$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/3617f103-b304-30bf-b0dd-d5ea90ed4db1.roa File: 3617f103-b304-30bf-b0dd-d5ea90ed4db1.roa (raw, json) Hash identifier: pY/qlJLtkl8GORDcJ72SJ8LkTMgucJdYVs+vRjZyBW0= Subject key identifier: 4E:A6:7B:E0:46:9B:F7:08:C4:47:32:F9:82:75:B0:F2:58:FB:6F:B9 Certificate issuer: /CN=9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d Certificate serial: 010D0C9F4328584F83595020C81735F813BBCC80 Authority key identifier: 13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/3617f103-b304-30bf-b0dd-d5ea90ed4db1.roa Signing time: Thu 15 Oct 2026 18:46:18 +0000 ROA not before: Thu 15 Oct 2026 18:46:18 +0000 ROA not after: Wed 13 Jan 2027 19:46:18 +0000 asID: 30662 IP address blocks: 2620:cc:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:59:50:20:c8:17:35:f8:13:bb:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d Validity Not Before: Oct 15 18:46:18 2026 GMT Not After : Jan 13 19:46:18 2027 GMT Subject: CN=1985c6bf-3374-47e9-a7c7-a48cb18f4710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:82:9c:89:32:5c:4c:d2:36:91:ff:27:91: 98:69:5a:e0:ea:e1:10:04:d1:c7:1e:f4:8e:29:b6: 56:4d:18:32:48:4e:5b:3d:ab:48:0e:71:17:2d:fd: 0c:8c:58:6b:19:00:c0:5c:f6:dd:90:9c:f9:cc:a0: 1c:d4:73:2a:34:59:26:0e:c5:a9:ae:6b:19:b1:6c: 55:01:df:6b:ca:74:d0:14:b8:66:23:66:2e:72:8a: c3:36:38:e4:3b:aa:9b:5d:87:72:48:d0:ba:a7:9f: f3:d7:83:dd:7a:e7:b8:6c:9c:47:4b:db:4d:ee:89: 61:04:68:49:77:c9:2a:80:01:54:0d:e8:30:54:73: e6:36:f4:ce:b0:7d:e5:6f:0f:99:af:9b:26:9f:ed: 8c:e1:0d:cf:22:7d:26:c3:6e:24:89:1a:4e:52:1e: b1:7e:d8:19:18:d1:31:db:9d:6c:e7:8d:05:d3:af: 9e:c1:6c:86:0b:10:a2:a0:d4:be:f0:f5:af:00:ff: 19:f6:03:e5:a1:eb:04:7c:d8:24:c1:80:ed:2b:ef: f1:23:d6:aa:c5:62:b4:42:e1:62:84:7e:4b:25:80: 9b:80:d4:ca:88:9c:ec:6a:2e:ee:7d:8b:e2:89:c7: 16:bb:51:9a:f3:dc:71:80:ca:10:12:07:fa:15:42: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A6:7B:E0:46:9B:F7:08:C4:47:32:F9:82:75:B0:F2:58:FB:6F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/3617f103-b304-30bf-b0dd-d5ea90ed4db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.crl X509v3 Authority Key Identifier: keyid:13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer sbgp-ipAddrBlock: critical IPv6: 2620:cc:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6a:a8:7a:a3:ca:72:27:9f:80:32:1a:78:8b:f6:5c:cc:00: 2b:d5:ec:5d:f9:48:01:8f:3f:c7:2e:f6:d2:aa:d3:33:f1:1e: 73:b5:cf:42:60:9e:d7:dd:d0:d9:fd:6e:53:c3:88:c9:ee:1d: fd:3c:a6:0a:cb:ba:1d:f0:cf:12:b7:e9:40:ec:34:ce:06:7b: 8a:e3:73:e9:d2:c3:7b:fd:31:bb:42:d5:dc:fd:a1:08:2c:57: a2:da:99:08:12:87:f3:b8:b2:c5:6f:6b:18:a3:13:d0:65:0d: 1c:76:9f:74:2c:b4:5d:48:b1:34:37:82:4b:52:0b:4c:3d:5f: 3f:13:20:13:fa:cc:fd:d0:4f:a5:e0:ac:c9:b3:18:7e:fb:f2: a4:6b:84:26:ce:e3:dc:39:7a:7c:04:ea:07:d7:6d:cc:a3:4b: f8:ca:2d:16:59:d2:f3:e6:c6:4a:d4:dc:8d:a6:e0:d2:ff:0d: c3:c8:f1:2f:dc:c8:c1:ba:65:c0:5d:a1:23:d9:f2:73:4c:37: 5c:05:15:e8:c9:46:97:65:5c:4b:7d:63:f0:b3:c9:25:78:13: 53:22:f2:29:33:66:dd:7b:98:ee:19:48:e0:20:d6:ad:a8:fa: 1c:29:b6:74:66:a1:89:b1:4a:99:f4:72:a2:dc:26:80:8f:75: 6e:eb:34:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+DWVAgyBc1+BO7zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NWZiZmQtMWQ0Mi00ZDdjLWI0ZDItNGExMmI5N2Jm NTFkMB4XDTI2MTAxNTE4NDYxOFoXDTI3MDExMzE5NDYxOFowLzEtMCsGA1UEAxMk MTk4NWM2YmYtMzM3NC00N2U5LWE3YzctYTQ4Y2IxOGY0NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI2CnIkyXEzSNpH/J5GYaVrg6uEQBNHHHvSO KbZWTRgySE5bPatIDnEXLf0MjFhrGQDAXPbdkJz5zKAc1HMqNFkmDsWprmsZsWxV Ad9rynTQFLhmI2YucorDNjjkO6qbXYdySNC6p5/z14Pdeue4bJxHS9tN7olhBGhJ d8kqgAFUDegwVHPmNvTOsH3lbw+Zr5smn+2M4Q3PIn0mw24kiRpOUh6xftgZGNEx 251s540F06+ewWyGCxCioNS+8PWvAP8Z9gPloesEfNgkwYDtK+/xI9aqxWK0QuFi hH5LJYCbgNTKiJzsai7ufYviiccWu1Ga89xxgMoQEgf6FUJ5SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE6me+BGm/cIxEcy+YJ1sPJY+2+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85Yzg1 ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEyYjk3YmY1MWQvMzYxN2YxMDMtYjMwNC0z MGJmLWIwZGQtZDVlYTkwZWQ0ZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWM4NWZiZmQtMWQ0Mi00ZDdjLWI0 ZDItNGExMmI5N2JmNTFkLzljODVmYmZkLTFkNDItNGQ3Yy1iNGQyLTRhMTJiOTdi ZjUxZC5jcmwwHwYDVR0jBBgwFoAUE1C5oRzhPFiw2D3wdxj8a3kB3LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85Yzg1ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEy Yjk3YmY1MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAzKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9qqHqjynInn4AyGniL9lzMACvV7F35SAGPP8cu9tKq0zPxHnO1 z0Jgntfd0Nn9blPDiMnuHf08pgrLuh3wzxK36UDsNM4Ge4rjc+nSw3v9MbtC1dz9 oQgsV6LamQgSh/O4ssVvaxijE9BlDRx2n3QstF1IsTQ3gktSC0w9Xz8TIBP6zP3Q T6XgrMmzGH778qRrhCbO49w5enwE6gfXbcyjS/jKLRZZ0vPmxkrU3I2m4NL/DcPI 8S/cyMG6ZcBdoSPZ8nNMN1wFFejJRpdlXEt9Y/CzySV4E1Mi8ikzZt17mO4ZSOAg 1q2o+hwptnRmoYmxSpn0cqLcJoCPdW7rNCQ= -----END CERTIFICATE-----Generated at Wed Nov 4 16:42:50 2026 by rpki-client