$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/6d96044a-ec42-3599-a29c-986e4a94ffd5.roa File: 6d96044a-ec42-3599-a29c-986e4a94ffd5.roa (raw, json) Hash identifier: F3bbPkoUG7FwCQOtqci1z0Cr/+peMfRKaFrkHhCikIY= Subject key identifier: 8F:E7:54:41:2D:14:2B:34:63:1A:74:3B:CF:C8:BC:19:F9:B2:81:91 Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B8A71C369EBD8A166FB0 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/6d96044a-ec42-3599-a29c-986e4a94ffd5.roa Signing time: Wed 02 Sep 2026 18:05:39 +0000 ROA not before: Wed 02 Sep 2026 18:05:39 +0000 ROA not after: Tue 01 Dec 2026 19:05:39 +0000 asID: 16509 IP address blocks: 2604:1160:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:a7:1c:36:9e:bd:8a:16:6f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:39 2026 GMT Not After : Dec 1 19:05:39 2026 GMT Subject: CN=0d1fe638-06a6-451c-92af-90ce9a94db21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:ba:e5:45:85:20:63:0a:cd:33:1f:e8:63: 3a:ae:7a:15:fe:10:8e:f0:bc:24:23:fe:af:f6:f2: a4:45:19:5b:3c:fb:de:ab:2c:ff:69:50:fe:fa:b2: 3a:19:a7:51:67:fc:e2:24:a7:e8:03:62:fa:e2:92: b6:d7:74:78:cd:d0:13:ca:f8:fe:9e:96:58:24:e8: ae:37:ba:32:da:3e:66:ac:aa:da:8a:95:28:af:2c: 5e:a9:1a:92:fd:35:1e:0e:00:3f:2c:8f:d5:fa:c4: 95:7b:13:7b:1b:ac:36:d0:69:3a:dd:7c:4d:9e:6f: 08:ac:cf:f3:da:8b:17:77:2d:40:06:ce:37:d7:a2: 73:45:a6:5d:82:91:56:9e:16:e6:60:99:38:86:c0: 80:71:7f:a9:30:31:15:52:65:76:50:f3:bf:f1:88: e2:a4:a5:2c:8a:a4:84:cc:87:6d:35:ab:6f:77:bb: 90:e6:b9:cf:dc:97:5c:ed:8e:5a:4d:4f:be:70:0a: a2:33:2f:5f:ac:18:80:c6:6b:75:b5:32:55:ee:df: 02:55:fa:31:59:e1:d4:41:3b:df:de:77:5f:32:24: f3:64:c7:f9:52:dc:44:9e:7d:f2:a5:d5:12:22:3a: 39:c6:fe:9c:37:8d:45:39:c7:b7:ff:b1:a6:2c:21: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:54:41:2D:14:2B:34:63:1A:74:3B:CF:C8:BC:19:F9:B2:81:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/6d96044a-ec42-3599-a29c-986e4a94ffd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:06:25:f3:e2:af:82:91:ea:c0:41:2d:ac:c3:5a:83:25:e8: 59:e0:3e:10:8f:63:bc:1f:38:de:de:21:c9:6e:c0:59:76:26: 39:05:2d:55:02:9f:52:9f:0f:ff:29:9d:e5:f5:59:a9:47:bc: ab:3c:c7:a2:3b:64:32:4f:8e:ef:64:9e:56:57:b0:99:04:77: 45:5e:53:6a:a5:9f:83:cb:a4:87:d9:e8:1a:5b:cb:a6:51:9d: b3:a8:b8:06:01:99:bc:6e:8f:3a:a8:9e:01:ca:b7:ad:35:a1: 3c:31:1d:0f:c6:81:ba:7d:05:99:46:5e:90:af:c2:fb:25:27: 04:7e:b0:7a:23:2e:bc:ef:c2:eb:53:53:32:1c:a4:c3:e5:9e: 4d:e1:e7:6f:a4:1c:7c:39:29:04:a8:59:8f:62:7f:5d:3c:43: c7:42:b7:3f:5f:fa:96:59:54:90:e5:c3:89:72:c0:35:7b:87: 9e:1e:84:e6:ce:37:d5:20:ae:c7:1e:d7:11:0a:ab:89:cf:3b: e1:84:9c:00:74:50:f3:88:ad:dc:cd:7f:eb:39:0e:98:41:7d: 07:4b:bc:7b:cb:73:74:f0:71:2f:db:9a:73:a7:a5:df:1e:b9: e0:35:22:52:54:91:a1:13:c7:2d:43:a9:33:aa:79:5d:1f:b2: 09:2d:92:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObinHDaevYoWb7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOVoXDTI2MTIwMTE5MDUzOVowLzEtMCsGA1UEAxMk MGQxZmU2MzgtMDZhNi00NTFjLTkyYWYtOTBjZTlhOTRkYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXa65UWFIGMKzTMf6GM6rnoV/hCO8LwkI/6v 9vKkRRlbPPveqyz/aVD++rI6GadRZ/ziJKfoA2L64pK213R4zdATyvj+npZYJOiu N7oy2j5mrKraipUoryxeqRqS/TUeDgA/LI/V+sSVexN7G6w20Gk63XxNnm8IrM/z 2osXdy1ABs4316JzRaZdgpFWnhbmYJk4hsCAcX+pMDEVUmV2UPO/8YjipKUsiqSE zIdtNatvd7uQ5rnP3Jdc7Y5aTU++cAqiMy9frBiAxmt1tTJV7t8CVfoxWeHUQTvf 3ndfMiTzZMf5UtxEnn3ypdUSIjo5xv6cN41FOce3/7GmLCFJIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/nVEEtFCs0Yxp0O8/IvBn5soGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvNmQ5NjA0NGEtZWM0Mi0z NTk5LWEyOWMtOTg2ZTRhOTRmZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADcGJfPir4KR6sBBLazDWoMl6FngPhCPY7wfON7eIcluwFl2JjkF LVUCn1KfD/8pneX1WalHvKs8x6I7ZDJPju9knlZXsJkEd0VeU2qln4PLpIfZ6Bpb y6ZRnbOouAYBmbxujzqongHKt601oTwxHQ/Ggbp9BZlGXpCvwvslJwR+sHojLrzv wutTUzIcpMPlnk3h52+kHHw5KQSoWY9if108Q8dCtz9f+pZZVJDlw4lywDV7h54e hObON9Ugrsce1xEKq4nPO+GEnAB0UPOIrdzNf+s5DphBfQdLvHvLc3TwcS/bmnOn pd8eueA1IlJUkaETxy1DqTOqeV0fsgktksQ= -----END CERTIFICATE-----Generated at Tue Sep 22 22:13:43 2026 by rpki-client