$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa File: f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa (raw, json) Hash identifier: nEbwFPEeVVTdOXXQCK/UUrNzPfr7yYOkpOh8FhAV/Tk= Subject key identifier: 09:30:EC:66:33:9E:6E:A4:07:B5:CD:F0:94:B3:75:AF:6F:F1:4E:BF Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F4328584F2957B262921E664881152700 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 955 IP address blocks: 2606:82c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b2:62:92:1e:66:48:81:15:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a3abde3b-b285-4478-ba9a-e6f48b9b6921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:cf:7e:c8:e3:26:39:94:37:c3:3c:11:4e: 85:6f:f3:ba:38:d5:a3:27:bf:61:41:42:14:0f:0a: a9:d0:fd:4b:47:17:62:32:1c:ea:3d:26:53:7d:ff: 22:c5:4c:00:ac:60:60:c0:10:a9:a9:08:11:e2:12: 1f:54:f0:84:13:f2:91:ef:2c:4f:37:e5:2d:56:0e: 98:cc:58:4a:75:89:0d:6b:27:f2:9e:f2:92:4e:27: e6:0f:e8:e6:6c:c9:cb:82:e0:cf:be:98:f1:e1:69: f3:0f:f9:21:96:19:00:d0:02:8b:40:97:ca:03:22: 10:00:95:0e:22:7b:8e:2b:12:33:c8:73:f7:15:49: 32:f6:aa:aa:fa:21:28:d7:5c:f5:00:4a:2b:66:23: 36:b9:19:ad:83:07:b8:54:8b:33:23:3e:4c:3f:25: 62:9b:41:fc:6c:ef:09:3b:d2:1f:3e:45:20:ff:c3: 2b:47:41:39:de:05:85:f5:37:e7:a2:c4:d3:8a:03: e7:3c:00:d8:7b:9a:9d:eb:9e:b4:61:e8:5b:76:bf: d0:ba:d0:8f:3b:05:29:67:29:77:f7:1a:e4:fe:3b: 1a:ec:cd:d2:e9:57:41:96:f2:8b:e6:5a:13:91:b9: ab:79:8a:1b:0a:25:7f:74:8e:3b:36:32:9f:45:bd: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:30:EC:66:33:9E:6E:A4:07:B5:CD:F0:94:B3:75:AF:6F:F1:4E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv6: 2606:82c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:a5:e9:c6:99:dc:dd:80:5d:ac:36:48:d7:eb:dd:e1:5b: e5:91:ba:1c:f5:9b:06:d0:b8:d5:6c:7f:5b:a6:14:8b:61:e1: 20:5b:69:d4:34:5e:6e:13:1e:6e:06:97:80:1e:79:b9:21:31: c0:4d:5a:df:45:65:51:06:f3:28:b9:39:2f:6f:83:71:5f:ec: 53:42:c5:2e:6f:bc:75:98:3e:d3:e7:d1:e8:d4:6e:44:e0:36: cb:dd:e4:cd:cd:af:c5:d8:18:58:d9:86:ab:c3:8a:c5:3d:be: 87:b4:cc:e1:6d:0c:ce:88:6c:87:4c:9d:38:24:f6:3b:40:bf: 7f:95:33:9c:77:6f:09:cd:22:37:30:43:0e:86:ba:be:27:48: e7:c9:05:4c:e3:f9:97:63:d2:ec:c6:8a:61:64:5e:14:81:bc: 5c:1a:71:c0:52:14:ab:81:99:79:0a:14:0a:db:13:40:dd:77: 00:03:21:7f:07:8c:d2:a8:e8:e7:05:ee:93:81:e6:4b:b8:fe: 06:09:c7:c4:45:b5:cc:98:24:67:e8:d3:de:3d:16:ee:5e:12: ab:62:ce:32:d7:b7:39:65:8d:b2:2b:c2:7e:ae:ea:63:72:e3: 6f:b0:a4:4a:51:8b:b5:34:c6:17:21:9c:d0:7c:3a:68:41:32: 54:75:62:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8pV7Jikh5mSIEVJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTNhYmRlM2ItYjI4NS00NDc4LWJhOWEtZTZmNDhiOWI2OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq3PfsjjJjmUN8M8EU6Fb/O6ONWjJ79hQUIU Dwqp0P1LRxdiMhzqPSZTff8ixUwArGBgwBCpqQgR4hIfVPCEE/KR7yxPN+UtVg6Y zFhKdYkNayfynvKSTifmD+jmbMnLguDPvpjx4WnzD/khlhkA0AKLQJfKAyIQAJUO InuOKxIzyHP3FUky9qqq+iEo11z1AEorZiM2uRmtgwe4VIszIz5MPyVim0H8bO8J O9IfPkUg/8MrR0E53gWF9TfnosTTigPnPADYe5qd6560Yehbdr/QutCPOwUpZyl3 9xrk/jsa7M3S6VdBlvKL5loTkbmreYobCiV/dI47NjKfRb1z+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAkw7GYznm6kB7XN8JSzda9v8U6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvZjZjYTY5ZmMtYWZlNS0z ZWVhLThhN2EtMTVmMThhZTZlMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbp6Xpxpnc3YBdrDZI1+vd4Vvlkboc9ZsG0LjVbH9bphSLYeEgW2nU NF5uEx5uBpeAHnm5ITHATVrfRWVRBvMouTkvb4NxX+xTQsUub7x1mD7T59Ho1G5E 4DbL3eTNza/F2BhY2Yarw4rFPb6HtMzhbQzOiGyHTJ04JPY7QL9/lTOcd28JzSI3 MEMOhrq+J0jnyQVM4/mXY9LsxophZF4UgbxcGnHAUhSrgZl5ChQK2xNA3XcAAyF/ B4zSqOjnBe6TgeZLuP4GCcfERbXMmCRn6NPePRbuXhKrYs4y17c5ZY2yK8J+rupj cuNvsKRKUYu1NMYXIZzQfDpoQTJUdWLl -----END CERTIFICATE-----Generated at Sun Sep 20 13:54:19 2026 by rpki-client