$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa File: 69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa (raw, json) Hash identifier: Cf01IP2ECK5GlflPoJ1Yq7VSL5k0lBSebL2qTWuBb3E= Subject key identifier: 20:32:A8:1E:E5:15:36:E6:57:4E:42:AD:CB:DF:10:5A:F9:AF:0D:3E Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584F58CD580B8BBEE34AF2CF0280 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 1206 IP address blocks: 2001:5e8:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:58:0b:8b:be:e3:4a:f2:cf:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=61905ddb-0071-4ce7-9b05-1ff07ebed4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:b5:c5:87:53:32:f7:93:a3:9e:c9:ab:0c: 92:ec:72:36:1c:e6:17:54:d0:a1:68:6c:cc:1a:f8: 44:42:c2:19:04:65:61:60:a5:55:04:18:0d:af:02: 9e:94:59:fb:74:85:b5:58:7c:89:c3:5a:29:83:6c: df:d2:86:27:0b:70:e8:26:46:ce:4f:be:1e:a0:db: 74:10:8a:8f:0e:07:f7:59:a8:1f:88:75:21:75:f8: 9d:bb:1b:cf:03:62:f5:b9:e4:fb:15:4b:6b:63:52: 29:57:9b:e6:fb:4d:8d:a9:00:85:af:9d:26:67:d4: e6:2f:bf:61:fb:77:5f:e9:62:e0:24:41:60:c6:9a: 5f:ab:ca:39:88:a5:54:c1:57:76:77:62:dd:6e:d9: 2e:f9:57:19:3b:df:b6:62:50:62:82:fe:7a:89:f0: a4:23:61:96:58:73:1f:b4:0f:66:a3:78:53:9c:51: 52:ca:58:5c:de:c8:31:b1:88:34:a1:50:20:67:9a: 75:22:d4:54:29:22:a0:2f:82:7c:ec:d7:21:0c:e3: 8a:29:67:24:c2:b4:da:aa:de:4e:ce:12:94:0b:92: 58:04:78:b1:ef:29:ef:54:a6:1e:da:c0:69:42:3d: 65:6b:92:ac:38:fc:27:5e:eb:64:6c:3f:d9:de:ad: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:A8:1E:E5:15:36:E6:57:4E:42:AD:CB:DF:10:5A:F9:AF:0D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:56:45:0a:a4:71:52:42:75:f8:7b:09:b3:ab:a9:4b:87:ae: df:b8:30:33:a9:50:f7:5f:9a:6a:98:13:5a:d2:00:4d:c2:c3: ed:bd:ec:8b:47:2f:4a:0e:9c:29:b8:9f:19:47:d9:ba:5c:d4: 0b:76:97:5d:89:54:75:15:71:0a:f6:f0:9d:bc:f7:13:15:63: 7e:13:28:b0:6a:52:97:64:2d:2d:12:18:4d:08:b8:48:92:7f: 61:d8:b8:43:b7:f4:88:dd:60:64:e7:71:24:c2:b8:a5:09:9f: 35:03:1c:7f:82:61:28:18:6b:6d:bf:e0:d1:5e:3e:fd:11:c6: 21:51:fb:0e:8a:ae:2c:f4:07:d8:67:c5:36:45:e3:e8:5f:bd: a7:c7:25:28:f0:45:d3:2a:ad:ef:61:32:d6:be:b4:cf:32:5a: d5:73:c4:48:1f:f9:32:d1:d6:59:69:95:5c:2e:73:68:64:9f: 23:1a:7f:b6:12:ac:ae:e0:ec:8a:31:ac:03:24:9a:8d:8f:10: 4c:7c:30:5e:33:2c:a1:dc:ff:fd:ee:54:6b:fe:a5:b6:c2:b0: 26:a0:72:7e:b8:31:89:bd:74:34:23:14:e2:4d:f6:fc:dd:47: fb:86:49:3f:ed:8e:a7:ea:db:6e:3e:b1:b9:16:77:33:ac:94: 5f:fb:45:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9YzVgLi77jSvLPAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NjE5MDVkZGItMDA3MS00Y2U3LTliMDUtMWZmMDdlYmVkNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eu1xYdTMveTo57JqwyS7HI2HOYXVNChaGzM GvhEQsIZBGVhYKVVBBgNrwKelFn7dIW1WHyJw1opg2zf0oYnC3DoJkbOT74eoNt0 EIqPDgf3WagfiHUhdfiduxvPA2L1ueT7FUtrY1IpV5vm+02NqQCFr50mZ9TmL79h +3df6WLgJEFgxppfq8o5iKVUwVd2d2Ldbtku+VcZO9+2YlBigv56ifCkI2GWWHMf tA9mo3hTnFFSylhc3sgxsYg0oVAgZ5p1ItRUKSKgL4J87NchDOOKKWckwrTaqt5O zhKUC5JYBHix7ynvVKYe2sBpQj1la5KsOPwnXutkbD/Z3q19fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAyqB7lFTbmV05CrcvfEFr5rw0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvNjk4MTFhN2QtODJkNS0z ZmQ1LWJkNzktMmZlMTk2NGFkNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEF6AAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxWRQqkcVJCdfh7CbOrqUuHrt+4MDOpUPdfmmqYE1rSAE3Cw+29 7ItHL0oOnCm4nxlH2bpc1At2l12JVHUVcQr28J289xMVY34TKLBqUpdkLS0SGE0I uEiSf2HYuEO39IjdYGTncSTCuKUJnzUDHH+CYSgYa22/4NFePv0RxiFR+w6Kriz0 B9hnxTZF4+hfvafHJSjwRdMqre9hMta+tM8yWtVzxEgf+TLR1llplVwuc2hknyMa f7YSrK7g7IoxrAMkmo2PEEx8MF4zLKHc//3uVGv+pbbCsCagcn64MYm9dDQjFOJN 9vzdR/uGST/tjqfq224+sbkWdzOslF/7RcU= -----END CERTIFICATE-----Generated at Wed Nov 4 18:50:38 2026 by rpki-client