$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa File: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json) Hash identifier: Nn6e9RsieayGtrN419MOrvWnBr9PdhghWNKIWzPMeLI= Subject key identifier: D9:12:3F:A9:FA:79:D7:A3:CF:9D:77:DF:D5:EF:B9:75:C5:31:18:95 Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584F43DD55D900015B0D3CCBBC80 Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 3128 IP address blocks: 2600:1d00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:55:d9:00:01:5b:0d:3c:cb:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=cceae53d-002c-4d1c-996b-264ca91fbc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:ff:5b:6e:3a:47:f7:75:bd:e2:e1:6b:75: 66:00:d9:d4:d2:4f:9a:2e:6a:36:85:68:88:0f:d8: f3:81:0b:f3:d9:fb:cf:83:6e:77:28:66:1e:6a:66: a7:9e:5d:00:7c:b6:a9:fc:5a:bc:b6:4c:6b:45:d1: be:5c:73:cc:c1:4b:54:28:6e:4c:a9:51:ad:13:62: 7e:32:89:c0:7e:37:1d:94:a4:ac:f3:60:13:f9:d5: 4d:d6:19:b9:93:f6:c4:e4:78:05:42:70:b8:f1:ae: 78:2b:ba:cf:ed:b9:8b:7c:2d:11:4b:5b:8c:3f:67: 92:24:e6:53:55:00:1b:f6:9c:7c:07:68:ba:af:cb: ce:62:e2:0d:06:6f:ca:5f:9d:4d:8a:ef:2e:81:91: fb:99:11:b3:8a:ef:c2:2e:d4:61:3b:f9:46:bd:37: ff:b6:5d:2c:b0:75:a6:c8:cd:c9:65:24:a3:0e:92: e4:47:da:9b:8b:cb:95:58:4b:0c:98:8d:3e:18:04: 3c:7f:70:9e:1e:6d:57:3a:55:12:19:4b:34:da:4c: 7b:66:83:43:1f:f2:a9:90:21:ec:c3:f4:b6:e6:bb: 8e:74:8a:8b:42:c5:93:ac:60:2a:70:ca:73:ce:59: db:9a:da:96:9b:ff:9f:83:51:12:89:35:50:8a:12: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:12:3F:A9:FA:79:D7:A3:CF:9D:77:DF:D5:EF:B9:75:C5:31:18:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv6: 2600:1d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:70:9b:95:a0:b2:32:27:ee:1f:cf:9e:af:ca:79:6e:0d:e9: c3:1a:e3:f4:c9:2a:ee:7a:e4:6f:ae:9c:25:ac:9f:a2:a3:f4: 2c:47:c2:95:4b:fc:01:4d:b4:28:f5:87:06:2f:a9:1e:bc:ed: c2:ba:b7:a1:54:be:06:f3:31:fd:43:15:0a:71:f5:36:fa:26: 26:2c:0c:69:24:0c:9f:e4:91:df:c3:59:a1:ac:f5:65:eb:30: 94:16:ea:07:44:0e:2e:6b:7f:0b:36:b1:b9:a9:f2:d8:f3:22: 61:14:02:01:36:4a:92:1f:93:5e:c5:ae:7e:de:2d:57:93:2a: 10:62:75:7b:27:8a:3a:2e:e7:fa:6d:73:8a:24:1d:20:32:69: 80:f6:29:0b:6f:6e:96:51:28:c1:82:c2:be:67:cc:ac:0b:d5: a6:49:0d:b2:26:cc:af:af:21:02:66:ca:57:d2:be:e0:16:2f: 39:0b:0f:b0:69:ae:c5:01:6a:50:bc:01:32:0d:38:da:29:42: a4:d4:d7:7a:e5:fd:3a:1d:95:7e:b2:ba:40:a9:28:a6:ba:19: 76:3c:b7:4c:6d:82:32:1f:8f:f1:60:ab:1b:d5:81:64:6e:3c: 1a:22:b1:2b:a3:14:d1:78:90:96:31:bc:90:04:f0:96:72:db: 63:fd:33:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9D3VXZAAFbDTzLvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2NlYWU1M2QtMDAyYy00ZDFjLTk5NmItMjY0Y2E5MWZiYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy3/W246R/d1veLha3VmANnU0k+aLmo2hWiI D9jzgQvz2fvPg253KGYeamannl0AfLap/Fq8tkxrRdG+XHPMwUtUKG5MqVGtE2J+ MonAfjcdlKSs82AT+dVN1hm5k/bE5HgFQnC48a54K7rP7bmLfC0RS1uMP2eSJOZT VQAb9px8B2i6r8vOYuINBm/KX51Niu8ugZH7mRGziu/CLtRhO/lGvTf/tl0ssHWm yM3JZSSjDpLkR9qbi8uVWEsMmI0+GAQ8f3CeHm1XOlUSGUs02kx7ZoNDH/KpkCHs w/S25ruOdIqLQsWTrGAqcMpzzlnbmtqWm/+fg1ESiTVQihIkwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNkSP6n6edejz51339XvuXXFMRiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYjQ1ZjAxYjQtYTY2ZS0z NmM0LWJjMGEtNDNmZDMzOGRmMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAdADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBscJuVoLIyJ+4fz56vynluDenDGuP0ySrueuRvrpwlrJ+io/QsR8KV S/wBTbQo9YcGL6kevO3CurehVL4G8zH9QxUKcfU2+iYmLAxpJAyf5JHfw1mhrPVl 6zCUFuoHRA4ua38LNrG5qfLY8yJhFAIBNkqSH5Nexa5+3i1XkyoQYnV7J4o6Luf6 bXOKJB0gMmmA9ikLb26WUSjBgsK+Z8ysC9WmSQ2yJsyvryECZspX0r7gFi85Cw+w aa7FAWpQvAEyDTjaKUKk1Nd65f06HZV+srpAqSimuhl2PLdMbYIyH4/xYKsb1YFk bjwaIrEroxTReJCWMbyQBPCWcttj/TN+ -----END CERTIFICATE-----Generated at Wed Sep 23 05:13:48 2026 by rpki-client