$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/0a94db39-75bb-34c1-a9fe-623ddffd8e0f.roa File: 0a94db39-75bb-34c1-a9fe-623ddffd8e0f.roa (raw, json) Hash identifier: xwR6sg3SAOpcbgGsM23Z/PxchWbVnmcI5+6jSvCPKJU= Subject key identifier: EB:0F:FD:44:8F:DD:9A:59:79:E0:BF:F7:97:A2:5B:0E:16:0A:13:98 Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584FB3A680752E0D3AC852448500 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/0a94db39-75bb-34c1-a9fe-623ddffd8e0f.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 1207 IP address blocks: 2001:5e8:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:80:75:2e:0d:3a:c8:52:44:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=f036ce52-481d-4eed-94f1-d45407c42329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:71:0c:ed:14:f8:16:ff:3c:b3:57:3c:49: 9f:83:2a:f3:98:bc:02:e6:78:55:66:93:c9:8b:4e: 81:3b:42:31:c5:47:5f:40:82:7f:d9:72:9f:ee:00: 55:a4:54:29:c1:14:61:cf:77:74:36:cb:f2:82:ec: 2f:5e:45:e4:7f:3b:7a:e1:28:9a:2f:dd:8f:cf:36: 49:bc:55:0a:ad:c9:6e:3f:03:e6:e1:3d:7c:4b:42: a8:7f:a7:45:47:f1:21:03:75:1d:7b:71:f0:97:4e: 4a:39:25:49:c8:da:a8:11:d1:c1:b8:a6:ff:8d:4f: 76:52:7e:76:36:a2:4f:4f:05:a3:80:74:71:99:5b: 82:bf:7f:6f:5d:ed:89:ac:d7:d2:e3:f7:4a:76:2b: 22:05:f8:21:29:a6:34:45:ae:f1:6f:de:7b:67:e4: e4:83:67:7a:9f:8d:02:70:4f:46:fd:65:2c:2b:a9: 8f:26:82:01:c2:91:29:d6:c0:05:d0:d6:fe:5a:fc: 45:fd:ea:5d:f4:d6:7b:23:e4:0e:5c:1d:c8:88:18: 97:df:b2:b1:77:b4:e0:12:5b:fd:46:b3:86:10:eb: 6c:85:eb:96:2c:f7:e5:02:fc:fb:4e:30:1f:01:61: f2:47:22:8d:65:9f:5d:22:b3:d9:62:be:ff:5e:e1: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:FD:44:8F:DD:9A:59:79:E0:BF:F7:97:A2:5B:0E:16:0A:13:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/0a94db39-75bb-34c1-a9fe-623ddffd8e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3b:11:c1:fe:ad:76:6c:b3:10:7d:5e:b6:b7:4f:86:a4:aa: 81:50:f8:a7:13:b7:41:c6:b0:ac:a0:0f:d9:e0:b1:03:57:c9: 92:4a:f1:a4:3b:d1:11:2b:d9:31:f0:df:62:69:fd:a5:e6:a3: fa:02:b8:ad:b6:26:10:c8:4a:bd:bb:10:5e:cb:3a:df:8d:0f: 03:e8:6f:83:4a:ac:6d:6c:e3:30:ad:d9:2b:2f:26:c3:3b:d5: c5:d9:54:33:bd:24:7f:90:62:b3:71:80:59:08:fc:e0:3b:bd: 12:46:a7:4d:40:2b:de:78:52:b7:f7:46:9d:1e:d4:9e:68:f4: 68:ad:bb:f3:8c:f5:08:f5:50:6b:ca:3d:bc:84:29:6d:6e:3f: 4c:dc:8d:48:ad:99:87:e6:e5:20:88:74:ef:d7:be:39:fe:8e: 42:45:a6:2b:65:79:b0:4d:af:54:f3:ca:cf:c6:e2:99:a7:97: 29:89:f1:7c:80:42:37:43:25:1e:f1:cf:ec:07:5a:0f:53:15: e6:16:cd:b8:f9:bf:0f:5e:1b:22:fb:ec:0d:3e:8f:5c:0c:a9: 82:a7:64:34:ac:7d:9b:96:ce:14:5d:bd:5e:54:ef:cf:50:dc: 12:a8:11:46:88:28:87:58:0f:00:95:5a:a8:a8:b7:22:17:e3: 45:5c:8d:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+zpoB1Lg06yFJEhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZjAzNmNlNTItNDgxZC00ZWVkLTk0ZjEtZDQ1NDA3YzQyMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81xDO0U+Bb/PLNXPEmfgyrzmLwC5nhVZpPJ i06BO0IxxUdfQIJ/2XKf7gBVpFQpwRRhz3d0NsvyguwvXkXkfzt64SiaL92PzzZJ vFUKrcluPwPm4T18S0Kof6dFR/EhA3Ude3Hwl05KOSVJyNqoEdHBuKb/jU92Un52 NqJPTwWjgHRxmVuCv39vXe2JrNfS4/dKdisiBfghKaY0Ra7xb957Z+Tkg2d6n40C cE9G/WUsK6mPJoIBwpEp1sAF0Nb+WvxF/epd9NZ7I+QOXB3IiBiX37Kxd7TgElv9 RrOGEOtsheuWLPflAvz7TjAfAWHyRyKNZZ9dIrPZYr7/XuFc7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsP/USP3ZpZeeC/95eiWw4WChOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvMGE5NGRiMzktNzViYi0z NGMxLWE5ZmUtNjIzZGRmZmQ4ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEF6AAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIY7EcH+rXZssxB9Xra3T4akqoFQ+KcTt0HGsKygD9ngsQNXyZJK 8aQ70REr2THw32Jp/aXmo/oCuK22JhDISr27EF7LOt+NDwPob4NKrG1s4zCt2Ssv JsM71cXZVDO9JH+QYrNxgFkI/OA7vRJGp01AK954Urf3Rp0e1J5o9Gitu/OM9Qj1 UGvKPbyEKW1uP0zcjUitmYfm5SCIdO/Xvjn+jkJFpitlebBNr1Tzys/G4pmnlymJ 8XyAQjdDJR7xz+wHWg9TFeYWzbj5vw9eGyL77A0+j1wMqYKnZDSsfZuWzhRdvV5U 789Q3BKoEUaIKIdYDwCVWqiotyIX40VcjQk= -----END CERTIFICATE-----Generated at Wed Nov 4 13:45:55 2026 by rpki-client