$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d351a4-d174-3f5f-a6e9-365c4fac912c.roa File: 42d351a4-d174-3f5f-a6e9-365c4fac912c.roa (raw, json) Hash identifier: OY5gBZ3Nigs5/KcBRKT+TH09NRB/4CJQqbH4BVAYJUg= Subject key identifier: D3:E4:89:3C:50:DD:FB:39:26:10:A3:56:63:46:82:5A:BB:22:91:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4984824A8A98F98BFDD07540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d351a4-d174-3f5f-a6e9-365c4fac912c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9498 IP address blocks: 2600:140f:6800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:82:4a:8a:98:f9:8b:fd:d0:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0aa3b3c-9499-4ec9-9b45-d31c65674782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:d5:46:a7:9e:44:61:e4:f4:ff:42:13:75: 2e:ef:97:e0:10:69:1c:41:5e:5e:36:a4:5f:b2:ad: c7:17:19:8c:d3:a7:76:c9:48:4d:64:ec:ed:ad:0a: e3:34:a3:76:c9:2d:79:52:90:7b:60:5b:20:02:8f: f8:a9:aa:af:28:5a:fa:77:e2:70:56:06:25:84:27: b1:1d:3d:47:c7:5a:e8:9f:26:d0:45:23:44:21:1f: 01:b0:58:8a:0d:7d:57:65:70:81:dd:73:15:d2:18: a0:ef:16:a4:f4:43:e9:b3:56:2d:ad:65:11:95:96: 83:be:a0:7b:0e:51:6d:5e:3f:b1:4e:54:09:84:18: f2:65:1c:37:7a:46:2f:2d:01:97:fc:19:57:24:54: 12:e2:77:df:7b:a2:c5:91:33:be:e0:dd:fe:7a:9e: 31:92:37:84:5b:36:7b:af:5f:fa:a9:6e:3a:b0:fc: c2:f3:db:32:c7:9f:ae:88:46:ad:d5:12:29:5d:e6: bc:4a:24:5c:93:63:6b:81:88:5e:90:8a:a2:6a:0b: 32:a3:65:ef:97:b1:c9:cb:2e:94:1b:65:10:5d:c3: 50:02:7c:7e:4b:e1:9b:a9:98:46:43:50:3c:8d:47: e9:a2:10:c5:2d:0a:fc:a9:82:3d:57:4e:76:9e:2b: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:89:3C:50:DD:FB:39:26:10:A3:56:63:46:82:5A:BB:22:91:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42d351a4-d174-3f5f-a6e9-365c4fac912c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:6800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fa:fc:90:d3:2c:d6:39:24:42:9a:d6:9b:89:29:93:42:28: ae:be:e1:79:9c:78:89:a1:aa:9c:9d:21:6b:e5:c3:0e:4c:69: c4:e0:e9:ba:6f:71:a2:07:55:87:66:9e:7a:db:5f:0b:c6:c6: fd:e6:a0:22:16:47:03:65:30:d2:38:9f:c4:ad:a1:0e:06:40: 2d:74:a1:71:12:9d:e0:c0:d2:0c:36:33:4e:5e:83:09:59:f4: d1:31:1b:27:de:b9:19:69:03:09:2b:92:bb:8a:d4:c3:1d:2e: f3:31:aa:25:f8:90:20:66:7d:b3:8a:ff:8c:03:5e:1f:93:f5: d4:64:81:17:ae:bd:9d:63:05:04:0a:ba:c9:c1:94:b7:49:ba: 16:5e:8e:ac:e6:de:31:2f:c5:30:1d:34:df:aa:4a:9c:1f:17: b2:2d:1d:bd:13:e8:d3:23:ed:3e:38:7c:74:f3:47:d0:9c:21: 77:6f:2d:6d:f3:ae:74:42:9c:d1:54:1a:11:b7:74:37:6e:af: 0d:8d:3f:cd:71:05:08:6e:41:ae:59:41:f3:97:77:c9:65:c6: 61:02:8f:2d:f6:03:a2:24:f0:7d:e1:59:88:d0:5c:75:79:49: 06:08:36:87:29:d5:ba:c0:4d:90:c6:3f:8b:b1:ea:ee:34:e8: e1:e1:e6:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhIJKipj5i/3QdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBhYTNiM2MtOTQ5OS00ZWM5LTliNDUtZDMxYzY1Njc0NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16fVRqeeRGHk9P9CE3Uu75fgEGkcQV5eNqRf sq3HFxmM06d2yUhNZOztrQrjNKN2yS15UpB7YFsgAo/4qaqvKFr6d+JwVgYlhCex HT1Hx1ronybQRSNEIR8BsFiKDX1XZXCB3XMV0hig7xak9EPps1YtrWURlZaDvqB7 DlFtXj+xTlQJhBjyZRw3ekYvLQGX/BlXJFQS4nffe6LFkTO+4N3+ep4xkjeEWzZ7 r1/6qW46sPzC89syx5+uiEat1RIpXea8SiRck2NrgYhekIqiagsyo2Xvl7HJyy6U G2UQXcNQAnx+S+GbqZhGQ1A8jUfpohDFLQr8qYI9V052nivEZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPkiTxQ3fs5JhCjVmNGglq7IpFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJkMzUxYTQtZDE3NC0z ZjVmLWE2ZTktMzY1YzRmYWM5MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD2gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFz6/JDTLNY5JEKa1puJKZNCKK6+4XmceImhqpydIWvlww5MacTg 6bpvcaIHVYdmnnrbXwvGxv3moCIWRwNlMNI4n8StoQ4GQC10oXESneDA0gw2M05e gwlZ9NExGyfeuRlpAwkrkruK1MMdLvMxqiX4kCBmfbOK/4wDXh+T9dRkgReuvZ1j BQQKusnBlLdJuhZejqzm3jEvxTAdNN+qSpwfF7ItHb0T6NMj7T44fHTzR9CcIXdv LW3zrnRCnNFUGhG3dDdurw2NP81xBQhuQa5ZQfOXd8llxmECjy32A6Ik8H3hWYjQ XHV5SQYINocp1brATZDGP4ux6u406OHh5u0= -----END CERTIFICATE-----Generated at Sun Oct 4 08:56:04 2026 by rpki-client