$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa File: a1e057fb-16f7-3396-8982-11bad5ac424f.roa (raw, json) Hash identifier: BhHhDaI+M4oLB4o/NVI0fwGC/3RwJ0v//RXRBcGATvk= Subject key identifier: 62:52:DA:2A:43:57:EF:99:E7:C6:9E:77:8B:F8:6F:8A:64:47:6D:1C Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584F4C3D518375C420905C2FAFC0 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 53407 IP address blocks: 2604:9440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:51:83:75:c4:20:90:5c:2f:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a454f9e5-2137-4d59-b33d-9c8456332f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:61:78:62:16:23:a8:2d:d4:81:22:df:ee: 4f:62:fd:b1:d2:44:0b:37:38:0a:82:db:74:68:01: d1:af:ef:cb:32:b3:d0:66:7e:52:31:98:86:b2:a0: 3a:de:a5:b7:b7:38:7d:7b:7d:ee:08:99:10:26:94: 34:56:2a:86:80:51:1c:54:3c:e1:c8:1d:ba:44:0c: cd:02:9c:4b:9c:2f:2a:ba:d9:7f:46:65:8a:af:24: 03:b5:a8:4d:b1:7b:c1:b4:c2:90:c0:22:da:ce:c4: 25:c0:ba:e7:50:7a:a2:96:1a:f0:fa:ad:a6:3a:8d: 79:38:ef:9b:5a:ab:09:9b:e3:7a:e6:dd:32:cc:82: be:a7:7e:bf:88:72:25:d0:fc:c0:3f:03:86:84:5d: 63:c4:65:31:cd:a4:b7:13:f4:40:75:f8:ca:1e:dc: 9d:f2:20:c3:ba:77:94:7a:4e:3e:8e:81:94:d3:f7: e4:e8:b9:3b:7f:fd:ac:38:02:2e:07:a5:7a:45:cb: a3:a1:9c:13:10:84:99:9c:d3:ca:08:6c:87:48:ed: fd:29:c0:56:fa:06:c5:13:17:58:a8:22:05:ec:81: 27:aa:9b:69:7c:2f:dd:4f:31:25:26:84:64:d8:f7: c2:b8:dd:7c:de:1c:22:fd:d1:3b:64:71:21:43:18: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:52:DA:2A:43:57:EF:99:E7:C6:9E:77:8B:F8:6F:8A:64:47:6D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv6: 2604:9440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:dc:11:c6:07:ae:77:90:15:05:ca:3a:e3:d0:1b:d1:1d:6b: 53:99:12:73:6f:37:12:80:1f:b4:39:ae:b2:e9:b3:5f:c2:64: 64:30:c2:31:db:02:14:aa:ed:6d:6e:d2:86:d1:31:37:37:b7: 4c:92:0b:bc:1d:6d:b3:81:4f:57:c9:bc:ec:d5:9c:d9:d9:1d: 2b:7b:81:0f:02:b3:49:d6:ee:f8:bf:af:95:40:53:cc:d6:26: ae:dd:7c:a2:4f:08:bd:e8:cf:6a:90:28:a9:af:c6:a4:6a:e4: f0:24:21:0d:73:88:0b:d8:24:45:03:9f:f6:69:53:55:99:81: 07:84:61:37:fd:20:10:48:2b:99:ac:7b:2e:d1:fe:89:cf:2b: 61:72:e3:5f:d3:70:55:69:cc:39:52:35:a1:61:e1:11:5d:c5: e8:b4:b3:3c:69:17:57:83:83:24:cc:0e:89:c4:e6:fd:59:f5: 70:65:3f:7e:b7:bc:ed:36:68:63:6b:40:b6:47:c2:bc:00:45: 74:35:e1:90:4d:7d:09:84:58:4d:2e:94:6d:ba:f1:48:49:eb: cc:33:d3:5c:4c:f3:ad:f1:43:11:4f:6e:9d:ca:42:6e:d0:30: 75:ba:14:1b:78:80:84:4d:7c:db:67:89:d2:9f:05:83:35:f1: ac:d4:cb:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9MPVGDdcQgkFwvr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTQ1NGY5ZTUtMjEzNy00ZDU5LWIzM2QtOWM4NDU2MzMyZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzFheGIWI6gt1IEi3+5PYv2x0kQLNzgKgtt0 aAHRr+/LMrPQZn5SMZiGsqA63qW3tzh9e33uCJkQJpQ0ViqGgFEcVDzhyB26RAzN ApxLnC8qutl/RmWKryQDtahNsXvBtMKQwCLazsQlwLrnUHqilhrw+q2mOo15OO+b WqsJm+N65t0yzIK+p36/iHIl0PzAPwOGhF1jxGUxzaS3E/RAdfjKHtyd8iDDuneU ek4+joGU0/fk6Lk7f/2sOAIuB6V6RcujoZwTEISZnNPKCGyHSO39KcBW+gbFExdY qCIF7IEnqptpfC/dTzElJoRk2PfCuN183hwi/dE7ZHEhQxg96wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGJS2ipDV++Z58aed4v4b4pkR20cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvYTFlMDU3ZmItMTZmNy0z Mzk2LTg5ODItMTFiYWQ1YWM0MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSUQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAU3BHGB653kBUFyjrj0BvRHWtTmRJzbzcSgB+0Oa6y6bNfwmRkMMIx 2wIUqu1tbtKG0TE3N7dMkgu8HW2zgU9Xybzs1ZzZ2R0re4EPArNJ1u74v6+VQFPM 1iau3XyiTwi96M9qkCipr8akauTwJCENc4gL2CRFA5/2aVNVmYEHhGE3/SAQSCuZ rHsu0f6JzythcuNf03BVacw5UjWhYeERXcXotLM8aRdXg4MkzA6JxOb9WfVwZT9+ t7ztNmhja0C2R8K8AEV0NeGQTX0JhFhNLpRtuvFISevMM9NcTPOt8UMRT26dykJu 0DB1uhQbeICETXzbZ4nSnwWDNfGs1Mv2 -----END CERTIFICATE-----Generated at Mon Sep 28 18:07:01 2026 by rpki-client