$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa File: a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa (raw, json) Hash identifier: 02mAB9AzkJmcVc1Wr3AUObnbmlKWwU5J5hA3jl4ZQXY= Subject key identifier: 1B:35:33:30:F2:1A:38:86:CA:21:8A:D2:F6:91:29:6B:28:80:C6:2B Certificate issuer: /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Certificate serial: 010D0C9F4328584EFE12102DD7224C092231CD80 Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 398378 IP address blocks: 2605:c540:8c00::/42 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:10:2d:d7:22:4c:09:22:31:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=a0f15a6a-1827-4d28-9c56-9369ea85a75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:39:37:9c:b0:0d:89:05:d4:a8:a0:23:37: 8a:4d:51:75:cc:eb:60:59:35:a2:41:12:52:bf:02: b2:04:39:e8:db:14:6a:d4:f1:c8:b4:2f:54:37:ed: 64:0b:f4:a6:b4:93:15:b1:8e:05:49:80:6d:6a:08: 3b:93:a0:4b:35:72:a4:8c:18:01:12:1a:a4:db:85: 48:e2:36:d6:d7:2e:d0:db:3a:95:c4:62:15:12:d6: 50:05:99:ee:25:2e:a8:ce:a5:8c:9d:62:0c:61:f1: c2:e0:52:24:c3:6b:67:76:f1:12:30:0e:9d:dd:fd: 72:be:7b:c1:0e:2d:10:aa:ec:ac:6e:e6:b6:a5:cd: aa:e0:db:53:90:67:17:a7:ae:7a:b6:bb:9d:98:b5: 72:2c:5b:e9:03:88:80:9b:6d:4a:33:73:49:6b:28: e2:6b:f7:f4:db:fb:07:b4:88:c4:59:82:55:90:41: e1:e6:0a:52:0d:aa:4d:a7:39:87:de:da:cf:b5:4c: 77:38:2b:f6:9f:d0:95:7c:13:53:1a:20:9b:e5:22: 3f:6b:68:1f:4f:10:59:a4:65:8b:e0:2a:de:39:92: 32:7a:cd:0e:73:d1:a7:9c:38:34:9e:eb:53:b5:09: 6b:03:f8:8d:6a:f1:f0:60:e8:4b:9f:10:a9:91:47: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:35:33:30:F2:1A:38:86:CA:21:8A:D2:F6:91:29:6B:28:80:C6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl X509v3 Authority Key Identifier: keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer sbgp-ipAddrBlock: critical IPv6: 2605:c540:8c00::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:66:52:05:fc:53:78:88:ff:09:34:65:55:09:70:a3:ae:9a: ce:97:33:43:71:a4:6f:a2:50:6f:b9:c6:a6:d6:a0:9e:06:57: 1d:07:67:52:02:ff:f0:3b:73:68:a4:90:1a:34:66:1f:34:4c: 27:2e:72:f5:10:06:5f:ae:ca:48:c8:ab:18:e1:0f:05:d0:a7: 90:93:b9:d4:60:1f:53:28:6c:2f:06:66:4a:7e:2f:7b:db:c4: e0:ba:78:59:eb:5b:06:58:d2:46:7d:1c:96:a3:c9:f3:18:47: 09:73:1c:69:d9:92:4b:4d:69:0b:d3:ca:d6:e6:0a:c4:26:3f: 80:71:ea:fb:66:bc:62:e5:27:58:a8:14:28:5e:28:03:25:25: dd:23:69:7d:7f:e3:3d:7c:23:2e:ef:c1:12:3c:07:4b:aa:ca: 95:e1:47:6e:2e:f9:2e:31:fb:7b:0f:2f:0c:18:47:ad:47:44: 1e:5d:df:68:be:24:d7:fc:db:1d:3f:3c:a2:0a:a3:18:ca:8d: 27:66:e6:af:42:ee:df:d3:1f:ac:eb:51:2a:50:ae:f1:fa:b8: 07:8b:d7:5e:e2:d8:80:87:27:9e:b1:20:5e:91:9b:6e:f4:96: 04:4e:00:2d:41:96:3c:49:f8:2a:e9:4d:66:5a:d6:4e:de:7a: 4d:c8:64:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7+EhAt1yJMCSIxzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj YzI3MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YTBmMTVhNmEtMTgyNy00ZDI4LTljNTYtOTM2OWVhODVhNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRM5N5ywDYkF1KigIzeKTVF1zOtgWTWiQRJS vwKyBDno2xRq1PHItC9UN+1kC/SmtJMVsY4FSYBtagg7k6BLNXKkjBgBEhqk24VI 4jbW1y7Q2zqVxGIVEtZQBZnuJS6ozqWMnWIMYfHC4FIkw2tndvESMA6d3f1yvnvB Di0Qquysbua2pc2q4NtTkGcXp656trudmLVyLFvpA4iAm21KM3NJayjia/f02/sH tIjEWYJVkEHh5gpSDapNpzmH3trPtUx3OCv2n9CVfBNTGiCb5SI/a2gfTxBZpGWL 4CreOZIyes0Oc9GnnDg0nutTtQlrA/iNavHwYOhLnxCpkUfrLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBs1MzDyGjiGyiGK0vaRKWsogMYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvYTU1OWM0M2EtODIyYS0z YWYzLTkwYTktYWQ4YWZjN2E0YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5 NmFjY2NjMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgXFQIwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpmUgX8U3iI/wk0ZVUJcKOums6XM0NxpG+iUG+5xqbWoJ4GVx0H Z1IC//A7c2ikkBo0Zh80TCcucvUQBl+uykjIqxjhDwXQp5CTudRgH1MobC8GZkp+ L3vbxOC6eFnrWwZY0kZ9HJajyfMYRwlzHGnZkktNaQvTytbmCsQmP4Bx6vtmvGLl J1ioFCheKAMlJd0jaX1/4z18Iy7vwRI8B0uqypXhR24u+S4x+3sPLwwYR61HRB5d 32i+JNf82x0/PKIKoxjKjSdm5q9C7t/TH6zrUSpQrvH6uAeL117i2ICHJ56xIF6R m270lgROAC1BljxJ+CrpTWZa1k7eek3IZNE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:25:39 2026 by rpki-client