$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/a0e9a089-db15-36cd-bde4-49dea01b837b.roa File: a0e9a089-db15-36cd-bde4-49dea01b837b.roa (raw, json) Hash identifier: QHc4egtjJC4PQkFMHMuuuLnnb/VXnyJeEHFfINxIx5Y= Subject key identifier: A1:0E:C6:81:E4:EF:CA:7D:19:97:7D:F7:58:FB:3E:99:10:27:83:4C Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584F1F924B4D5AB8BB65B3E32500 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/a0e9a089-db15-36cd-bde4-49dea01b837b.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 394708 IP address blocks: 2606:f800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:4b:4d:5a:b8:bb:65:b3:e3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=f4b7e8e9-2788-4ef7-873c-c697418745ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:dd:6c:5a:0e:80:6e:92:49:af:60:17:b9: 91:51:92:59:26:69:2f:3c:d6:9f:81:fa:01:e7:e5: 4f:c2:bf:92:47:aa:60:b1:ae:25:4e:9b:34:79:47: c3:88:e5:d3:b2:c9:39:a0:de:53:89:b1:31:04:b0: 25:0a:43:19:d1:34:e1:00:c8:6a:1f:83:6e:d9:7e: 3d:08:c6:ee:c7:5a:08:46:91:75:63:50:1e:30:e1: 2b:48:3a:39:78:e6:8e:54:c4:36:af:33:a7:3f:c9: 2b:78:af:39:0b:9c:4f:e0:d3:2e:f9:dd:35:52:20: 4e:9c:1f:48:61:11:1e:28:33:86:8d:69:24:12:bb: 72:b1:10:e8:e2:26:e7:16:ee:07:8c:32:89:6d:73: 28:90:49:27:0e:cd:24:df:65:49:51:ba:43:db:34: cd:41:5e:9a:42:e2:61:f7:13:79:ca:a0:94:fc:bc: bf:7f:f8:16:6c:ed:1b:fd:ce:73:95:36:c6:06:3c: b2:c9:76:3e:a0:d9:6c:4f:9a:50:1b:27:23:ce:6d: f7:65:c7:46:88:5d:e2:b4:09:b2:5c:b2:ef:67:80: ad:ae:8d:f1:7c:28:37:20:74:68:be:57:83:cd:1a: b1:a8:32:0f:68:ce:d7:2e:bf:e5:5c:b7:46:af:a8: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0E:C6:81:E4:EF:CA:7D:19:97:7D:F7:58:FB:3E:99:10:27:83:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/a0e9a089-db15-36cd-bde4-49dea01b837b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv6: 2606:f800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e9:55:ed:4f:c8:99:62:13:b6:b3:8e:0e:1c:d0:55:ac:ff: 73:b7:1b:9d:b6:d7:7f:58:4d:4d:dd:18:34:7f:cc:9c:8d:86: cf:fa:06:de:ff:1e:a2:fc:52:7b:d1:35:ac:3a:91:be:f0:05: 73:2d:b9:75:ad:75:e5:3e:53:66:be:ce:58:af:84:04:de:47: 53:c4:54:4f:0f:ca:97:dc:ff:c9:0a:c2:30:6c:53:dd:0c:4c: e1:42:67:ac:d1:8d:44:6e:5b:f6:be:20:74:ad:58:1e:9d:66: c1:08:fc:50:60:be:6b:8c:fb:04:2e:9e:ed:86:f7:bf:0b:f3: 33:36:44:c0:1f:0b:d9:0a:eb:b3:4c:31:1d:d7:47:96:00:54: e5:b5:e1:91:0b:35:92:c5:7b:71:cb:3e:a0:fb:f2:53:59:71: a9:8c:11:99:bf:e4:be:36:e4:76:3a:9e:06:26:b1:4b:aa:9d: 94:57:53:eb:1b:c9:1d:e9:4e:df:ce:57:0f:bf:9d:04:64:58: 2a:5f:6b:41:d3:cb:64:89:8d:d9:c1:9f:fb:d8:13:f0:dc:7c: e7:0c:6d:af:ae:6d:26:c6:57:84:c0:2e:4c:f1:c7:0a:2d:7d: 7f:b9:b5:41:59:2c:68:b5:ac:8f:86:25:0e:a3:39:12:75:94: 7e:c6:80:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8fkktNWri7ZbPjJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjRiN2U4ZTktMjc4OC00ZWY3LTg3M2MtYzY5NzQxODc0NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNvdbFoOgG6SSa9gF7mRUZJZJmkvPNafgfoB 5+VPwr+SR6pgsa4lTps0eUfDiOXTssk5oN5TibExBLAlCkMZ0TThAMhqH4Nu2X49 CMbux1oIRpF1Y1AeMOErSDo5eOaOVMQ2rzOnP8kreK85C5xP4NMu+d01UiBOnB9I YREeKDOGjWkkErtysRDo4ibnFu4HjDKJbXMokEknDs0k32VJUbpD2zTNQV6aQuJh 9xN5yqCU/Ly/f/gWbO0b/c5zlTbGBjyyyXY+oNlsT5pQGycjzm33ZcdGiF3itAmy XLLvZ4Ctro3xfCg3IHRovleDzRqxqDIPaM7XLr/lXLdGr6iuzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKEOxoHk78p9GZd991j7PpkQJ4NMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvYTBlOWEwODktZGIxNS0z NmNkLWJkZTQtNDlkZWEwMWI4MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb4ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBv6VXtT8iZYhO2s44OHNBVrP9ztxudttd/WE1N3Rg0f8ycjYbP+gbe /x6i/FJ70TWsOpG+8AVzLbl1rXXlPlNmvs5Yr4QE3kdTxFRPD8qX3P/JCsIwbFPd DEzhQmes0Y1Eblv2viB0rVgenWbBCPxQYL5rjPsELp7thve/C/MzNkTAHwvZCuuz TDEd10eWAFTlteGRCzWSxXtxyz6g+/JTWXGpjBGZv+S+NuR2Op4GJrFLqp2UV1Pr G8kd6U7fzlcPv50EZFgqX2tB08tkiY3ZwZ/72BPw3HznDG2vrm0mxleEwC5M8ccK LX1/ubVBWSxotayPhiUOozkSdZR+xoCp -----END CERTIFICATE-----Generated at Sun Sep 20 22:35:20 2026 by rpki-client