$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/50e17bd3-9a32-3e55-92bc-eaf4be15242a.roa File: 50e17bd3-9a32-3e55-92bc-eaf4be15242a.roa (raw, json) Hash identifier: 4SPOmu+gsG6s1pwCobKw/svA0JlwvbczJBj3ZFL0Tks= Subject key identifier: B6:9A:EA:DC:6C:CF:6F:21:88:14:59:EE:E1:D6:D5:07:09:39:BF:28 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F374D557020638E2843FB2060 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/50e17bd3-9a32-3e55-92bc-eaf4be15242a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 2604:86c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:55:70:20:63:8e:28:43:fb:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=4e5bb9a0-1e9b-4d6d-8b45-eb8da353fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:6a:cb:e5:d2:ed:e6:ed:29:b6:3b:32:ae: e1:53:36:f5:c8:79:a4:40:ef:5f:61:9c:94:c6:97: 0d:2c:99:d6:a3:17:cd:83:db:53:26:42:8e:0a:c4: 40:b2:dc:08:7f:6b:2c:31:fe:5d:2f:8d:90:2b:4d: 5e:3f:5a:d9:82:ac:b4:90:ef:1a:eb:81:f0:fd:8b: 01:b0:85:fc:b3:4c:27:b6:20:f7:1b:6d:cd:4b:11: 48:0e:8f:51:49:02:83:08:f9:64:3a:a1:42:0a:98: 80:c7:f0:ed:0a:c6:44:a9:46:8c:ab:4c:86:ea:b4: 68:76:be:63:f7:25:d6:5a:63:89:45:47:79:31:7e: 7e:33:e6:fa:d2:20:0a:08:90:c7:f6:7f:41:e9:db: 61:21:fa:e2:bc:f2:22:f2:fb:69:c7:bc:b7:45:f5: ba:71:62:57:7b:08:e0:51:e8:ce:ef:21:ea:3a:4f: 89:2d:7a:0a:6f:87:42:ec:da:c5:0e:ef:be:ba:16: 11:e0:c9:7f:07:1b:60:1b:f1:f8:c9:48:0a:8e:73: 39:59:c7:cb:0f:f7:1f:af:95:95:90:1c:bd:34:ee: 19:f9:22:d3:4d:ae:d0:0d:2d:aa:be:c8:94:51:9d: 53:db:74:9c:0a:dd:cf:90:5d:22:85:4e:2d:ed:46: ad:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:EA:DC:6C:CF:6F:21:88:14:59:EE:E1:D6:D5:07:09:39:BF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/50e17bd3-9a32-3e55-92bc-eaf4be15242a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:14:ed:64:2b:7b:cc:a7:f2:bc:b1:f7:d4:22:01:1e:0d:9f: 35:d6:5d:fd:68:f1:8a:c4:4f:d4:71:6d:04:70:bd:b5:e9:ec: 5c:92:0b:e8:ca:4d:53:8a:27:59:b1:db:69:28:ed:9a:27:fd: 06:d1:25:bd:37:d7:fa:ce:7d:8e:1c:7f:44:9a:23:ee:ed:0b: b7:d0:74:22:ea:ec:46:05:7f:1b:e8:19:62:8a:9a:df:e1:12: 22:0c:b2:44:83:8d:f1:dc:20:6f:3c:1d:c7:44:09:38:b2:bc: a1:13:be:1d:0c:70:94:04:c3:e7:8a:01:5c:08:cd:a3:89:eb: b1:33:29:e5:b8:7b:0b:11:ad:a5:c9:5f:0b:2a:67:6a:95:02: 15:50:99:9b:67:cc:37:9d:04:f7:bd:c7:95:ed:66:44:7b:c8: 30:9c:dd:36:4b:c7:d3:27:68:1f:35:30:57:3c:23:d7:f0:58: 8f:f0:d8:c1:35:39:05:04:fe:d8:d2:74:66:7f:79:93:68:be: 7f:8c:14:66:d7:ad:9c:0e:fb:af:7f:0f:ab:ab:0c:1c:85:32: 1e:dd:cd:66:0d:d9:1f:2a:8f:3d:63:e4:67:28:02:34:01:58: 48:cc:05:e8:63:c3:ce:60:fb:9c:4a:20:95:f6:74:d9:f5:06: 8c:7b:97:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TVVwIGOOKEP7IGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NGU1YmI5YTAtMWU5Yi00ZDZkLThiNDUtZWI4ZGEzNTNmYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS5qy+XS7ebtKbY7Mq7hUzb1yHmkQO9fYZyU xpcNLJnWoxfNg9tTJkKOCsRAstwIf2ssMf5dL42QK01eP1rZgqy0kO8a64Hw/YsB sIX8s0wntiD3G23NSxFIDo9RSQKDCPlkOqFCCpiAx/DtCsZEqUaMq0yG6rRodr5j 9yXWWmOJRUd5MX5+M+b60iAKCJDH9n9B6dthIfrivPIi8vtpx7y3RfW6cWJXewjg UejO7yHqOk+JLXoKb4dC7NrFDu++uhYR4Ml/BxtgG/H4yUgKjnM5WcfLD/cfr5WV kBy9NO4Z+SLTTa7QDS2qvsiUUZ1T23ScCt3PkF0ihU4t7UatFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLaa6txsz28hiBRZ7uHW1QcJOb8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTBlMTdiZDMtOWEzMi0z ZTU1LTkyYmMtZWFmNGJlMTUyNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSGwCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPBTtZCt7zKfyvLH31CIBHg2fNdZd/WjxisRP1HFtBHC9tensXJIL 6MpNU4onWbHbaSjtmif9BtElvTfX+s59jhx/RJoj7u0Lt9B0IursRgV/G+gZYoqa 3+ESIgyyRION8dwgbzwdx0QJOLK8oRO+HQxwlATD54oBXAjNo4nrsTMp5bh7CxGt pclfCypnapUCFVCZm2fMN50E973Hle1mRHvIMJzdNkvH0ydoHzUwVzwj1/BYj/DY wTU5BQT+2NJ0Zn95k2i+f4wUZtetnA77r38Pq6sMHIUyHt3NZg3ZHyqPPWPkZygC NAFYSMwF6GPDzmD7nEoglfZ02fUGjHuXvg== -----END CERTIFICATE-----Generated at Mon Sep 21 12:54:13 2026 by rpki-client