$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/acc399b1-e7ed-3105-bb19-8812e748d9ac.roa File: acc399b1-e7ed-3105-bb19-8812e748d9ac.roa (raw, json) Hash identifier: p+vZaDTZt1gfr+iPdGUvgfOYlSBLx8CPv893ts0u2hU= Subject key identifier: 0D:1A:F8:C8:7A:41:9C:78:45:7C:21:79:0C:55:C8:3E:F2:DA:A8:AC Certificate issuer: /CN=1d432ad0-1985-498a-8914-c3c23261d988 Certificate serial: 010D0C9F4328584F9412AD973F4BBB3F12881B66 Authority key identifier: 61:9A:1B:1F:44:FB:C8:2F:3C:D8:5E:CA:B6:8A:AB:67:4A:91:41:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/acc399b1-e7ed-3105-bb19-8812e748d9ac.roa Signing time: Wed 21 Oct 2026 18:32:43 +0000 ROA not before: Wed 21 Oct 2026 18:32:43 +0000 ROA not after: Tue 19 Jan 2027 19:32:43 +0000 asID: 36472 IP address blocks: 2604:cec0::/32 maxlen: 32 2605:2100::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/1d432ad0-1985-498a-8914-c3c23261d988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/1d432ad0-1985-498a-8914-c3c23261d988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:12:ad:97:3f:4b:bb:3f:12:88:1b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d432ad0-1985-498a-8914-c3c23261d988 Validity Not Before: Oct 21 18:32:43 2026 GMT Not After : Jan 19 19:32:43 2027 GMT Subject: CN=b8ccf2b3-ca06-4738-9afd-85c243aee03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:3c:c9:3a:b3:c9:ca:5b:f9:06:7d:c1:ab: 03:27:23:ef:f1:ab:cd:69:01:95:17:32:e1:fa:ab: 78:7d:03:e0:33:de:cd:84:1d:64:9d:c2:9d:a7:19: eb:d5:68:7c:cb:59:f8:bd:93:d3:d8:90:87:84:c4: cc:4d:a4:49:10:0b:51:7c:8a:e5:01:80:14:0b:a0: 19:4f:cc:52:b6:12:71:d6:5a:2c:af:ba:1b:2e:70: e2:5f:e3:9e:4f:dc:a4:bf:74:f8:0e:44:2c:13:a0: d8:75:11:da:ba:15:c4:d8:4a:f2:a1:c0:cf:e8:29: 87:95:03:c1:63:7b:9b:5d:a6:ff:75:d6:59:79:09: c0:b9:f8:24:8a:46:f4:9e:20:e1:06:62:2d:bc:10: 54:0d:03:f9:95:54:02:77:09:8e:8f:b7:82:f3:20: 56:af:b8:38:14:a1:56:b4:64:a8:50:a5:a0:49:9a: f6:01:ba:de:66:51:60:51:c6:64:49:ce:6b:28:15: 86:97:10:5d:ad:63:ea:e1:be:0c:77:90:a6:0c:55: 59:e6:20:0f:29:4a:c7:15:ee:3a:64:1b:e0:2b:f1: a7:c5:35:cf:de:2a:fa:35:e1:cf:85:61:89:75:bb: 6e:c0:34:4a:8b:3e:7a:e4:f3:8b:15:ee:fb:ba:5f: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:F8:C8:7A:41:9C:78:45:7C:21:79:0C:55:C8:3E:F2:DA:A8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/acc399b1-e7ed-3105-bb19-8812e748d9ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988/1d432ad0-1985-498a-8914-c3c23261d988.crl X509v3 Authority Key Identifier: keyid:61:9A:1B:1F:44:FB:C8:2F:3C:D8:5E:CA:B6:8A:AB:67:4A:91:41:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d432ad0-1985-498a-8914-c3c23261d988.cer sbgp-ipAddrBlock: critical IPv6: 2604:cec0::/32 2605:2100::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:44:12:96:1e:56:fd:8f:fb:1b:8d:61:ef:95:23:57:61: 89:d7:2f:0c:42:73:2e:26:02:ba:0d:ed:a8:fc:d7:de:43:e6: e1:60:4a:a3:89:8e:fd:bf:08:9f:34:65:36:5b:81:72:ee:b4: fd:88:20:ec:ea:1c:4c:0b:ae:67:13:df:de:77:2e:8d:78:cd: 95:fb:b0:35:fd:77:7f:e3:07:0a:9b:c0:5b:d6:09:10:6d:c7: 87:e2:6f:e7:cd:ed:a3:4b:5c:fc:fa:7e:e1:09:4d:25:9d:6d: 22:d7:41:7e:f8:fa:9f:59:0a:79:bf:12:54:b7:a0:c1:19:fd: 3d:80:15:0d:40:da:d8:75:bb:62:ec:63:d9:e9:c7:12:8e:2c: a9:d5:bf:9a:cf:7c:ce:70:b0:f6:e3:af:77:77:24:21:3b:b3: 80:9a:e7:bc:1a:41:af:4c:09:35:dd:01:6e:ab:ec:a8:22:24: ef:d8:ae:ad:56:8e:48:26:b0:d8:05:98:52:a6:ad:27:9e:fe: b1:ba:b0:e5:33:5e:79:4c:f3:5b:e5:15:8f:3b:74:67:b3:fc: 8b:38:c8:ca:75:d5:ae:96:bd:71:aa:03:6e:4c:68:59:f8:45: 26:44:37:be:08:47:64:d4:4a:ec:18:4e:5b:c1:d9:cc:74:f4: f3:06:bd:6f -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE+UEq2XP0u7PxKIG2YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0MzJhZDAtMTk4NS00OThhLTg5MTQtYzNjMjMyNjFk OTg4MB4XDTI2MTAyMTE4MzI0M1oXDTI3MDExOTE5MzI0M1owLzEtMCsGA1UEAxMk YjhjY2YyYjMtY2EwNi00NzM4LTlhZmQtODVjMjQzYWVlMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQc8yTqzycpb+QZ9wasDJyPv8avNaQGVFzLh +qt4fQPgM97NhB1kncKdpxnr1Wh8y1n4vZPT2JCHhMTMTaRJEAtRfIrlAYAUC6AZ T8xSthJx1losr7obLnDiX+OeT9ykv3T4DkQsE6DYdRHauhXE2EryocDP6CmHlQPB Y3ubXab/ddZZeQnAufgkikb0niDhBmItvBBUDQP5lVQCdwmOj7eC8yBWr7g4FKFW tGSoUKWgSZr2AbreZlFgUcZkSc5rKBWGlxBdrWPq4b4Md5CmDFVZ5iAPKUrHFe46 ZBvgK/GnxTXP3ir6NeHPhWGJdbtuwDRKiz565POLFe77ul/WKwIDAQABo4IDXjCC A1owHQYDVR0OBBYEFA0a+Mh6QZx4RXwheQxVyD7y2qisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xZDQz MmFkMC0xOTg1LTQ5OGEtODkxNC1jM2MyMzI2MWQ5ODgvYWNjMzk5YjEtZTdlZC0z MTA1LWJiMTktODgxMmU3NDhkOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMWQ0MzJhZDAtMTk4NS00OThhLTg5 MTQtYzNjMjMyNjFkOTg4LzFkNDMyYWQwLTE5ODUtNDk4YS04OTE0LWMzYzIzMjYx ZDk4OC5jcmwwHwYDVR0jBBgwFoAUYZobH0T7yC882F7KtoqrZ0qRQXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xZDQzMmFkMC0xOTg1LTQ5OGEtODkxNC1jM2My MzI2MWQ5ODguY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAJgTOwAMG BCYFIQAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEt+RBKWHlb9j/sbjWHvlSNXYYnXLwxCcy4mAroN7aj8 195D5uFgSqOJjv2/CJ80ZTZbgXLutP2IIOzqHEwLrmcT3953Lo14zZX7sDX9d3/j BwqbwFvWCRBtx4fib+fN7aNLXPz6fuEJTSWdbSLXQX74+p9ZCnm/ElS3oMEZ/T2A FQ1A2th1u2LsY9npxxKOLKnVv5rPfM5wsPbjr3d3JCE7s4Ca57waQa9MCTXdAW6r 7KgiJO/Yrq1WjkgmsNgFmFKmrSee/rG6sOUzXnlM81vlFY87dGez/Is4yMp11a6W vXGqA25MaFn4RSZEN74IR2TUSuwYTlvB2cx09PMGvW8= -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:45 2026 by rpki-client