$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/0401b12e-39e0-3f37-85df-2658d84a786b.roa File: 0401b12e-39e0-3f37-85df-2658d84a786b.roa (raw, json) Hash identifier: S611bwF+plEFXgqCSWnOexSkNihBtjJSpKzRlTkFE1w= Subject key identifier: AC:02:55:6C:FD:45:C3:0E:E9:16:2A:04:16:29:E4:D0:0F:07:C7:9C Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B86B8459E5F98E7A4D00 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/0401b12e-39e0-3f37-85df-2658d84a786b.roa Signing time: Wed 02 Sep 2026 18:05:38 +0000 ROA not before: Wed 02 Sep 2026 18:05:38 +0000 ROA not after: Tue 01 Dec 2026 19:05:38 +0000 asID: 14618 IP address blocks: 2604:1160:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:6b:84:59:e5:f9:8e:7a:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:38 2026 GMT Not After : Dec 1 19:05:38 2026 GMT Subject: CN=b0812f15-b289-4fcb-b42f-c8f3085e0e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:ed:de:d0:03:c6:c8:4c:fc:3a:a8:47:c2: 46:a4:5a:95:7d:30:6e:cb:1e:29:5b:45:b3:e2:fb: 7a:ee:fb:2e:e6:3b:9f:e2:72:1d:b8:98:3d:bf:3b: 79:40:6d:8d:a7:15:42:ab:e4:6b:2c:f4:6c:5d:38: 50:ea:bf:ba:a0:4d:7a:87:21:c3:6c:94:5b:03:ba: e0:b2:19:bb:9c:0e:89:7b:60:a9:d9:0e:bc:6e:58: 43:32:60:d3:ab:4c:0f:70:58:b7:69:60:c1:a5:fc: 63:6e:ee:94:de:ce:15:ce:f9:dc:30:b3:c4:ab:e5: fa:03:5f:0f:88:80:93:92:ef:28:3d:33:40:fd:f8: 08:f2:d4:56:f5:6e:7c:1d:cd:b3:ff:04:b0:e4:94: bf:59:4c:c2:b3:00:ba:00:39:1b:6f:23:06:98:d8: 8c:6e:a9:ba:f9:27:cd:8f:3d:17:a7:9c:a6:97:c1: af:e1:8d:09:6b:44:c2:a4:ac:a2:2f:87:82:76:4e: d9:08:db:8c:56:5b:79:44:6d:df:5e:32:dc:e8:27: 0f:60:78:f4:fe:d4:ec:8e:9c:72:d4:86:c5:98:9c: d3:fc:d6:9a:7a:78:f5:eb:c1:dc:52:eb:75:e9:09: ab:9b:b1:67:21:69:5a:ec:0a:0d:1c:25:2c:73:17: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:02:55:6C:FD:45:C3:0E:E9:16:2A:04:16:29:E4:D0:0F:07:C7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/0401b12e-39e0-3f37-85df-2658d84a786b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:80:53:b3:65:7d:81:f7:ce:17:8b:ae:20:f0:4f:49:14:47: ae:e4:32:a7:98:72:93:7f:0f:db:66:8d:c2:bb:e0:50:d5:01: a3:66:c8:75:21:0c:1c:45:40:e7:a0:be:ac:a3:c0:e5:61:2f: eb:fd:c0:7f:5a:b9:d4:85:15:99:d0:6e:75:9c:95:53:e2:f5: c5:85:d9:a2:f5:6f:04:44:f8:b5:f5:54:c9:32:92:bb:fa:62: 16:49:4f:74:ce:ed:46:77:15:5c:40:49:dd:4b:73:d0:03:be: 08:33:e8:21:54:0f:26:b8:4f:17:69:fd:c2:2e:fc:55:30:f0: c3:67:8c:12:c3:0c:5c:73:71:ba:ed:23:48:7f:bb:68:40:b1: 46:3b:e3:36:12:4e:91:f0:39:39:31:e7:4c:5c:6a:44:3e:73: 1d:f0:3b:b9:44:e9:91:a2:7e:e1:16:77:c4:b0:67:3d:9f:eb: fe:a4:ab:5f:30:69:16:cc:18:e6:0e:df:5a:9b:73:10:98:0a: 89:6f:44:41:8a:8e:a6:d4:36:93:fe:a3:00:09:c9:d0:cc:60: c1:be:b8:b7:92:a7:c8:2a:7f:7f:37:f5:d6:57:c4:54:a5:63: b1:a2:35:c6:fb:2e:e4:89:00:fa:13:24:4e:82:c6:f4:43:49: d8:0a:86:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObhrhFnl+Y56TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOFoXDTI2MTIwMTE5MDUzOFowLzEtMCsGA1UEAxMk YjA4MTJmMTUtYjI4OS00ZmNiLWI0MmYtYzhmMzA4NWUwZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYHt3tADxshM/DqoR8JGpFqVfTBuyx4pW0Wz 4vt67vsu5juf4nIduJg9vzt5QG2NpxVCq+RrLPRsXThQ6r+6oE16hyHDbJRbA7rg shm7nA6Je2Cp2Q68blhDMmDTq0wPcFi3aWDBpfxjbu6U3s4VzvncMLPEq+X6A18P iICTku8oPTNA/fgI8tRW9W58Hc2z/wSw5JS/WUzCswC6ADkbbyMGmNiMbqm6+SfN jz0Xp5yml8Gv4Y0Ja0TCpKyiL4eCdk7ZCNuMVlt5RG3fXjLc6CcPYHj0/tTsjpxy 1IbFmJzT/Naaenj168HcUut16Qmrm7FnIWla7AoNHCUscxecPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwCVWz9RcMO6RYqBBYp5NAPB8ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvMDQwMWIxMmUtMzllMC0z ZjM3LTg1ZGYtMjY1OGQ4NGE3ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAISAU7NlfYH3zheLriDwT0kUR67kMqeYcpN/D9tmjcK74FDVAaNm yHUhDBxFQOegvqyjwOVhL+v9wH9audSFFZnQbnWclVPi9cWF2aL1bwRE+LX1VMky krv6YhZJT3TO7UZ3FVxASd1Lc9ADvggz6CFUDya4Txdp/cIu/FUw8MNnjBLDDFxz cbrtI0h/u2hAsUY74zYSTpHwOTkx50xcakQ+cx3wO7lE6ZGifuEWd8SwZz2f6/6k q18waRbMGOYO31qbcxCYColvREGKjqbUNpP+owAJydDMYMG+uLeSp8gqf3839dZX xFSlY7GiNcb7LuSJAPoTJE6CxvRDSdgKhpc= -----END CERTIFICATE-----Generated at Tue Sep 22 14:19:15 2026 by rpki-client