$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/953e0e47-ee34-310d-a1ae-6e81aa24cb6c.roa File: 953e0e47-ee34-310d-a1ae-6e81aa24cb6c.roa (raw, json) Hash identifier: IlXqoeJe+iTEtsuNBcFYmbNTZGpjO/tCnw23RD/AZIA= Subject key identifier: FF:D6:3C:09:35:4F:C3:5A:8C:84:83:D3:9F:8E:46:AA:EB:B4:1D:78 Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B85F05C8C33E1FD0C900 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/953e0e47-ee34-310d-a1ae-6e81aa24cb6c.roa Signing time: Wed 02 Sep 2026 18:05:38 +0000 ROA not before: Wed 02 Sep 2026 18:05:38 +0000 ROA not after: Tue 01 Dec 2026 19:05:38 +0000 asID: 16509 IP address blocks: 2604:1160:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:5f:05:c8:c3:3e:1f:d0:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:38 2026 GMT Not After : Dec 1 19:05:38 2026 GMT Subject: CN=c135402b-f6fc-4a45-8e35-f437133c1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:d7:58:2c:1c:f5:8c:78:b1:b9:23:4d:9a: 46:8c:8a:a0:7d:df:54:c4:70:87:f7:86:cc:d1:ec: 5b:d2:dc:5b:43:ea:0e:88:d8:f4:f1:03:d6:82:8a: c4:82:b7:e9:77:18:da:5f:5f:92:be:39:aa:69:bd: ac:42:af:d3:4c:fa:55:9d:81:50:e8:b5:34:20:db: fc:cb:2a:95:e8:c8:a2:5e:8c:65:ad:0b:28:ea:b6: d5:2b:1b:9b:34:58:5a:82:4c:01:e3:84:00:a4:5a: d0:17:fc:74:08:be:f1:9b:2a:8e:b0:14:cb:9b:dd: 5e:49:8e:43:ca:b5:20:72:6e:85:31:7d:ed:87:db: f7:e5:c8:52:92:12:f5:04:09:1a:1d:8e:39:6e:18: ca:39:3a:3c:e5:07:4d:06:11:a3:88:84:2a:9d:b9: 41:e9:f4:70:4a:f5:2b:9e:29:ae:71:9f:20:2d:41: b3:3d:22:1e:63:5c:e5:c7:70:fd:6f:9a:b3:a2:d2: 65:64:4c:99:b4:72:b1:13:4b:b9:e2:ec:8a:93:7b: 03:1c:93:0d:f4:f1:76:ba:37:8e:e1:c8:bd:3e:84: 83:5e:6d:f0:71:82:e7:38:15:01:8c:0d:55:7c:39: e8:fe:ff:89:5f:ac:7b:b5:45:19:54:f0:5f:07:cf: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:3C:09:35:4F:C3:5A:8C:84:83:D3:9F:8E:46:AA:EB:B4:1D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/953e0e47-ee34-310d-a1ae-6e81aa24cb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7d:e7:7e:c1:27:f6:06:25:9f:7a:95:e9:dc:ab:64:e6:39: eb:9a:99:38:12:bd:28:26:bd:d6:a8:5b:b5:f6:c2:e2:a6:96: 06:3a:bc:2e:09:2c:92:84:ae:00:a3:5f:57:0d:e6:53:64:07: 9f:7e:85:e7:8d:4d:d2:37:33:09:94:3b:4f:af:86:53:2f:89: 22:c5:de:1a:4e:58:c9:3d:ed:9b:90:0c:7f:3a:a0:9b:90:c0: 77:4c:cd:1e:d8:07:58:dc:1a:22:6c:23:0e:fd:31:6c:18:38: 20:2b:8c:5d:5b:73:6e:d1:bd:38:74:78:29:79:b4:fc:d8:8a: 58:8e:00:c3:a7:f9:aa:d4:55:af:5a:8c:59:8e:44:c5:c8:06: 5a:90:84:1a:eb:aa:62:3c:46:92:64:47:fd:6d:c1:7c:29:47: 54:49:ab:89:a4:b0:7f:6c:ef:6e:94:94:6f:51:e5:13:c5:97: 0e:f2:8d:de:4b:9b:5c:75:69:88:e4:80:96:9f:77:8e:84:03: f2:30:f9:4d:be:d8:36:72:de:47:c6:76:b0:7b:af:01:09:1c: 9d:ed:ad:68:cd:0d:3d:83:81:d3:b3:2a:f1:4c:18:fc:eb:20: b2:8c:2c:f1:7d:35:85:91:da:04:a1:11:66:7d:8c:6a:82:b3: bb:d9:6f:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObhfBcjDPh/QyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOFoXDTI2MTIwMTE5MDUzOFowLzEtMCsGA1UEAxMk YzEzNTQwMmItZjZmYy00YTQ1LThlMzUtZjQzNzEzM2MxNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i3XWCwc9Yx4sbkjTZpGjIqgfd9UxHCH94bM 0exb0txbQ+oOiNj08QPWgorEgrfpdxjaX1+Svjmqab2sQq/TTPpVnYFQ6LU0INv8 yyqV6MiiXoxlrQso6rbVKxubNFhagkwB44QApFrQF/x0CL7xmyqOsBTLm91eSY5D yrUgcm6FMX3th9v35chSkhL1BAkaHY45bhjKOTo85QdNBhGjiIQqnblB6fRwSvUr nimucZ8gLUGzPSIeY1zlx3D9b5qzotJlZEyZtHKxE0u54uyKk3sDHJMN9PF2ujeO 4ci9PoSDXm3wcYLnOBUBjA1VfDno/v+JX6x7tUUZVPBfB88URwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/WPAk1T8NajISD05+ORqrrtB14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvOTUzZTBlNDctZWUzNC0z MTBkLWExYWUtNmU4MWFhMjRjYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIB9537BJ/YGJZ96lencq2TmOeuamTgSvSgmvdaoW7X2wuKmlgY6 vC4JLJKErgCjX1cN5lNkB59+heeNTdI3MwmUO0+vhlMviSLF3hpOWMk97ZuQDH86 oJuQwHdMzR7YB1jcGiJsIw79MWwYOCArjF1bc27RvTh0eCl5tPzYiliOAMOn+arU Va9ajFmORMXIBlqQhBrrqmI8RpJkR/1twXwpR1RJq4mksH9s726UlG9R5RPFlw7y jd5Lm1x1aYjkgJafd46EA/Iw+U2+2DZy3kfGdrB7rwEJHJ3trWjNDT2DgdOzKvFM GPzrILKMLPF9NYWR2gShEWZ9jGqCs7vZb1Y= -----END CERTIFICATE-----Generated at Tue Sep 22 22:13:42 2026 by rpki-client