ekSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAuPHRR4yaaJCt7a/CEQnt9F1iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZmZWExZWMtNTg1ZS0z MWJkLTg5NGMtZjgzYTVkM2M2YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwgAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0eAqPdMEbnWUREgCtNK9wQnYzh2D3lDk1xnEtQH18Lsd0welBw qlmq00Wax7+8yYFsNIZJJi/udzQtyD4t1ZWYTBfTypFUEFxe4+Fm1J8PAXB7RhHr N5OAe32pDx2cxzbt/wOVVGMjvdgHDCAN9bJZkj/KvXoU/kr0apzPxkRTXXGjdF9M n9v1EGXPsSPQUUdLYjVzYAUFBsuRhg6k0YS7Yp5xpRMOx7bAspFK3gMm3XMTJD/K 5XbfTJuuYIUVLlOWQS0pCxSvRypb0L6hYuIkpgjNTReF51ZUKlVu5pwZ9Wt3SDZT USD7Cfveil862d5sahJ5nta3W0umEvGQ9v4= -----END CERTIFICATE-----Generated at Sat Oct 10 14:48:19 2026 by rpki-client