$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa File: dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa (raw, json) Hash identifier: T7hF4b9BhspATX3xY3Y7Jvlr5GWLInp4cQTlXSesGrk= Subject key identifier: B3:36:0A:BA:75:E4:78:B5:3C:05:F0:6F:EA:F6:93:5A:E6:38:51:3E Certificate issuer: /CN=496749ae-a2a0-4956-9863-7bb09c662ce1 Certificate serial: 010D0C9F4328584F331D116AB538ECD51B29DF40 Authority key identifier: CE:8D:C0:59:CF:90:34:39:7E:8B:EE:0D:2A:8A:16:B0:B4:E8:73:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 54509 IP address blocks: 2604:a5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:11:6a:b5:38:ec:d5:1b:29:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=496749ae-a2a0-4956-9863-7bb09c662ce1 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=0ec95e70-63d0-431c-b397-484b1b457bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:47:b0:75:f7:22:f2:6e:da:82:05:18:f7: 73:65:00:e6:43:a0:e5:94:48:ac:7e:c9:54:33:9c: 20:26:fb:8c:b1:a3:2f:a1:fa:6c:3e:14:de:d2:a3: e0:e5:2d:97:aa:dc:1a:ef:33:a7:74:b3:f4:c5:e9: 86:ca:3f:2c:06:f8:23:0c:9d:d7:d5:72:13:59:e4: d6:38:bb:ea:dc:df:2b:cc:5e:9a:48:90:c8:fc:1d: 92:8f:c9:7b:3b:8e:aa:44:2a:67:f3:1a:1a:b9:43: 56:c7:92:71:98:ab:bc:e7:45:00:0b:5d:d4:bd:74: 29:dd:17:72:9c:9a:49:0d:cb:c3:3b:50:6a:4f:64: d8:29:46:47:0e:68:8f:9d:9b:7b:94:91:22:55:3d: b3:69:c2:7b:ff:d0:c2:aa:45:fd:fd:48:fd:20:47: e4:f6:6a:a1:ac:f5:27:84:64:1e:dd:6e:05:d5:f8: 31:86:6b:ce:a3:95:d9:be:19:f2:d3:5b:90:b7:7a: 19:11:77:7c:8a:5a:ad:9a:18:57:1a:c3:f5:c7:3d: 8d:c3:11:e3:fd:52:41:c4:0a:5b:cf:c8:14:03:3a: de:ca:c0:01:53:b2:87:4f:9d:e9:6f:9c:4f:4b:0a: 8a:dd:dc:20:03:9c:83:d1:69:b8:fe:bf:a8:0a:70: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:0A:BA:75:E4:78:B5:3C:05:F0:6F:EA:F6:93:5A:E6:38:51:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/dfaa2096-04b8-3838-abda-5d5f24fb3cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1/496749ae-a2a0-4956-9863-7bb09c662ce1.crl X509v3 Authority Key Identifier: keyid:CE:8D:C0:59:CF:90:34:39:7E:8B:EE:0D:2A:8A:16:B0:B4:E8:73:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/496749ae-a2a0-4956-9863-7bb09c662ce1.cer sbgp-ipAddrBlock: critical IPv6: 2604:a5c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8b:d8:b6:a2:47:4e:18:d9:ad:11:56:76:8f:3c:40:d7:9e: 09:ac:d2:85:79:46:f2:ac:05:66:18:71:2d:bb:a3:22:b0:81: ed:ac:4c:cd:b7:2a:a0:b1:7e:88:32:94:6b:22:75:c3:8f:95: f9:6a:3e:2e:0b:c4:31:c5:26:11:ef:73:d9:75:6c:68:97:b1: a5:31:94:4a:2c:6a:64:21:67:1f:5a:3b:82:07:65:fe:77:e3: a2:16:38:7e:8d:bc:99:09:3f:7f:a5:1a:6d:e0:dd:1f:dc:ae: b6:ec:6b:aa:ba:c1:c2:cf:ad:37:0d:ae:1e:0c:5f:77:70:ec: 29:c5:09:f9:b6:4b:f6:71:11:77:8b:22:47:77:16:9c:b7:9b: 99:5f:62:5d:e2:91:80:e3:1f:b7:90:78:fb:7c:77:36:b1:19: 30:7b:f3:2b:89:0d:7f:50:0d:72:67:07:fd:02:2b:61:32:36: d1:fb:e8:04:c1:63:53:00:4d:97:e4:af:53:6e:10:4c:90:f6: ff:93:9a:10:a0:9d:48:f4:41:ed:fc:09:70:e4:d9:28:2d:0f: 65:43:85:e9:a9:5a:1e:a2:d0:f1:05:73:6e:df:e3:03:66:10: cf:32:42:5f:5c:e1:f3:c9:a2:57:e3:ac:4e:d7:e3:fa:13:61: 7f:68:aa:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8zHRFqtTjs1Rsp30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk2NzQ5YWUtYTJhMC00OTU2LTk4NjMtN2JiMDljNjYy Y2UxMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MGVjOTVlNzAtNjNkMC00MzFjLWIzOTctNDg0YjFiNDU3YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG9HsHX3IvJu2oIFGPdzZQDmQ6DllEisfslU M5wgJvuMsaMvofpsPhTe0qPg5S2Xqtwa7zOndLP0xemGyj8sBvgjDJ3X1XITWeTW OLvq3N8rzF6aSJDI/B2Sj8l7O46qRCpn8xoauUNWx5JxmKu850UAC13UvXQp3Rdy nJpJDcvDO1BqT2TYKUZHDmiPnZt7lJEiVT2zacJ7/9DCqkX9/Uj9IEfk9mqhrPUn hGQe3W4F1fgxhmvOo5XZvhny01uQt3oZEXd8ilqtmhhXGsP1xz2NwxHj/VJBxApb z8gUAzreysABU7KHT53pb5xPSwqK3dwgA5yD0Wm4/r+oCnD2JwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLM2Crp15Hi1PAXwb+r2k1rmOFE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OTY3 NDlhZS1hMmEwLTQ5NTYtOTg2My03YmIwOWM2NjJjZTEvZGZhYTIwOTYtMDRiOC0z ODM4LWFiZGEtNWQ1ZjI0ZmIzY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDk2NzQ5YWUtYTJhMC00OTU2LTk4 NjMtN2JiMDljNjYyY2UxLzQ5Njc0OWFlLWEyYTAtNDk1Ni05ODYzLTdiYjA5YzY2 MmNlMS5jcmwwHwYDVR0jBBgwFoAUzo3AWc+QNDl+i+4NKooWsLToc0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80OTY3NDlhZS1hMmEwLTQ5NTYtOTg2My03YmIw OWM2NjJjZTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7i9i2okdOGNmtEVZ2jzxA154JrNKFeUbyrAVmGHEtu6MisIHtrEzN tyqgsX6IMpRrInXDj5X5aj4uC8QxxSYR73PZdWxol7GlMZRKLGpkIWcfWjuCB2X+ d+OiFjh+jbyZCT9/pRpt4N0f3K627GuqusHCz603Da4eDF93cOwpxQn5tkv2cRF3 iyJHdxact5uZX2Jd4pGA4x+3kHj7fHc2sRkwe/MriQ1/UA1yZwf9AithMjbR++gE wWNTAE2X5K9TbhBMkPb/k5oQoJ1I9EHt/Alw5NkoLQ9lQ4XpqVoeotDxBXNu3+MD ZhDPMkJfXOHzyaJX46xO1+P6E2F/aKoh -----END CERTIFICATE-----Generated at Mon Sep 21 18:23:42 2026 by rpki-client