$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa File: 60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa (raw, json) Hash identifier: ruP2wbJE15pyC6tS966kWEPiwXmjL3Z8c6EVsUXaFaY= Subject key identifier: 51:FA:D5:2A:2E:96:E3:91:95:8B:6D:05:4C:1C:E4:FA:B8:A8:3D:E5 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584F00DCC974A5B2BC04176ACFA2 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2604:1f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c9:74:a5:b2:bc:04:17:6a:cf:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=b24ac3bc-2701-44bf-92f8-9b8b5aad421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:83:d1:dc:bd:2b:e8:07:4a:3e:d1:8b:e9: a5:b5:fc:29:97:f9:e4:57:f1:6d:7e:bc:4e:24:35: 9c:4c:d8:45:c3:ce:ca:29:b6:3a:24:5d:92:7a:b1: 2b:29:44:d3:23:5a:11:91:45:0b:82:a0:e7:d7:1e: eb:e3:0a:78:e5:bc:50:9e:2b:c0:b5:5a:1d:f3:5a: c1:e2:9d:73:e9:5d:72:64:57:d5:e8:ff:9e:de:38: cc:a0:4d:37:6a:e8:d2:a8:bd:1f:19:cc:90:55:1f: 39:04:0b:ab:2f:1a:27:8d:4c:43:8c:6d:5a:c4:5f: 89:25:ea:4d:1f:24:81:a1:6a:23:e5:ff:f2:7a:7a: 2c:77:76:2b:ef:2f:27:85:86:fe:02:08:14:5d:67: f8:99:ab:c9:1b:68:11:a2:0f:dc:6e:85:c6:be:96: 79:31:b0:42:ba:67:9a:0b:c4:40:29:87:51:3e:02: 05:2e:90:3d:35:b9:3b:a3:e9:34:66:26:6d:da:60: a5:12:42:55:f2:05:98:de:2c:90:91:74:fa:d0:14: b3:4d:bc:20:4c:c5:d0:26:04:9c:90:1c:55:e8:d5: 64:f2:ae:2c:9c:81:56:18:21:e5:0a:db:dd:f8:b0: 72:0c:63:7a:77:ae:11:30:b6:be:7f:2e:64:cf:68: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FA:D5:2A:2E:96:E3:91:95:8B:6D:05:4C:1C:E4:FA:B8:A8:3D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3c:9a:19:62:1a:c4:92:e2:ea:6c:f7:3c:95:99:cc:64:60: a9:b7:c1:be:80:fd:da:58:7f:fb:76:24:5e:6f:31:48:1c:af: 1f:52:60:cc:c7:6a:17:fc:36:b5:5f:e7:c8:6c:39:6b:94:fa: 41:53:89:a8:ae:73:76:d6:10:32:e8:98:da:d6:c2:06:3c:b6: af:fe:42:a2:63:5c:b7:63:cf:53:8b:2e:ef:aa:41:ba:7e:3b: ec:51:6e:d5:fe:a3:4e:0a:f5:a9:43:39:23:e3:47:01:7a:7e: a5:73:1a:25:4b:c6:28:50:79:c5:e5:6e:58:fd:4e:28:26:e6: 68:81:ca:3f:cf:03:0f:5e:d8:11:3c:bb:c5:f2:5c:06:04:a9: 7a:69:fb:f7:64:bf:9a:b1:bb:67:2c:a1:1f:ad:1b:ae:f0:c9: 73:c9:54:a5:95:cc:88:82:0e:49:d3:47:c9:19:0f:ee:a6:47: 17:2f:87:82:45:95:bf:80:18:86:2b:04:4d:a9:57:83:37:f0: 27:cf:19:f0:38:97:4b:77:97:cf:fc:17:67:5a:8c:dd:26:af: 80:af:f8:b1:92:fa:4e:88:02:09:b7:60:bc:7d:f2:a6:8a:b6: 21:07:04:92:3b:aa:1a:70:5d:b6:81:b0:e2:82:d4:64:40:7d: cf:83:bf:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8A3Ml0pbK8BBdqz6IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YjI0YWMzYmMtMjcwMS00NGJmLTkyZjgtOWI4YjVhYWQ0MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSyD0dy9K+gHSj7Ri+mltfwpl/nkV/FtfrxO JDWcTNhFw87KKbY6JF2SerErKUTTI1oRkUULgqDn1x7r4wp45bxQnivAtVod81rB 4p1z6V1yZFfV6P+e3jjMoE03aujSqL0fGcyQVR85BAurLxonjUxDjG1axF+JJepN HySBoWoj5f/yenosd3Yr7y8nhYb+AggUXWf4mavJG2gRog/cboXGvpZ5MbBCumea C8RAKYdRPgIFLpA9Nbk7o+k0ZiZt2mClEkJV8gWY3iyQkXT60BSzTbwgTMXQJgSc kBxV6NVk8q4snIFWGCHlCtvd+LByDGN6d64RMLa+fy5kz2hoYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFH61SouluORlYttBUwc5Pq4qD3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvNjBiNjU2ZDEtMmE0MS0z YTNiLWJmZjItMTBkM2YzYjhmNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFM8mhliGsSS4ups9zyVmcxkYKm3wb6A/dpYf/t2JF5vMUgcrx9S YMzHahf8NrVf58hsOWuU+kFTiaiuc3bWEDLomNrWwgY8tq/+QqJjXLdjz1OLLu+q Qbp+O+xRbtX+o04K9alDOSPjRwF6fqVzGiVLxihQecXlblj9Tigm5miByj/PAw9e 2BE8u8XyXAYEqXpp+/dkv5qxu2csoR+tG67wyXPJVKWVzIiCDknTR8kZD+6mRxcv h4JFlb+AGIYrBE2pV4M38CfPGfA4l0t3l8/8F2dajN0mr4Cv+LGS+k6IAgm3YLx9 8qaKtiEHBJI7qhpwXbaBsOKC1GRAfc+Dv24= -----END CERTIFICATE-----Generated at Tue Sep 22 09:33:01 2026 by rpki-client