$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/16ae4059-cae9-308e-9110-ec53deeb9995.roa File: 16ae4059-cae9-308e-9110-ec53deeb9995.roa (raw, json) Hash identifier: ZFK6PL3GPDKVvmbktHvWyyE7thjNcUXZqctBqKI40u4= Subject key identifier: 3F:E5:0D:C7:3C:F6:FB:EE:9A:5E:84:12:9A:C1:7A:99:4A:FA:DE:95 Certificate issuer: /CN=86df6a19-205b-4b89-a388-4d42d6203929 Certificate serial: 010D0C9F4328584F93C6E361DD9C911DD2A5E580 Authority key identifier: 6F:BE:4C:DA:2E:B2:92:15:64:B0:CC:86:61:1C:D1:8E:33:E8:38:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/16ae4059-cae9-308e-9110-ec53deeb9995.roa Signing time: Wed 21 Oct 2026 16:00:01 +0000 ROA not before: Wed 21 Oct 2026 16:00:01 +0000 ROA not after: Tue 19 Jan 2027 17:00:01 +0000 asID: 36815 IP address blocks: 2604:26c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:c6:e3:61:dd:9c:91:1d:d2:a5:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df6a19-205b-4b89-a388-4d42d6203929 Validity Not Before: Oct 21 16:00:01 2026 GMT Not After : Jan 19 17:00:01 2027 GMT Subject: CN=c2650ec0-06ac-4052-8199-5da150164b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:81:18:7c:8e:a7:dc:7c:46:ab:6d:76:cb: 46:f2:cb:fd:05:b1:8f:ad:b4:54:4c:03:30:64:56: 7b:e5:3f:c3:58:ff:af:97:b4:a4:bd:45:91:71:59: eb:f9:76:4f:f7:9c:99:f5:a8:b6:b3:a5:fc:94:9d: 0a:ca:17:0d:b9:82:dc:d3:07:dc:d7:0a:15:56:a4: c4:06:13:29:15:db:c0:86:24:27:85:db:f6:89:49: 1d:4d:b3:7b:42:50:ca:d5:4f:96:82:50:d8:24:3b: e1:42:e5:28:6a:69:f0:b7:8a:53:ee:57:89:91:93: 7f:9a:14:89:7d:ba:57:d9:5f:10:da:78:bf:5c:c4: f0:49:65:5f:2f:dd:d5:2b:f8:a4:ad:3a:d1:a0:bb: dc:bd:36:57:ab:3b:58:3f:2d:54:26:bc:4c:42:fb: b5:bc:7e:d5:c0:4d:e7:3c:d8:0d:ac:aa:92:5b:31: 3e:53:02:24:7c:03:2e:57:40:ce:84:24:4d:77:a9: d1:2d:b3:74:ff:c2:35:73:22:60:ee:10:cb:26:55: de:a5:e3:b2:35:7a:94:29:4b:87:cf:01:6a:82:cf: 7c:38:5a:0e:3d:6d:9d:dc:27:c6:71:b1:1d:6f:4c: 9e:eb:32:ea:1a:fd:6f:54:35:c2:5e:51:d5:83:ac: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E5:0D:C7:3C:F6:FB:EE:9A:5E:84:12:9A:C1:7A:99:4A:FA:DE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/16ae4059-cae9-308e-9110-ec53deeb9995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.crl X509v3 Authority Key Identifier: keyid:6F:BE:4C:DA:2E:B2:92:15:64:B0:CC:86:61:1C:D1:8E:33:E8:38:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer sbgp-ipAddrBlock: critical IPv6: 2604:26c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4e:df:d8:96:2b:2f:78:74:3d:15:5d:87:73:2a:1d:b5:f8: 18:86:2d:45:91:15:69:28:65:57:e2:b7:9e:d7:66:8e:b9:f9: 52:5a:65:64:2e:5d:3c:53:d7:7a:a4:3d:b8:39:a2:1d:db:79: 45:f7:ae:67:83:cb:1c:c1:72:94:d3:11:50:c1:76:e0:0d:7e: ad:7a:df:23:3c:53:ca:37:6d:d3:44:dc:a3:7c:57:f7:91:19: c4:c5:a3:9c:45:e9:59:a0:46:10:2e:c4:85:3d:1b:1b:d9:12: 31:b3:d7:41:5c:71:88:da:d8:6a:5b:f2:df:51:7e:3c:c2:71: 2b:ab:1a:66:a7:99:7c:01:aa:6b:e8:2a:ee:ff:f1:be:a2:d1: a0:df:94:b7:4c:6e:0f:38:26:6e:1d:ed:c6:b3:e8:5b:6f:0a: 52:0f:f9:96:a7:cd:66:dd:2a:0f:ba:27:33:ec:d2:ab:3d:55: 5e:d4:9b:a4:0a:45:67:c9:3d:08:12:23:a2:e2:03:c8:4a:7c: b1:cc:c8:47:b4:46:ed:c4:c6:bf:b0:8e:ad:b3:5d:cc:b6:7c: 51:2e:53:cf:22:ad:87:a6:c5:7e:41:7d:ae:31:cf:2c:89:52: 7c:61:ce:2e:a5:da:43:47:db:03:19:31:92:91:36:7e:b3:c6: 6d:0f:e8:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+TxuNh3ZyRHdKl5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZkZjZhMTktMjA1Yi00Yjg5LWEzODgtNGQ0MmQ2MjAz OTI5MB4XDTI2MTAyMTE2MDAwMVoXDTI3MDExOTE3MDAwMVowLzEtMCsGA1UEAxMk YzI2NTBlYzAtMDZhYy00MDUyLTgxOTktNWRhMTUwMTY0YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmBGHyOp9x8RqttdstG8sv9BbGPrbRUTAMw ZFZ75T/DWP+vl7SkvUWRcVnr+XZP95yZ9ai2s6X8lJ0KyhcNuYLc0wfc1woVVqTE BhMpFdvAhiQnhdv2iUkdTbN7QlDK1U+WglDYJDvhQuUoamnwt4pT7leJkZN/mhSJ fbpX2V8Q2ni/XMTwSWVfL93VK/ikrTrRoLvcvTZXqztYPy1UJrxMQvu1vH7VwE3n PNgNrKqSWzE+UwIkfAMuV0DOhCRNd6nRLbN0/8I1cyJg7hDLJlXepeOyNXqUKUuH zwFqgs98OFoOPW2d3CfGcbEdb0ye6zLqGv1vVDXCXlHVg6wIhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/lDcc89vvuml6EEprBeplK+t6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84NmRm NmExOS0yMDViLTRiODktYTM4OC00ZDQyZDYyMDM5MjkvMTZhZTQwNTktY2FlOS0z MDhlLTkxMTAtZWM1M2RlZWI5OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvODZkZjZhMTktMjA1Yi00Yjg5LWEz ODgtNGQ0MmQ2MjAzOTI5Lzg2ZGY2YTE5LTIwNWItNGI4OS1hMzg4LTRkNDJkNjIw MzkyOS5jcmwwHwYDVR0jBBgwFoAUb75M2i6ykhVksMyGYRzRjjPoOOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84NmRmNmExOS0yMDViLTRiODktYTM4OC00ZDQy ZDYyMDM5MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQmwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3Tt/YlisveHQ9FV2HcyodtfgYhi1FkRVpKGVX4ree12aOuflSWmVk Ll08U9d6pD24OaId23lF965ng8scwXKU0xFQwXbgDX6tet8jPFPKN23TRNyjfFf3 kRnExaOcRelZoEYQLsSFPRsb2RIxs9dBXHGI2thqW/LfUX48wnErqxpmp5l8Aapr 6Cru//G+otGg35S3TG4POCZuHe3Gs+hbbwpSD/mWp81m3SoPuicz7NKrPVVe1Juk CkVnyT0IEiOi4gPISnyxzMhHtEbtxMa/sI6ts13MtnxRLlPPIq2HpsV+QX2uMc8s iVJ8Yc4updpDR9sDGTGSkTZ+s8ZtD+gj -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:39 2026 by rpki-client