$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/dbd56d34-fd7a-3eb5-99fa-d7e5d795995c.roa File: dbd56d34-fd7a-3eb5-99fa-d7e5d795995c.roa (raw, json) Hash identifier: jkF5b2wNspgGACHyiw2k2vHGTRn7kydqEkuRmwHcfKk= Subject key identifier: 42:80:B5:7D:D0:D9:BF:F4:99:A5:FF:26:E0:E4:F2:CA:C3:80:78:73 Certificate issuer: /CN=694f959c-b3fc-4d74-b38a-99a88bdaede2 Certificate serial: 010D0C9F4328584F5996B98DB2C46D38892DED80 Authority key identifier: F2:1B:A4:44:0B:B3:AF:54:5A:21:59:C6:F8:DB:31:E6:70:A4:F5:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/dbd56d34-fd7a-3eb5-99fa-d7e5d795995c.roa Signing time: Wed 30 Sep 2026 19:46:05 +0000 ROA not before: Wed 30 Sep 2026 19:46:05 +0000 ROA not after: Tue 29 Dec 2026 20:46:05 +0000 asID: 33707 IP address blocks: 2604:35c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/694f959c-b3fc-4d74-b38a-99a88bdaede2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/694f959c-b3fc-4d74-b38a-99a88bdaede2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:96:b9:8d:b2:c4:6d:38:89:2d:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694f959c-b3fc-4d74-b38a-99a88bdaede2 Validity Not Before: Sep 30 19:46:05 2026 GMT Not After : Dec 29 20:46:05 2026 GMT Subject: CN=def5c133-a42a-47bc-9da3-f179f88a6dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:01:9e:00:1e:f8:71:3e:88:ea:02:1e:9d: e6:03:5b:54:bc:3d:98:cb:ad:fb:8a:d1:88:8b:7a: 2c:1d:fe:13:f1:10:f6:d6:93:81:38:1a:44:27:ed: 5e:79:ab:c2:a6:74:d9:0e:f2:cd:a6:99:bc:53:a5: aa:d8:e0:3b:61:93:bd:d1:51:ab:50:ad:88:ce:ba: 6b:44:96:72:d3:63:f5:7a:b1:0a:8e:c5:1b:ff:90: 99:5c:42:71:72:bf:8d:6d:6f:5a:5f:bc:03:6b:cc: 2e:98:63:51:76:c7:23:7b:3c:00:e0:94:37:1a:ec: 6f:09:0c:6b:bf:18:32:df:83:54:99:87:98:81:af: 00:72:d2:bd:a5:8d:62:5c:8e:5c:c2:a1:36:70:81: 4b:3c:1b:b2:f8:7a:c0:a0:de:4b:39:f8:82:f0:b1: 16:bf:37:18:49:1b:f5:c3:11:46:1e:cf:41:f1:4c: b2:2d:ea:6b:ed:5a:72:11:49:2b:fc:93:a0:63:c0: 45:40:be:2c:8a:04:d4:b8:0c:ae:08:34:ef:bb:8f: b7:8f:14:38:9e:57:11:21:c4:c0:cb:0e:89:cc:ba: 2f:17:04:e7:35:74:50:3a:9b:44:ee:54:5d:e8:96: e9:ae:c6:63:b9:57:1c:bc:fa:e6:5a:46:36:c3:38: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:B5:7D:D0:D9:BF:F4:99:A5:FF:26:E0:E4:F2:CA:C3:80:78:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/dbd56d34-fd7a-3eb5-99fa-d7e5d795995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2/694f959c-b3fc-4d74-b38a-99a88bdaede2.crl X509v3 Authority Key Identifier: keyid:F2:1B:A4:44:0B:B3:AF:54:5A:21:59:C6:F8:DB:31:E6:70:A4:F5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/694f959c-b3fc-4d74-b38a-99a88bdaede2.cer sbgp-ipAddrBlock: critical IPv6: 2604:35c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2b:24:72:32:20:2d:8e:8a:08:4e:51:69:df:76:1a:99:3b: 1a:6f:ca:05:0e:8a:d5:21:a1:81:99:7b:eb:f1:b8:86:9d:2d: 7a:95:a8:d2:6a:9e:61:21:84:e1:94:76:0d:e9:b1:df:6c:bb: d4:4d:fd:08:c8:d2:98:81:d7:43:f8:5c:7f:42:96:e5:b7:5c: e5:25:3d:2b:b8:5d:d8:7d:21:f6:b9:23:4d:96:a3:42:f0:d7: f4:c9:ab:c5:17:ae:24:7c:12:2f:50:f9:2e:06:10:39:c7:e0: 7f:30:74:30:b3:2b:7d:64:d8:f7:ef:37:24:66:6d:13:d2:7b: c9:f5:3b:a7:c8:4a:91:95:cf:ec:73:f8:c6:13:16:a0:aa:ba: db:72:80:a1:73:44:f7:f5:45:e7:6d:90:fb:48:88:3f:9c:3e: c9:d0:11:d3:61:d3:62:54:89:fb:60:db:be:2d:3d:63:15:ee: 4e:29:85:35:6f:00:e4:23:55:e7:da:bf:6c:fa:3e:80:ac:d9: 0b:b4:3f:d6:f8:82:4e:bf:4f:dd:33:21:6e:0c:72:47:d3:eb: e0:b6:a9:1a:1e:27:71:e0:a3:a0:aa:1e:00:08:69:2b:92:55: 7b:7f:b3:8b:d8:0c:3a:17:b8:f6:87:75:2e:d5:05:43:00:24: 01:0c:7d:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ZlrmNssRtOIkt7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk0Zjk1OWMtYjNmYy00ZDc0LWIzOGEtOTlhODhiZGFl ZGUyMB4XDTI2MDkzMDE5NDYwNVoXDTI2MTIyOTIwNDYwNVowLzEtMCsGA1UEAxMk ZGVmNWMxMzMtYTQyYS00N2JjLTlkYTMtZjE3OWY4OGE2ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgQBngAe+HE+iOoCHp3mA1tUvD2Yy637itGI i3osHf4T8RD21pOBOBpEJ+1eeavCpnTZDvLNppm8U6Wq2OA7YZO90VGrUK2Izrpr RJZy02P1erEKjsUb/5CZXEJxcr+NbW9aX7wDa8wumGNRdscjezwA4JQ3GuxvCQxr vxgy34NUmYeYga8ActK9pY1iXI5cwqE2cIFLPBuy+HrAoN5LOfiC8LEWvzcYSRv1 wxFGHs9B8UyyLepr7VpyEUkr/JOgY8BFQL4sigTUuAyuCDTvu4+3jxQ4nlcRIcTA yw6JzLovFwTnNXRQOptE7lRd6JbprsZjuVccvPrmWkY2wzgJRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKAtX3Q2b/0maX/JuDk8srDgHhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82OTRm OTU5Yy1iM2ZjLTRkNzQtYjM4YS05OWE4OGJkYWVkZTIvZGJkNTZkMzQtZmQ3YS0z ZWI1LTk5ZmEtZDdlNWQ3OTU5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNjk0Zjk1OWMtYjNmYy00ZDc0LWIz OGEtOTlhODhiZGFlZGUyLzY5NGY5NTljLWIzZmMtNGQ3NC1iMzhhLTk5YTg4YmRh ZWRlMi5jcmwwHwYDVR0jBBgwFoAU8hukRAuzr1RaIVnG+Nsx5nCk9bgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82OTRmOTU5Yy1iM2ZjLTRkNzQtYjM4YS05OWE4 OGJkYWVkZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ1wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGKyRyMiAtjooITlFp33YamTsab8oFDorVIaGBmXvr8biGnS16lajS ap5hIYThlHYN6bHfbLvUTf0IyNKYgddD+Fx/Qpblt1zlJT0ruF3YfSH2uSNNlqNC 8Nf0yavFF64kfBIvUPkuBhA5x+B/MHQwsyt9ZNj37zckZm0T0nvJ9TunyEqRlc/s c/jGExagqrrbcoChc0T39UXnbZD7SIg/nD7J0BHTYdNiVIn7YNu+LT1jFe5OKYU1 bwDkI1Xn2r9s+j6ArNkLtD/W+IJOv0/dMyFuDHJH0+vgtqkaHidx4KOgqh4ACGkr klV7f7OL2Aw6F7j2h3Uu1QVDACQBDH1R -----END CERTIFICATE-----Generated at Wed Nov 4 08:39:03 2026 by rpki-client