$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa File: 85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa (raw, json) Hash identifier: Wxff2w7l9Y8Rj8HaPQCQQ9qqhzsBWRFfdAPkl72umCc= Subject key identifier: CD:55:5A:68:77:28:8B:66:6A:EE:73:9F:BC:26:5D:52:09:83:D5:68 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584FA16337751B54F2E599A764A8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 16509 IP address blocks: 2605:4300:3903::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:37:75:1b:54:f2:e5:99:a7:64:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=de770bbe-03b6-4bff-8504-01dc741ac0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:09:60:e6:7c:ec:ae:78:68:95:0d:d0:a5: a7:5d:ba:bf:e3:82:f7:8f:61:dd:2b:56:0f:e7:42: 29:92:22:aa:f1:36:f6:44:3b:6f:08:5c:02:47:27: f5:12:0d:6c:ed:f2:4c:05:96:03:45:fb:7c:82:1d: 37:14:cf:19:54:84:56:72:70:db:2b:47:a0:a5:8d: 16:0a:c7:f8:64:40:a7:a6:e2:fe:93:f7:c4:da:25: ab:b9:41:3d:7f:32:f7:5e:22:49:9f:33:2c:dd:c1: 34:d2:fa:c1:c9:c2:66:d4:a3:70:f4:75:04:bb:54: a3:4e:06:05:e3:21:5c:18:d4:cf:a6:5b:8c:af:f2: d6:aa:cb:cc:1f:1e:ea:17:0c:90:12:01:b7:c0:8d: ee:13:4b:a8:5d:0d:66:23:e3:14:e3:62:c2:47:5a: 74:ff:8c:67:38:0b:01:cf:b4:aa:f9:f4:60:38:15: e7:a0:d2:d3:38:af:80:ff:1f:64:1f:6d:57:a1:fc: 8d:f8:b3:73:6b:8c:5d:64:a0:7e:3a:ef:00:c1:cb: e4:37:9e:e8:7e:76:af:a3:42:c5:ed:fe:0a:cf:07: 3c:cd:4b:18:d5:95:97:dc:a8:dc:59:9f:60:b6:2c: bf:08:ee:e9:30:b6:b8:3d:f2:19:f4:6a:3a:fa:51: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:5A:68:77:28:8B:66:6A:EE:73:9F:BC:26:5D:52:09:83:D5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85fa99d2-2fa3-3bdb-b350-2eb3c609cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3903::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0b:94:cb:0d:36:65:e9:d4:4b:dc:0d:5d:d3:24:91:23:55: 9b:7a:76:a9:5e:3f:d6:da:3b:8b:ad:4b:71:7b:64:1a:f4:55: 5f:43:f0:a4:7b:c4:43:ff:df:e0:47:e1:92:d3:a4:14:33:2c: 90:4f:27:74:c3:ed:01:f5:98:80:74:1f:33:f4:42:e6:15:1f: a0:81:4c:02:40:42:71:e9:12:01:62:ad:a2:f8:fc:7f:47:fc: a1:41:3d:37:82:6e:ae:a2:98:df:e9:15:16:7c:8f:8f:8a:10: 7a:3f:75:30:4b:92:9f:40:a8:17:61:3d:d2:f3:81:17:26:a6: 6b:88:20:bc:a2:85:ff:75:65:03:49:7f:50:80:2b:46:64:5c: c8:6a:f3:1a:08:6f:0d:a4:b4:97:38:75:ca:2d:b7:15:91:98: c6:5e:66:c7:95:f4:63:53:a2:89:d1:ed:d3:81:bf:d7:ac:2e: a5:45:c2:1b:4c:55:05:79:c5:59:8b:2b:d2:47:1e:a9:34:70: eb:04:8c:47:66:f0:f5:52:ad:c0:c6:50:6c:94:4f:a1:7f:32: db:ad:85:51:09:8c:fe:2f:fc:09:b5:39:eb:f0:ca:03:86:16: a4:a9:88:72:5b:56:82:b3:57:42:5c:9e:42:aa:f9:f2:b0:0b: 96:db:77:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYzd1G1Ty5ZmnZKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZGU3NzBiYmUtMDNiNi00YmZmLTg1MDQtMDFkYzc0MWFjMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje8JYOZ87K54aJUN0KWnXbq/44L3j2HdK1YP 50IpkiKq8Tb2RDtvCFwCRyf1Eg1s7fJMBZYDRft8gh03FM8ZVIRWcnDbK0egpY0W Csf4ZECnpuL+k/fE2iWruUE9fzL3XiJJnzMs3cE00vrBycJm1KNw9HUEu1SjTgYF 4yFcGNTPpluMr/LWqsvMHx7qFwyQEgG3wI3uE0uoXQ1mI+MU42LCR1p0/4xnOAsB z7Sq+fRgOBXnoNLTOK+A/x9kH21XofyN+LNza4xdZKB+Ou8AwcvkN57ofnavo0LF 7f4Kzwc8zUsY1ZWX3KjcWZ9gtiy/CO7pMLa4PfIZ9Go6+lGG/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM1VWmh3KItmau5zn7wmXVIJg9VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODVmYTk5ZDItMmZhMy0z YmRiLWIzNTAtMmViM2M2MDljZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADkD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoLlMsNNmXp1EvcDV3TJJEjVZt6dqleP9baO4utS3F7ZBr0VV9D 8KR7xEP/3+BH4ZLTpBQzLJBPJ3TD7QH1mIB0HzP0QuYVH6CBTAJAQnHpEgFiraL4 /H9H/KFBPTeCbq6imN/pFRZ8j4+KEHo/dTBLkp9AqBdhPdLzgRcmpmuIILyihf91 ZQNJf1CAK0ZkXMhq8xoIbw2ktJc4dcottxWRmMZeZseV9GNToonR7dOBv9esLqVF whtMVQV5xVmLK9JHHqk0cOsEjEdm8PVSrcDGUGyUT6F/MtuthVEJjP4v/Am1Oevw ygOGFqSpiHJbVoKzV0JcnkKq+fKwC5bbd5U= -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:32 2026 by rpki-client