$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/53d8fc1e-6a21-3482-9952-59b5a3285141.roa File: 53d8fc1e-6a21-3482-9952-59b5a3285141.roa (raw, json) Hash identifier: NhkIK+wQ50pjx91UzQ76CNdTxtJVgOwRf77LoM4UHX0= Subject key identifier: 4F:10:95:E9:C1:D8:1D:19:0F:42:B4:A4:40:7F:8A:1B:8B:F0:FE:FF Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B8B31313C1DA25603580 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/53d8fc1e-6a21-3482-9952-59b5a3285141.roa Signing time: Wed 02 Sep 2026 18:05:39 +0000 ROA not before: Wed 02 Sep 2026 18:05:39 +0000 ROA not after: Tue 01 Dec 2026 19:05:39 +0000 asID: 14618 IP address blocks: 2604:1160:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:b3:13:13:c1:da:25:60:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:39 2026 GMT Not After : Dec 1 19:05:39 2026 GMT Subject: CN=c298e2f3-e376-4b84-a43c-a352d935a3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:42:8c:19:7f:90:96:4e:17:b3:57:d3:d4: 4c:e3:37:69:3d:55:cd:d1:95:ae:85:fc:16:63:df: 2b:28:3a:84:5e:41:31:0b:8b:0b:fb:76:27:a4:e0: 79:65:77:8b:81:89:f1:81:51:4b:35:08:ab:d9:9a: c5:16:de:9e:da:a2:ea:c0:f8:7a:c3:82:53:41:cb: 95:19:1c:45:cb:b3:b1:7f:bd:7e:12:77:bf:1c:42: a8:f2:30:97:ac:57:f9:ad:75:7b:68:4b:b2:18:51: 8a:d2:3b:b8:2a:99:e9:cc:f5:8f:ef:ca:67:15:d0: 2e:c1:1e:fb:4c:05:f7:b0:b3:b5:72:ee:18:01:2e: 26:d6:ab:41:b3:4c:1e:da:ae:db:63:4f:78:c5:fd: d2:4b:5f:5c:3d:8d:4e:65:aa:cb:4a:88:ab:a3:50: 15:02:8f:70:bc:bf:a5:b3:2c:a5:1d:d1:01:d9:7b: 55:25:a6:4d:9a:a4:38:dd:0f:a0:bb:ec:74:c2:6e: 49:0f:a6:91:50:f8:44:a4:f9:26:f1:f8:be:07:88: 12:14:6b:12:a3:40:6f:69:1f:be:56:63:68:75:1a: ee:1c:ec:9e:6d:c9:34:ae:9f:fe:0e:01:5d:53:f2: 77:cb:94:e1:2a:43:04:be:16:84:41:d7:06:e7:22: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:95:E9:C1:D8:1D:19:0F:42:B4:A4:40:7F:8A:1B:8B:F0:FE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/53d8fc1e-6a21-3482-9952-59b5a3285141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ad:47:80:df:2c:ca:f0:d2:46:16:f2:b5:14:41:dd:c0:55: 4d:d6:17:9c:04:12:91:0c:92:bd:ed:c7:5c:9c:89:2d:de:f2: bc:fa:b5:9d:80:29:06:e2:ac:97:ad:74:95:2b:55:ae:bf:e5: bb:5a:0e:52:78:20:88:cc:87:d3:1e:e7:a9:0d:84:7f:8f:cc: 62:e8:87:f2:0c:69:4e:54:22:49:4a:24:63:ac:28:f9:ab:60: ae:47:af:8f:82:e4:cb:96:62:68:20:ee:4d:67:8c:5d:86:43: 67:5b:05:1e:75:74:e2:3d:41:50:9d:31:bc:65:e1:eb:f8:61: ad:75:10:e2:57:ca:fc:1d:73:04:56:ea:c5:b7:e2:88:5a:b3: d9:9e:d1:1d:87:84:a9:f8:59:ee:ba:78:e5:99:fe:59:17:cd: bb:fa:af:04:df:56:cc:aa:ee:2a:06:d2:32:a7:a3:6a:a4:59: c8:9c:55:44:c6:59:86:fb:6f:46:0f:69:ba:8d:5b:f9:f9:a3: 36:e0:35:50:47:62:83:fa:80:fa:15:d9:24:91:44:5d:ab:c2: 0d:42:fd:bf:61:67:01:c1:89:b5:f5:08:ae:1c:6d:d9:95:71: 56:5c:f6:e3:04:13:ed:be:4a:89:a8:54:54:8b:64:08:9e:71: 82:4c:f3:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObizExPB2iVgNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOVoXDTI2MTIwMTE5MDUzOVowLzEtMCsGA1UEAxMk YzI5OGUyZjMtZTM3Ni00Yjg0LWE0M2MtYTM1MmQ5MzVhM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxlCjBl/kJZOF7NX09RM4zdpPVXN0ZWuhfwW Y98rKDqEXkExC4sL+3YnpOB5ZXeLgYnxgVFLNQir2ZrFFt6e2qLqwPh6w4JTQcuV GRxFy7Oxf71+Ene/HEKo8jCXrFf5rXV7aEuyGFGK0ju4KpnpzPWP78pnFdAuwR77 TAX3sLO1cu4YAS4m1qtBs0we2q7bY094xf3SS19cPY1OZarLSoiro1AVAo9wvL+l syylHdEB2XtVJaZNmqQ43Q+gu+x0wm5JD6aRUPhEpPkm8fi+B4gSFGsSo0BvaR++ VmNodRruHOyebck0rp/+DgFdU/J3y5ThKkMEvhaEQdcG5yLtoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8QlenB2B0ZD0K0pEB/ihuL8P7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvNTNkOGZjMWUtNmEyMS0z NDgyLTk5NTItNTliNWEzMjg1MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEStR4DfLMrw0kYW8rUUQd3AVU3WF5wEEpEMkr3tx1yciS3e8rz6 tZ2AKQbirJetdJUrVa6/5btaDlJ4IIjMh9Me56kNhH+PzGLoh/IMaU5UIklKJGOs KPmrYK5Hr4+C5MuWYmgg7k1njF2GQ2dbBR51dOI9QVCdMbxl4ev4Ya11EOJXyvwd cwRW6sW34ohas9me0R2HhKn4We66eOWZ/lkXzbv6rwTfVsyq7ioG0jKno2qkWcic VUTGWYb7b0YPabqNW/n5ozbgNVBHYoP6gPoV2SSRRF2rwg1C/b9hZwHBibX1CK4c bdmVcVZc9uMEE+2+SomoVFSLZAiecYJM8zo= -----END CERTIFICATE-----Generated at Mon Sep 21 02:27:20 2026 by rpki-client