$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa File: c4591a09-3c38-30a4-9a44-a79525e5c586.roa (raw, json) Hash identifier: KK+SyjIAk8BTHEIW6Rt3SpPZwN40qh2G72gyeinH1oc= Subject key identifier: 32:48:FC:34:D4:E5:AF:DF:0F:5B:08:6C:77:9F:71:AB:A5:D8:21:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49897FDDE1F0CD7FB8EE53D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 2600:140b:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:7f:dd:e1:f0:cd:7f:b8:ee:53:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3afb7a3f-a32e-412a-bc8f-7a32ab3d5262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:23:41:0e:d2:2b:3f:14:68:66:2d:bb:8e: f4:c5:1d:f0:15:a9:37:62:2f:91:33:79:e0:6f:fd: 2c:32:8f:24:92:6e:b4:c4:53:6e:dc:5a:6a:ab:d7: 4d:bf:a1:92:bd:a6:82:8e:a2:28:80:b8:96:2e:4f: b4:75:6d:b3:82:e9:19:55:7b:75:a5:6b:4c:44:ae: 00:86:c8:e5:49:45:f6:86:94:43:fa:58:18:9e:9e: 06:32:89:39:d1:23:b8:23:b2:31:64:0e:9c:2d:15: 09:b9:f8:0e:52:ea:de:79:86:ba:e7:b5:c0:0c:71: 71:fc:37:63:13:f5:2b:a6:73:a6:a3:0c:1e:00:89: ef:db:2a:80:40:ae:74:22:27:d2:7d:b5:3a:08:2c: ee:86:a6:c4:dc:1a:f6:ba:48:55:d9:6b:ee:e0:47: b0:91:6c:6d:01:48:d5:5f:1f:34:5a:c0:cc:61:2f: 96:cb:62:3a:f7:6c:d0:70:da:fe:88:ff:10:4f:4d: 24:bc:8d:1b:43:9b:5a:30:ac:ac:2a:1a:08:23:5b: 30:81:a3:03:b0:3b:47:ac:21:f1:f2:e0:7d:bf:b8: e1:b7:95:c2:70:8c:08:99:70:1d:3f:97:47:28:b9: f1:2d:9b:05:ee:a2:82:55:ba:63:94:b7:7c:db:e3: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:48:FC:34:D4:E5:AF:DF:0F:5B:08:6C:77:9F:71:AB:A5:D8:21:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:3a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0c:53:b8:f1:14:23:63:e8:e0:f7:6b:87:0d:2d:e1:24:e2: 5e:bc:73:4b:b7:c6:2d:ab:f1:c3:49:31:30:8d:7d:70:16:3b: 25:3a:11:1b:d0:36:fe:70:f5:c7:91:3d:b1:55:a7:a9:29:d8: 53:f9:3e:37:55:a1:28:f5:de:63:dc:43:75:59:67:92:24:49: 5a:72:48:0c:7a:d1:2f:cb:0a:f1:fe:eb:db:94:b2:99:c1:0b: a6:34:87:d1:78:b4:e0:f6:84:09:15:08:0a:ff:4f:63:f5:8c: a1:47:c9:8e:bd:07:8c:29:e5:fd:e0:a0:e9:0f:2d:9d:77:58: 9d:56:3a:58:96:1c:e1:5d:d6:ed:78:51:2c:2f:de:33:63:de: 1d:aa:0d:2f:7c:63:b9:88:c6:a2:fb:24:06:7d:db:77:ab:c3: 01:c1:34:27:e1:85:f5:ff:14:f8:46:ad:58:16:5d:c4:61:37: c4:96:77:34:bc:2a:e1:a1:71:c3:0a:68:97:62:a6:20:8a:6e: 40:ae:5f:f2:31:37:5f:86:a2:4b:2d:39:70:c2:73:74:4a:37: f0:de:32:54:29:de:0b:cd:14:fc:77:ed:71:3a:47:1d:39:45: 66:30:bb:17:e5:8a:ae:09:5c:92:ae:6d:e4:28:92:60:36:a6: d9:91:62:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiX/d4fDNf7juU9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2FmYjdhM2YtYTMyZS00MTJhLWJjOGYtN2EzMmFiM2Q1MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP8jQQ7SKz8UaGYtu470xR3wFak3Yi+RM3ng b/0sMo8kkm60xFNu3Fpqq9dNv6GSvaaCjqIogLiWLk+0dW2zgukZVXt1pWtMRK4A hsjlSUX2hpRD+lgYnp4GMok50SO4I7IxZA6cLRUJufgOUureeYa657XADHFx/Ddj E/UrpnOmowweAInv2yqAQK50IifSfbU6CCzuhqbE3Br2ukhV2Wvu4EewkWxtAUjV Xx80WsDMYS+Wy2I692zQcNr+iP8QT00kvI0bQ5taMKysKhoII1swgaMDsDtHrCHx 8uB9v7jht5XCcIwImXAdP5dHKLnxLZsF7qKCVbpjlLd82+OpEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJI/DTU5a/fD1sIbHefcaul2CEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ1OTFhMDktM2MzOC0z MGE0LTlhNDQtYTc5NTI1ZTVjNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCzoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUMU7jxFCNj6OD3a4cNLeEk4l68c0u3xi2r8cNJMTCNfXAWOyU6 ERvQNv5w9ceRPbFVp6kp2FP5PjdVoSj13mPcQ3VZZ5IkSVpySAx60S/LCvH+69uU spnBC6Y0h9F4tOD2hAkVCAr/T2P1jKFHyY69B4wp5f3goOkPLZ13WJ1WOliWHOFd 1u14USwv3jNj3h2qDS98Y7mIxqL7JAZ923erwwHBNCfhhfX/FPhGrVgWXcRhN8SW dzS8KuGhccMKaJdipiCKbkCuX/IxN1+GokstOXDCc3RKN/DeMlQp3gvNFPx37XE6 Rx05RWYwuxfliq4JXJKubeQokmA2ptmRYlM= -----END CERTIFICATE-----Generated at Sun Sep 27 07:53:41 2026 by rpki-client