$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa File: 165deabf-22e9-353f-b895-dadde6e0efa3.roa (raw, json) Hash identifier: ofS4eih7n13pJsuCYoqgzov5f8RbT3hYN8TIngW6XnU= Subject key identifier: E0:19:31:92:A3:98:CA:E6:3D:81:94:E1:E9:D7:1A:0B:F7:11:C2:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7782FE53991D8CC85EA76600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7016 IP address blocks: 2603:2988:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:fe:53:99:1d:8c:c8:5e:a7:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=d4baf623-5df1-43a1-a9b9-e3b68764ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:93:d7:5a:aa:cd:09:f7:7e:b5:c1:4b:0d: 4f:40:96:60:ae:a9:54:69:2b:9b:1e:06:3b:93:c2: da:68:cf:02:f9:9d:3d:43:70:f1:5e:95:3f:35:89: 50:6c:a6:b4:21:de:b2:b0:68:5d:88:fe:51:cd:8b: 40:a9:b3:14:f7:1b:5a:d9:4b:de:d4:0e:a2:cf:62: c4:40:b1:ab:96:9f:d7:11:cd:67:11:bd:37:1a:aa: da:e3:1e:39:da:7e:e5:5d:4d:68:88:3a:1f:6d:c1: 2b:c4:6b:f7:80:21:bc:bb:1f:6c:a2:22:0e:21:7c: 6c:78:cb:84:1e:b3:f0:57:c9:e9:7b:64:96:95:87: 63:b5:ab:91:73:26:68:1b:18:5f:9d:50:a3:61:9d: f9:92:f9:a0:b5:d2:d5:d5:92:a8:cb:5c:f5:2a:b0: 1f:de:06:06:39:f0:28:6b:d5:a3:7f:08:a2:ef:98: 88:12:9b:24:9e:20:2d:86:c3:52:32:08:f3:27:6b: 87:31:50:c3:01:cf:16:99:77:f9:db:ed:2c:7c:f5: 37:bb:07:e9:bd:f6:e2:f4:fa:e1:52:06:7c:a2:51: 5b:ba:a1:0e:66:20:a0:9a:86:e4:d8:fc:68:17:48: 51:c9:03:86:87:4c:53:e3:d7:4e:19:5a:34:54:06: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:31:92:A3:98:CA:E6:3D:81:94:E1:E9:D7:1A:0B:F7:11:C2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2988:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:3a:af:72:c7:8b:0c:b9:bb:23:9f:d8:25:e0:19:0a:2a:2e: e5:cb:1a:ca:e1:98:73:30:22:9a:5f:b3:c8:55:24:aa:c8:a5: 63:8a:08:90:b0:3c:04:e3:7b:cf:04:8d:0a:54:45:e0:dd:d5: 5f:02:1c:d2:aa:52:4e:6b:22:ce:93:e1:4d:ab:f8:7c:8f:9e: 5d:59:d0:a5:1b:b5:26:1e:40:28:fc:31:bf:6c:a5:78:f1:2d: e3:02:ad:eb:3f:25:30:77:68:00:09:9b:e8:aa:57:b5:6e:96: 5c:44:dd:90:b2:37:b7:57:f4:b1:33:c4:6f:df:22:48:0f:7f: 94:f0:71:f1:b1:1f:07:20:99:b5:a7:d4:1a:80:1d:6d:37:91: 0a:8a:c9:f2:0b:43:5e:68:dd:9d:3b:e6:6e:be:85:20:d3:e7: 67:09:1b:95:38:45:35:02:a9:d7:bb:2c:ef:a5:10:19:68:d0: e5:65:b7:a5:84:37:13:8e:57:2c:94:5b:f0:b8:12:65:2a:5e: 6c:0c:f8:92:dd:02:81:bd:a1:a6:b3:7a:a9:76:77:0c:1c:67: 78:c7:18:62:5a:63:27:6b:da:dc:f4:56:2b:3c:12:ad:66:53: 72:97:53:94:6f:f2:87:0c:68:55:a3:bd:37:fb:12:40:f8:59: 1a:72:be:1f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE93gv5TmR2MyF6nZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDRiYWY2MjMtNWRmMS00M2ExLWE5YjktZTNiNjg3NjRlYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrKT11qqzQn3frXBSw1PQJZgrqlUaSubHgY7 k8LaaM8C+Z09Q3DxXpU/NYlQbKa0Id6ysGhdiP5RzYtAqbMU9xta2Uve1A6iz2LE QLGrlp/XEc1nEb03Gqra4x452n7lXU1oiDofbcErxGv3gCG8ux9soiIOIXxseMuE HrPwV8npe2SWlYdjtauRcyZoGxhfnVCjYZ35kvmgtdLV1ZKoy1z1KrAf3gYGOfAo a9Wjfwii75iIEpskniAthsNSMgjzJ2uHMVDDAc8WmXf52+0sfPU3uwfpvfbi9Prh UgZ8olFbuqEOZiCgmobk2PxoF0hRyQOGh0xT49dOGVo0VAZWbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOAZMZKjmMrmPYGU4enXGgv3EcJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY1ZGVhYmYtMjJlOS0z NTNmLWI4OTUtZGFkZGU2ZTBlZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMpiIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA1TqvcseLDLm7I5/YJeAZCiou5csayuGYczAiml+zyFUkqsilY4oI kLA8BON7zwSNClRF4N3VXwIc0qpSTmsizpPhTav4fI+eXVnQpRu1Jh5AKPwxv2yl ePEt4wKt6z8lMHdoAAmb6KpXtW6WXETdkLI3t1f0sTPEb98iSA9/lPBx8bEfByCZ tafUGoAdbTeRCorJ8gtDXmjdnTvmbr6FINPnZwkblThFNQKp17ss76UQGWjQ5WW3 pYQ3E45XLJRb8LgSZSpebAz4kt0Cgb2hprN6qXZ3DBxneMcYYlpjJ2va3PRWKzwS rWZTcpdTlG/yhwxoVaO9N/sSQPhZGnK+Hw== -----END CERTIFICATE-----Generated at Wed Oct 21 05:06:04 2026 by rpki-client