$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa File: 10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa (raw, json) Hash identifier: ask0Z51sKfQfBvtfcxYqF5G23V7WRVe/j3AkV6RDag0= Subject key identifier: 40:96:C9:A6:6D:CC:05:E3:C1:6E:B0:6C:8C:05:FD:C0:A6:A6:6F:73 Certificate issuer: /CN=e20283c0-db21-4d92-ac23-4da5857d3bfd Certificate serial: 010D0C9F4328584F1897A22EA5F5FCCFB05C2380 Authority key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 11260 IP address blocks: 2604:1ec0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a2:2e:a5:f5:fc:cf:b0:5c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=1e1bce9f-f4a4-4147-8d79-55f3bbc560cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:11:b1:ce:de:08:c2:d8:04:7a:78:29:74: c7:0b:89:9a:78:2a:53:96:51:e6:24:93:64:1c:17: 0b:a9:d2:79:16:3a:b1:8b:2d:49:b5:32:5b:a1:5e: 07:92:0a:e3:fc:4e:fb:00:06:21:31:39:42:b8:c0: ef:be:fd:54:e8:06:d8:c0:87:29:66:36:95:dd:99: 20:8b:55:8d:89:01:7b:a3:6d:6c:c1:66:db:2e:f6: 5c:7c:4d:a2:1a:5f:cf:44:cf:8f:0c:1c:11:3c:dc: e8:3e:65:4e:99:5b:22:1e:cf:bb:75:21:0a:e5:f0: 8e:af:d7:62:7c:b8:f0:0a:5d:52:1a:7f:44:36:fa: b8:1e:7f:7b:82:61:b2:0e:d2:22:1f:de:a6:0f:34: 49:7e:4f:3d:b3:8b:9d:3f:7b:91:e3:c6:87:a5:8d: 84:17:ad:c8:ad:50:bc:10:4e:1a:25:d2:7e:9e:54: 87:60:2f:67:58:e9:12:48:b7:3d:47:23:8e:0d:85: 12:2d:fb:31:3b:79:28:5d:58:a8:16:1e:27:fe:af: 4a:c0:7b:f3:18:92:4f:6c:90:6c:2b:c4:e4:78:5a: a0:05:12:4c:cc:b9:c4:3a:da:35:96:f8:ae:27:a8: c9:7d:33:f5:73:ce:67:c4:24:ad:46:d9:3a:31:f6: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:96:C9:A6:6D:CC:05:E3:C1:6E:B0:6C:8C:05:FD:C0:A6:A6:6F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl X509v3 Authority Key Identifier: keyid:26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer sbgp-ipAddrBlock: critical IPv6: 2604:1ec0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:78:1b:80:d5:fc:32:a3:dd:ab:32:35:93:2c:88:de:4a:0c: 3f:84:6a:0d:81:28:2f:1c:9c:ca:fe:f2:17:a3:ae:f0:a7:95: 98:71:77:5c:8e:34:a2:80:98:7e:7b:db:20:93:ef:8d:d9:ec: 53:00:77:dd:c3:65:7a:32:cb:4b:87:1e:91:59:a4:21:1a:b4: c6:ce:c3:2e:6e:7a:72:09:2f:43:21:77:3e:3f:4f:28:7a:f3: be:a5:0d:0f:b2:2a:29:66:d7:ae:d8:fa:28:9e:e2:93:57:f0: 9b:54:e4:29:de:f4:b6:c9:92:54:3f:79:6f:ee:33:82:83:27: d4:9d:63:14:67:a6:dd:74:cd:4f:87:ae:1b:2b:2e:ed:8c:05: ec:d3:5f:06:c3:f8:fc:fb:27:e2:85:1e:28:88:eb:ec:0a:ce: 43:df:92:ae:6b:97:b6:8e:5a:50:51:e9:cd:40:57:7e:60:dd: af:cf:50:0d:a5:27:4f:6f:81:7b:59:ee:6b:6e:cf:67:ff:e4: b6:49:1d:77:94:93:e6:20:c4:4b:a9:22:e1:cf:16:cc:f3:f0: 26:cc:1b:65:fe:04:28:f0:84:d9:45:51:9d:86:77:1b:40:c2: 66:64:f3:e6:c5:91:df:f5:e3:d2:a1:d9:f8:fc:9c:4f:b6:25: be:8d:00:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Yl6IupfX8z7BcI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMjgzYzAtZGIyMS00ZDkyLWFjMjMtNGRhNTg1N2Qz YmZkMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWUxYmNlOWYtZjRhNC00MTQ3LThkNzktNTVmM2JiYzU2MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlosRsc7eCMLYBHp4KXTHC4maeCpTllHmJJNk HBcLqdJ5Fjqxiy1JtTJboV4Hkgrj/E77AAYhMTlCuMDvvv1U6AbYwIcpZjaV3Zkg i1WNiQF7o21swWbbLvZcfE2iGl/PRM+PDBwRPNzoPmVOmVsiHs+7dSEK5fCOr9di fLjwCl1SGn9ENvq4Hn97gmGyDtIiH96mDzRJfk89s4udP3uR48aHpY2EF63IrVC8 EE4aJdJ+nlSHYC9nWOkSSLc9RyOODYUSLfsxO3koXVioFh4n/q9KwHvzGJJPbJBs K8TkeFqgBRJMzLnEOto1lviuJ6jJfTP1c85nxCStRtk6MfaKFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFECWyaZtzAXjwW6wbIwF/cCmpm9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMjAy ODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3ZDNiZmQvMTBkZDZhNjAtYWE5NC0z YzY3LWI5YjgtZTg2OTNlZjIxNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTIwMjgzYzAtZGIyMS00ZDkyLWFj MjMtNGRhNTg1N2QzYmZkL2UyMDI4M2MwLWRiMjEtNGQ5Mi1hYzIzLTRkYTU4NTdk M2JmZC5jcmwwHwYDVR0jBBgwFoAUJtJ74D8KSKohrvxJ62UIMxcDic8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lMjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1 ODU3ZDNiZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQewAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS3gbgNX8MqPdqzI1kyyI3koMP4RqDYEoLxycyv7yF6Ou8KeVmHF3 XI40ooCYfnvbIJPvjdnsUwB33cNlejLLS4cekVmkIRq0xs7DLm56cgkvQyF3Pj9P KHrzvqUND7IqKWbXrtj6KJ7ik1fwm1TkKd70tsmSVD95b+4zgoMn1J1jFGem3XTN T4euGysu7YwF7NNfBsP4/Psn4oUeKIjr7ArOQ9+SrmuXto5aUFHpzUBXfmDdr89Q DaUnT2+Be1nua27PZ//ktkkdd5ST5iDES6ki4c8WzPPwJswbZf4EKPCE2UVRnYZ3 G0DCZmTz5sWR3/Xj0qHZ+PycT7Ylvo0AMw== -----END CERTIFICATE-----Generated at Mon Sep 21 09:36:21 2026 by rpki-client