$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa File: 5094c408-dfa0-367e-81af-35f1f25d1afd.roa (raw, json) Hash identifier: Ki5ZpdKZwESAeuq10PymeYw0azgmEXascgHPPLMEGhw= Subject key identifier: 24:6E:57:B5:90:F6:07:B7:89:F5:57:D2:A5:31:9A:03:30:BB:18:C7 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584F3E47E576624D4BE5F9529D30 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20253 IP address blocks: 2606:bc40:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e5:76:62:4d:4b:e5:f9:52:9d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=db803d53-0f3c-42ce-ac6a-7c071f5670e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:4c:aa:2d:b3:fc:98:e0:b1:dc:03:37:69: 8b:b4:b8:ee:3b:6a:4a:99:85:49:c2:1d:3d:ac:16: 72:31:e8:47:c0:77:ec:a2:bc:6c:8c:b1:e4:aa:8b: 72:bb:91:00:81:e9:11:27:61:7f:40:8c:2e:ba:88: dd:f4:ee:76:84:48:00:85:07:05:d2:b1:61:44:71: fd:92:d1:c8:ee:2d:f2:95:1e:53:80:ca:12:63:73: e6:7f:b5:2d:5f:78:bd:8c:5b:3e:1d:2c:c7:dc:8c: bd:8e:7f:22:03:5d:3e:e3:71:5b:7e:68:de:06:f0: 29:cc:ce:06:a8:b8:ad:fb:7c:f1:b0:0c:62:7c:3c: 7b:fb:33:6d:9b:3b:f6:a1:61:3b:23:6c:6f:70:13: 81:07:a5:e4:81:65:c3:c0:9a:26:fc:d6:f5:01:ad: 08:a9:a7:73:50:3d:f2:c8:04:fb:9a:76:a3:34:c8: 53:cf:62:43:32:c3:31:1c:c0:4c:9c:b0:27:4f:ef: cf:b0:0c:bb:cd:78:84:d7:07:9b:a3:23:75:98:d3: be:e4:ac:99:c9:0c:05:dc:49:d2:3e:23:83:5f:d5: 5e:2e:6d:73:e4:63:bf:5e:52:c0:76:64:be:b7:8f: 00:e2:52:67:10:b0:a5:5c:c6:79:1e:74:1d:9b:b9: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:57:B5:90:F6:07:B7:89:F5:57:D2:A5:31:9A:03:30:BB:18:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:3e:e5:e2:6b:c4:ea:65:cc:5c:35:89:e3:e1:a8:78:32:02: 7c:39:b8:41:58:8f:ac:df:e1:8c:b2:da:b2:fa:e4:8e:bd:33: c5:7e:65:e7:60:a9:68:87:cc:58:96:02:3a:e7:82:99:a0:42: 05:61:6e:90:11:79:bf:bb:d2:de:dd:cd:d1:97:ec:c0:c8:19: 9b:fe:57:10:05:80:3a:91:d1:62:b3:1a:2a:d3:f0:1c:56:9b: 5a:a3:60:9d:7d:3f:ad:bd:8b:46:9f:bd:ed:29:56:78:47:25: d3:8a:8f:ba:5d:29:9f:9a:2c:a1:42:24:0e:43:36:75:c7:fb: ff:b5:4e:8a:ab:bc:08:9a:3d:bc:2f:12:e0:4f:7f:47:95:3b: c3:07:1c:ab:28:d6:0c:6a:c7:68:d4:ac:92:13:4e:2d:0b:b1: 51:fd:79:fb:56:0e:62:c3:1b:ae:ad:78:2e:05:a8:27:4a:cc: a3:63:5a:6f:33:b9:1b:61:83:d2:2b:59:ca:52:b9:64:10:c8: f9:36:6d:e3:a6:8b:79:0e:3a:61:9e:21:24:d5:d7:bb:be:6a: 12:8f:52:7d:af:6d:7d:a2:5a:15:71:75:51:dd:e6:d9:8d:6b: 66:e2:dc:67:f8:c7:c5:77:84:63:56:5f:d1:62:d1:cb:d6:82: a5:bc:b3:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+R+V2Yk1L5flSnTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZGI4MDNkNTMtMGYzYy00MmNlLWFjNmEtN2MwNzFmNTY3MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxJMqi2z/JjgsdwDN2mLtLjuO2pKmYVJwh09 rBZyMehHwHfsorxsjLHkqotyu5EAgekRJ2F/QIwuuojd9O52hEgAhQcF0rFhRHH9 ktHI7i3ylR5TgMoSY3Pmf7UtX3i9jFs+HSzH3Iy9jn8iA10+43FbfmjeBvApzM4G qLit+3zxsAxifDx7+zNtmzv2oWE7I2xvcBOBB6XkgWXDwJom/Nb1Aa0IqadzUD3y yAT7mnajNMhTz2JDMsMxHMBMnLAnT+/PsAy7zXiE1weboyN1mNO+5KyZyQwF3EnS PiODX9VeLm1z5GO/XlLAdmS+t48A4lJnELClXMZ5HnQdm7lP4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRuV7WQ9ge3ifVX0qUxmgMwuxjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNTA5NGM0MDgtZGZhMC0z NjdlLTgxYWYtMzVmMWYyNWQxYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKw+5eJrxOplzFw1iePhqHgyAnw5uEFYj6zf4Yyy2rL65I69M8V+ ZedgqWiHzFiWAjrngpmgQgVhbpAReb+70t7dzdGX7MDIGZv+VxAFgDqR0WKzGirT 8BxWm1qjYJ19P629i0afve0pVnhHJdOKj7pdKZ+aLKFCJA5DNnXH+/+1ToqrvAia PbwvEuBPf0eVO8MHHKso1gxqx2jUrJITTi0LsVH9eftWDmLDG66teC4FqCdKzKNj Wm8zuRthg9IrWcpSuWQQyPk2beOmi3kOOmGeISTV17u+ahKPUn2vbX2iWhVxdVHd 5tmNa2bi3Gf4x8V3hGNWX9Fi0cvWgqW8s50= -----END CERTIFICATE-----Generated at Tue Sep 22 19:09:21 2026 by rpki-client