$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa File: a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa (raw, json) Hash identifier: ezl+rMiPoMM+Ms1JY+fdvSkHkcbGICA0WnydEl1MwiM= Subject key identifier: BC:FB:3A:C0:24:82:36:AC:EE:5F:E8:C5:17:8B:B5:27:97:84:8D:47 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584F30526F3DA7E0D21446550A80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 21947 IP address blocks: 2604:300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:6f:3d:a7:e0:d2:14:46:55:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=da519686-5103-4898-80d6-7f0006a7a5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8b:dd:45:28:32:81:bd:63:ac:ad:12:2e:8d: 51:31:87:15:25:3b:e7:c6:30:d3:ca:f9:26:6a:c8: 5d:f8:48:31:ec:a5:fc:d5:07:b2:64:24:a8:1e:89: 66:22:0b:b4:2c:00:c3:3d:c7:fe:85:8e:59:13:4f: 82:fc:b0:66:e4:a0:98:ac:c0:42:e9:66:c6:6d:7d: 63:ab:7c:4c:a7:27:24:4a:e3:72:c7:bc:3e:f0:c9: 08:61:c0:91:82:4b:a1:75:8c:61:a2:7f:17:dc:ad: cb:bf:c6:e1:66:c2:31:f8:0a:13:78:90:74:94:78: bd:53:02:85:99:5e:14:1a:85:69:f9:98:c7:48:65: 98:5c:52:91:13:84:e5:65:85:49:e9:00:42:70:24: 48:6f:44:a4:1d:f4:33:87:4b:73:73:eb:83:25:45: 8e:04:9f:64:64:45:a9:6b:9f:4c:d1:77:e9:e7:bf: 77:da:8b:28:31:65:ab:16:45:d9:3a:56:8a:2c:44: 7b:f2:5b:2c:38:03:27:e1:69:85:d5:58:82:a8:3e: e3:e3:9a:63:26:2f:83:88:1c:80:39:98:bf:08:46: 80:9f:f3:19:02:0a:0e:58:0f:2c:ec:d1:dd:ea:2b: 35:39:d1:23:ea:37:88:4a:73:e3:26:c4:15:76:99: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:3A:C0:24:82:36:AC:EE:5F:E8:C5:17:8B:B5:27:97:84:8D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/a31b7ee3-6430-3b45-b786-7b55ca0b7b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2604:300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:95:ca:c9:b0:90:d5:41:3d:51:03:04:f8:af:62:82:f7:38: 08:48:ad:eb:19:2a:1e:9b:1c:15:8a:f9:4c:2c:76:72:a0:61: 15:43:28:82:63:fb:9c:cf:e7:d1:25:06:63:59:27:6a:ae:2f: a3:f3:7d:34:cf:36:2b:cd:25:6f:e2:55:84:41:15:5d:6a:19: c4:b0:b6:a6:b2:ef:d8:3c:24:1d:11:8f:fd:6a:e4:04:38:d7: f2:fd:93:8d:a9:c0:77:50:5a:72:e8:9a:9d:a4:0a:f2:cd:d3: e9:b7:9f:20:4b:0a:72:4a:93:04:9e:fa:13:8f:63:eb:7c:c6: ae:52:2b:b7:26:4d:27:2b:b7:4a:f1:7e:82:43:9d:68:f5:d8: ee:92:7f:93:e2:f7:24:1c:2c:62:05:32:b9:b4:8d:bc:7e:b6: 47:fc:ae:1c:ce:d9:68:d4:21:55:73:2e:db:11:b0:05:84:16: c7:b4:13:48:c2:7a:c6:df:19:09:a0:7a:05:20:79:ef:3f:1c: 1c:76:8c:fb:fe:02:46:38:86:cc:73:3a:97:33:4d:ef:69:e4: 05:71:73:3d:ef:39:75:6b:6e:61:41:d1:11:48:10:06:c1:8d: 95:bf:84:61:c9:36:0d:9f:2e:4c:9f:dd:a6:50:7c:e9:ca:81: b8:01:51:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8wUm89p+DSFEZVCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZGE1MTk2ODYtNTEwMy00ODk4LTgwZDYtN2YwMDA2YTdhNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ovdRSgygb1jrK0SLo1RMYcVJTvnxjDTyvkm ashd+Egx7KX81QeyZCSoHolmIgu0LADDPcf+hY5ZE0+C/LBm5KCYrMBC6WbGbX1j q3xMpyckSuNyx7w+8MkIYcCRgkuhdYxhon8X3K3Lv8bhZsIx+AoTeJB0lHi9UwKF mV4UGoVp+ZjHSGWYXFKRE4TlZYVJ6QBCcCRIb0SkHfQzh0tzc+uDJUWOBJ9kZEWp a59M0Xfp57932osoMWWrFkXZOlaKLER78lssOAMn4WmF1ViCqD7j45pjJi+DiByA OZi/CEaAn/MZAgoOWA8s7NHd6is1OdEj6jeISnPjJsQVdpkdvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLz7OsAkgjas7l/oxReLtSeXhI1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYTMxYjdlZTMtNjQzMC0z YjQ1LWI3ODYtN2I1NWNhMGI3YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQDADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPlcrJsJDVQT1RAwT4r2KC9zgISK3rGSoemxwVivlMLHZyoGEVQyiC Y/ucz+fRJQZjWSdqri+j8300zzYrzSVv4lWEQRVdahnEsLamsu/YPCQdEY/9auQE ONfy/ZONqcB3UFpy6JqdpAryzdPpt58gSwpySpMEnvoTj2PrfMauUiu3Jk0nK7dK 8X6CQ51o9djukn+T4vckHCxiBTK5tI28frZH/K4cztlo1CFVcy7bEbAFhBbHtBNI wnrG3xkJoHoFIHnvPxwcdoz7/gJGOIbMczqXM03vaeQFcXM97zl1a25hQdERSBAG wY2Vv4RhyTYNny5Mn92mUHzpyoG4AVEO -----END CERTIFICATE-----Generated at Thu Sep 24 05:01:02 2026 by rpki-client