$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa File: e955d497-3567-35ca-af2a-62ffdc30b1c1.roa (raw, json) Hash identifier: l6YYA/IJut8PMQ4lEjeqVrzleTkqRayX0d1EyqIYtq0= Subject key identifier: CB:B1:BB:D8:D0:33:DD:52:EF:0A:CC:35:C6:56:62:6C:3D:84:04:3F Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584F6F23072E7AF8EBE084A00060 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 5050 IP address blocks: 2001:5e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:07:2e:7a:f8:eb:e0:84:a0:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=3d6d3976-7c1b-41a7-b7ad-1e4c40d933f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:b2:61:be:73:c7:5e:e8:17:46:58:d7:d3: b5:93:39:d1:e0:ec:2c:92:a7:6d:e6:ae:54:d5:67: c1:19:c2:b3:1a:ec:06:3c:3c:40:89:f4:b4:5c:07: 9e:96:8f:14:21:61:59:1a:7b:f8:4a:9b:9b:33:67: f2:57:72:b2:b5:c8:c2:bf:8f:74:76:69:ba:83:f6: 42:0f:b9:95:2d:6c:5d:fc:a6:9d:64:a9:d8:15:17: b9:77:95:36:35:92:d2:ec:68:c4:f1:23:9d:ec:c2: 90:57:e3:2e:a5:72:c1:fc:94:77:5f:c3:67:9b:52: c3:80:c5:a8:a5:c2:a1:9e:9b:f4:3f:e4:7e:69:97: 6f:90:22:c5:24:5d:b6:e8:c4:55:55:c5:4b:d7:14: 93:d2:23:7a:33:fb:cc:75:b2:a5:21:7e:a7:1e:43: 35:8d:7f:26:ae:28:9f:0c:04:24:73:28:93:3d:54: 4c:c6:42:bc:af:78:3b:9d:b4:f7:16:83:0a:46:e3: f5:b6:b0:2a:27:63:7b:62:c3:d7:b2:cf:a5:9f:b5: 81:40:70:cc:dd:30:8f:ee:53:4e:2d:eb:a0:e5:bf: 15:03:43:5f:01:1a:53:ff:25:6e:a3:62:66:e6:2b: 29:c8:0e:9e:43:d0:30:f2:65:2f:94:2c:77:be:ae: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B1:BB:D8:D0:33:DD:52:EF:0A:CC:35:C6:56:62:6C:3D:84:04:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e2:80:0d:06:6e:b3:e5:76:5f:9a:4d:11:a8:45:0d:bd:9e: c6:75:22:88:32:e0:d0:e9:58:19:59:ff:57:c3:54:41:fb:76: 45:7e:a9:fd:e6:1b:a8:a8:bf:b6:a6:cb:6a:47:d1:6a:11:21: 3e:bd:74:09:37:df:07:ba:17:f6:aa:db:21:e5:07:be:ed:cd: 82:5b:fa:7c:f4:f6:46:a3:31:53:40:97:ae:9d:19:cd:80:ef: c8:7a:9c:bc:17:3d:98:ec:c0:f1:bb:9b:1e:29:e3:f9:03:63: e0:f8:08:36:92:5f:bf:2c:60:42:18:3f:4a:42:18:b6:ed:0f: 86:51:d8:fe:25:26:d4:30:29:1e:ed:57:e5:f2:7b:df:cc:dd: 7f:5c:03:2a:b7:ec:b6:48:04:cb:9f:27:05:8b:bd:7c:e4:c9: 59:65:e2:50:82:6e:59:be:25:32:15:ed:c3:db:10:41:82:6d: 44:25:03:04:e4:5a:ba:4f:03:be:f3:22:f3:49:bd:cf:df:1e: 6a:19:7e:a4:5f:c8:96:ba:ee:a5:77:8e:98:4a:69:69:1b:d1: ac:2d:ae:0b:34:46:7b:3e:af:5c:8c:32:62:07:7e:19:c3:98: 67:31:a3:47:a2:15:55:83:dc:6f:e4:93:40:10:b6:7b:a5:64: 9c:b2:8b:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9vIwcuevjr4ISgAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk M2Q2ZDM5NzYtN2MxYi00MWE3LWI3YWQtMWU0YzQwZDkzM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFuyYb5zx17oF0ZY19O1kznR4Owskqdt5q5U 1WfBGcKzGuwGPDxAifS0XAeelo8UIWFZGnv4SpubM2fyV3KytcjCv490dmm6g/ZC D7mVLWxd/KadZKnYFRe5d5U2NZLS7GjE8SOd7MKQV+MupXLB/JR3X8Nnm1LDgMWo pcKhnpv0P+R+aZdvkCLFJF226MRVVcVL1xST0iN6M/vMdbKlIX6nHkM1jX8mriif DAQkcyiTPVRMxkK8r3g7nbT3FoMKRuP1trAqJ2N7YsPXss+ln7WBQHDM3TCP7lNO Leug5b8VA0NfARpT/yVuo2Jm5ispyA6eQ9Aw8mUvlCx3vq6Y3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMuxu9jQM91S7wrMNcZWYmw9hAQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvZTk1NWQ0OTctMzU2Ny0z NWNhLWFmMmEtNjJmZmRjMzBiMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEF6DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBo4oANBm6z5XZfmk0RqEUNvZ7GdSKIMuDQ6VgZWf9Xw1RB+3ZFfqn9 5huoqL+2pstqR9FqESE+vXQJN98Huhf2qtsh5Qe+7c2CW/p89PZGozFTQJeunRnN gO/Iepy8Fz2Y7MDxu5seKeP5A2Pg+Ag2kl+/LGBCGD9KQhi27Q+GUdj+JSbUMCke 7Vfl8nvfzN1/XAMqt+y2SATLnycFi7185MlZZeJQgm5ZviUyFe3D2xBBgm1EJQME 5Fq6TwO+8yLzSb3P3x5qGX6kX8iWuu6ld46YSmlpG9GsLa4LNEZ7Pq9cjDJiB34Z w5hnMaNHohVVg9xv5JNAELZ7pWScsotk -----END CERTIFICATE-----Generated at Wed Nov 4 12:12:55 2026 by rpki-client