$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/3f7f7da9-5a42-315e-8685-7bd885cf9fa9.roa File: 3f7f7da9-5a42-315e-8685-7bd885cf9fa9.roa (raw, json) Hash identifier: l0Zi8UjdaAgAuu+2kzgqa8AaI5yUkgHqnctsVWQqZVg= Subject key identifier: 1A:09:EF:F5:1F:2D:C2:E5:5B:B7:71:20:58:27:86:11:AF:F7:49:9D Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B876E93335D864BEE780 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/3f7f7da9-5a42-315e-8685-7bd885cf9fa9.roa Signing time: Wed 02 Sep 2026 18:05:38 +0000 ROA not before: Wed 02 Sep 2026 18:05:38 +0000 ROA not after: Tue 01 Dec 2026 19:05:38 +0000 asID: 16509 IP address blocks: 2604:1160:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:76:e9:33:35:d8:64:be:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:38 2026 GMT Not After : Dec 1 19:05:38 2026 GMT Subject: CN=0d199651-cdd0-4cc4-a263-838c5b9e159f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:0c:19:8b:48:3c:91:5c:93:f7:0a:ea:8b: 28:e3:bb:7e:25:87:99:3f:07:7e:6b:0b:ba:76:9b: c8:9c:f1:39:2b:f9:b6:9d:de:9c:e2:1c:67:10:7e: 89:8b:1e:92:c1:c4:f9:f1:e7:99:ed:1b:ae:66:e2: 96:15:f1:49:5a:26:d7:42:41:67:a6:c9:ca:50:62: f8:9d:8e:f6:5b:c4:51:04:e7:e7:cc:c8:d7:e0:12: eb:53:13:b5:9d:e4:e3:7c:ae:d9:30:d8:13:41:8a: 6a:2c:1c:3d:5b:c6:29:de:99:cb:44:42:1d:ec:c0: dd:66:be:59:a5:e8:1b:22:36:ea:6c:da:1b:59:be: f9:90:15:25:58:03:6f:83:40:68:7d:9f:20:9d:84: 05:49:36:1d:43:f8:b2:4b:38:5b:40:4f:59:ca:25: 62:1e:05:13:60:d8:ae:b6:f5:75:f1:3c:49:77:68: 39:4f:ff:ce:f7:01:23:f9:60:e5:bd:c1:86:a1:44: 40:78:d0:b7:1b:09:65:09:8f:d1:73:2c:c1:9e:43: c4:43:3d:5c:3c:3a:7b:94:e6:d7:9b:11:9c:e7:2d: 93:8d:80:4a:a0:14:dc:0f:59:40:88:30:ef:b5:4d: a4:a7:cb:ac:d7:4f:a6:bf:8b:27:6c:51:64:9d:81: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:09:EF:F5:1F:2D:C2:E5:5B:B7:71:20:58:27:86:11:AF:F7:49:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/3f7f7da9-5a42-315e-8685-7bd885cf9fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:13:d0:ff:b3:aa:f5:de:84:68:08:98:66:a4:71:b7:16:19: dc:9c:69:34:00:4d:ce:55:f5:ca:32:f2:ab:10:fd:f1:58:87: 74:2b:97:6e:98:97:ac:e0:4a:cf:d8:96:c0:e9:8c:d3:93:cb: 3d:c4:2e:4f:1e:1c:84:73:4b:68:74:b7:27:11:ce:01:d1:51: 72:bb:ce:e0:ef:5e:b6:c3:f9:da:df:59:2e:79:47:3d:20:55: 28:a9:fa:8f:7a:85:94:dc:62:d0:06:4b:03:94:7f:83:19:d2: 35:28:6a:cd:52:1e:df:b8:89:e1:7c:32:f3:34:b0:9c:98:57: 4a:cc:41:28:62:ce:19:eb:c4:64:e8:d9:3c:b0:79:ad:56:fa: ef:8d:97:f5:e4:a5:45:38:4b:e0:53:e9:58:75:a6:be:47:e4: 8a:69:40:9a:e0:5d:85:21:d0:ac:fc:15:0d:84:1a:43:2d:1c: 93:fd:84:a2:df:74:f1:2b:76:6f:ae:14:92:3a:ef:27:9f:b6: c3:7c:9d:da:06:73:cf:da:a3:2d:7b:b7:a9:b3:2d:ac:e8:99: 49:95:f4:3c:47:fa:78:48:bc:83:60:e8:75:35:2d:41:84:08: 38:e2:ab:d5:89:93:0b:29:8a:f1:9b:a1:b8:f1:cf:7b:c7:64: 94:ff:fd:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObh26TM12GS+54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOFoXDTI2MTIwMTE5MDUzOFowLzEtMCsGA1UEAxMk MGQxOTk2NTEtY2RkMC00Y2M0LWEyNjMtODM4YzViOWUxNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIMMGYtIPJFck/cK6oso47t+JYeZPwd+awu6 dpvInPE5K/m2nd6c4hxnEH6Jix6SwcT58eeZ7RuuZuKWFfFJWibXQkFnpsnKUGL4 nY72W8RRBOfnzMjX4BLrUxO1neTjfK7ZMNgTQYpqLBw9W8Yp3pnLREId7MDdZr5Z pegbIjbqbNobWb75kBUlWANvg0BofZ8gnYQFSTYdQ/iySzhbQE9ZyiViHgUTYNiu tvV18TxJd2g5T//O9wEj+WDlvcGGoURAeNC3GwllCY/RcyzBnkPEQz1cPDp7lObX mxGc5y2TjYBKoBTcD1lAiDDvtU2kp8us10+mv4snbFFknYGe0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoJ7/UfLcLlW7dxIFgnhhGv90mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvM2Y3ZjdkYTktNWE0Mi0z MTVlLTg2ODUtN2JkODg1Y2Y5ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkT0P+zqvXehGgImGakcbcWGdycaTQATc5V9coy8qsQ/fFYh3Qr l26Yl6zgSs/YlsDpjNOTyz3ELk8eHIRzS2h0tycRzgHRUXK7zuDvXrbD+drfWS55 Rz0gVSip+o96hZTcYtAGSwOUf4MZ0jUoas1SHt+4ieF8MvM0sJyYV0rMQShizhnr xGTo2Tywea1W+u+Nl/XkpUU4S+BT6Vh1pr5H5IppQJrgXYUh0Kz8FQ2EGkMtHJP9 hKLfdPErdm+uFJI67yeftsN8ndoGc8/aoy17t6mzLazomUmV9DxH+nhIvINg6HU1 LUGECDjiq9WJkwspivGbobjxz3vHZJT//Xo= -----END CERTIFICATE-----Generated at Tue Sep 22 22:13:41 2026 by rpki-client