$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/b86b5631-04fe-3eb4-a915-a2ddfce4c398.roa File: b86b5631-04fe-3eb4-a915-a2ddfce4c398.roa (raw, json) Hash identifier: SP3i+Uvd8l+cqExSeDPu3vw7udV7Y/4pYOLMN+nFAnI= Subject key identifier: A0:28:00:2A:03:DB:19:AB:8A:32:8A:8A:59:C6:CB:34:D5:61:EC:93 Certificate issuer: /CN=623fa93a-7a73-4602-88f2-a0fb3b4a2fc0 Certificate serial: 010D0C9F4328584F08BE227660F58EDE3DBFAB80 Authority key identifier: B9:35:1C:7A:92:06:C1:55:E3:61:8E:4A:98:3E:40:81:48:68:B4:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/b86b5631-04fe-3eb4-a915-a2ddfce4c398.roa Signing time: Tue 01 Sep 2026 20:45:01 +0000 ROA not before: Tue 01 Sep 2026 20:45:01 +0000 ROA not after: Mon 30 Nov 2026 21:45:01 +0000 asID: 5760 IP address blocks: 2606:cc00::/32 maxlen: 126 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:be:22:76:60:f5:8e:de:3d:bf:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623fa93a-7a73-4602-88f2-a0fb3b4a2fc0 Validity Not Before: Sep 1 20:45:01 2026 GMT Not After : Nov 30 21:45:01 2026 GMT Subject: CN=821e06cd-54fc-4218-afb2-341aee20b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:5d:0d:19:9d:67:90:4d:fc:f7:3f:50:f9: 0e:a0:18:cc:ff:5a:81:14:35:6b:9b:6a:8a:7f:5c: f1:c4:10:a5:91:6a:11:73:fb:6f:83:3a:99:03:98: b0:46:40:cc:1e:aa:d9:67:dd:01:78:7d:d3:9d:1c: 03:2d:53:03:2f:ad:32:fc:65:87:a9:4a:ba:00:6c: 1f:de:98:1f:66:61:e2:f8:ad:9b:46:7d:e7:37:15: be:ed:37:b6:48:35:72:7d:e1:24:0d:1b:68:f4:3a: 9a:f5:ed:62:ce:b4:88:dc:58:e5:d7:04:44:e8:a8: 5c:52:d1:c3:db:9e:24:7d:ea:f0:5e:2d:0c:f2:6e: b6:e4:c1:ce:58:ee:d3:6c:4f:6d:dd:b5:e7:bc:88: e4:f4:cd:97:49:2c:cb:22:07:40:05:53:8a:e2:bd: 1c:e5:02:db:9c:23:1d:32:38:96:e8:d2:2d:28:71: c0:c1:bf:13:e2:d7:36:c6:20:7b:39:fb:e9:e0:9b: 05:05:90:93:ca:97:48:1f:de:1b:d6:62:cd:b4:b0: b9:ff:f1:67:8c:86:e5:f4:71:e0:9a:9a:a9:b9:76: ab:a0:34:ee:7d:08:2a:05:01:23:f5:62:c7:9e:18: ee:05:7a:9a:3d:fd:4c:08:f3:63:0e:9c:08:66:f6: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:28:00:2A:03:DB:19:AB:8A:32:8A:8A:59:C6:CB:34:D5:61:EC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/b86b5631-04fe-3eb4-a915-a2ddfce4c398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.crl X509v3 Authority Key Identifier: keyid:B9:35:1C:7A:92:06:C1:55:E3:61:8E:4A:98:3E:40:81:48:68:B4:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/623fa93a-7a73-4602-88f2-a0fb3b4a2fc0.cer sbgp-ipAddrBlock: critical IPv6: 2606:cc00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:df:0d:eb:14:3c:e4:ba:fc:df:bb:0f:1e:05:61:5f:3d:57: cb:3a:40:d5:0d:2a:d1:96:49:09:6c:29:f0:8e:2d:d9:1b:15: c0:0c:21:81:8e:45:64:cd:b0:62:cb:9d:2c:e8:f4:52:55:c9: a2:37:79:b7:05:38:75:d7:31:7e:23:97:dc:a2:d6:b9:94:57: 20:6e:c8:42:86:c8:96:62:25:a2:dc:fe:2b:93:fe:9f:25:ed: ed:c7:38:68:4c:c3:9f:7c:70:03:b3:90:9e:fd:a3:9d:41:62: 59:08:8a:b5:8c:ac:2e:e3:55:fc:f9:4c:79:4e:43:ba:de:c5: ef:0c:67:2c:ff:b9:c9:cb:ee:41:08:98:91:be:d7:28:d4:bf: 70:c8:d8:72:39:f6:00:bd:25:2a:20:35:9a:f1:99:4f:1d:ce: b1:1c:59:e1:b2:57:a5:8a:ec:57:b1:86:b6:ce:99:6b:da:38: 4a:ba:df:f7:70:9d:9f:0a:ff:a1:8d:d0:ea:b0:cf:20:1c:74: 19:28:a0:d4:56:c0:91:97:5c:3c:ed:c2:71:b2:62:a3:5e:f4: f0:19:f0:fa:1a:94:06:08:83:a2:26:98:28:c0:0b:86:4a:7d: 56:9b:0a:79:04:e6:c8:5d:32:eb:c4:41:ca:af:a8:74:4c:46: de:4e:90:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8IviJ2YPWO3j2/q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIzZmE5M2EtN2E3My00NjAyLTg4ZjItYTBmYjNiNGEy ZmMwMB4XDTI2MDkwMTIwNDUwMVoXDTI2MTEzMDIxNDUwMVowLzEtMCsGA1UEAxMk ODIxZTA2Y2QtNTRmYy00MjE4LWFmYjItMzQxYWVlMjBiMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KddDRmdZ5BN/Pc/UPkOoBjM/1qBFDVrm2qK f1zxxBClkWoRc/tvgzqZA5iwRkDMHqrZZ90BeH3TnRwDLVMDL60y/GWHqUq6AGwf 3pgfZmHi+K2bRn3nNxW+7Te2SDVyfeEkDRto9Dqa9e1izrSI3Fjl1wRE6KhcUtHD 254kferwXi0M8m625MHOWO7TbE9t3bXnvIjk9M2XSSzLIgdABVOK4r0c5QLbnCMd MjiW6NItKHHAwb8T4tc2xiB7Ofvp4JsFBZCTypdIH94b1mLNtLC5//FnjIbl9HHg mpqpuXaroDTufQgqBQEj9WLHnhjuBXqaPf1MCPNjDpwIZvaSjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKAoACoD2xmrijKKilnGyzTVYeyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MjNm YTkzYS03YTczLTQ2MDItODhmMi1hMGZiM2I0YTJmYzAvYjg2YjU2MzEtMDRmZS0z ZWI0LWE5MTUtYTJkZGZjZTRjMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNjIzZmE5M2EtN2E3My00NjAyLTg4 ZjItYTBmYjNiNGEyZmMwLzYyM2ZhOTNhLTdhNzMtNDYwMi04OGYyLWEwZmIzYjRh MmZjMC5jcmwwHwYDVR0jBBgwFoAUuTUcepIGwVXjYY5KmD5AgUhotE0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi82MjNmYTkzYS03YTczLTQ2MDItODhmMi1hMGZi M2I0YTJmYzAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbMADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBX3w3rFDzkuvzfuw8eBWFfPVfLOkDVDSrRlkkJbCnwji3ZGxXADCGB jkVkzbBiy50s6PRSVcmiN3m3BTh11zF+I5fcota5lFcgbshChsiWYiWi3P4rk/6f Je3txzhoTMOffHADs5Ce/aOdQWJZCIq1jKwu41X8+Ux5TkO63sXvDGcs/7nJy+5B CJiRvtco1L9wyNhyOfYAvSUqIDWa8ZlPHc6xHFnhsleliuxXsYa2zplr2jhKut/3 cJ2fCv+hjdDqsM8gHHQZKKDUVsCRl1w87cJxsmKjXvTwGfD6GpQGCIOiJpgowAuG Sn1Wmwp5BObIXTLrxEHKr6h0TEbeTpD6 -----END CERTIFICATE-----Generated at Tue Sep 22 03:02:09 2026 by rpki-client