$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7cbb1af-047f-3a77-a1a0-031f41110c3a.roa File: b7cbb1af-047f-3a77-a1a0-031f41110c3a.roa (raw, json) Hash identifier: eBy5R4mIhsQ7uZINsw2CTjWWQP3huRtFoFIIRyz92Ig= Subject key identifier: 3A:43:31:E4:3E:84:15:E4:51:68:F2:7D:E5:B0:A1:D5:E6:19:B5:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F8784DA8E67CE00750B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7cbb1af-047f-3a77-a1a0-031f41110c3a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 2601:40f:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:87:84:da:8e:67:ce:00:75:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=501a4907-40b9-4032-bb2d-7c5309402f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:9c:de:8b:d8:94:37:cc:25:16:f0:e5:19: ea:61:fc:b5:44:7d:18:1a:b4:71:0c:a3:b2:67:3a: 94:e1:ec:f6:86:25:e9:01:a1:f0:0e:3b:68:68:1e: 15:3a:fe:90:a1:11:1d:d9:2c:bb:4e:4b:28:9c:09: 18:fa:94:06:6d:ea:e0:cd:3b:c4:0a:e6:31:0a:49: 3f:7f:f3:c9:ab:74:19:45:ba:d5:9c:ec:64:03:19: a6:2c:02:1f:31:b0:e2:ef:90:a3:cf:ec:9b:1a:e4: b4:dc:38:06:29:d9:84:9a:c7:3e:55:fb:30:3b:68: 01:75:13:6c:9a:27:e4:43:76:75:ac:b2:b6:79:70: e4:44:4f:9e:9c:3a:08:f9:ad:f1:21:b3:65:c6:f4: 94:d4:dd:05:e8:ae:e0:d6:a9:35:9e:d0:73:a8:21: 21:78:72:4c:bf:34:97:9e:58:08:4a:67:03:92:c0: 62:ba:88:09:09:d2:6c:73:dc:d6:90:1c:f4:89:4a: 02:47:91:14:b3:12:bd:5c:6f:b8:f5:7f:73:c6:34: 35:08:08:4d:98:8b:d9:f7:d3:22:e6:44:55:b8:8b: b0:38:a9:d7:19:c9:0b:1f:95:53:fa:18:db:b0:6b: 5c:34:00:9c:d8:fd:e1:dd:e5:91:43:7b:24:cb:54: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:43:31:E4:3E:84:15:E4:51:68:F2:7D:E5:B0:A1:D5:E6:19:B5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7cbb1af-047f-3a77-a1a0-031f41110c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:40f:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:dd:91:4a:0f:e6:eb:12:73:e1:3b:92:55:64:91:7a:c3:9e: a9:51:f4:61:2c:81:34:d9:86:cd:84:05:70:28:e0:2f:ff:0e: 14:c3:93:c8:e4:48:f9:93:5f:a8:02:91:28:4d:21:50:ab:b3: d1:25:52:38:a6:a3:50:a1:ec:62:2d:75:5b:01:65:91:a7:12: 5b:7a:36:22:ce:a8:19:37:a6:1b:a6:c8:2b:df:1c:33:5c:5e: 0d:e5:64:98:61:ed:b4:68:8c:c2:57:d8:37:f7:20:ba:c9:19: 3c:a7:8b:8e:16:c2:fa:3d:bc:c7:dd:96:4a:37:d3:8f:19:fd: 34:61:e7:b3:df:25:23:e9:a0:82:e5:9d:95:43:89:3f:02:4b: 0d:2f:f0:ae:5f:5a:34:5e:a8:e9:d5:a1:88:fe:0b:1a:f0:2d: e8:c1:fe:c9:6d:7e:7e:e1:0d:c4:fe:23:b2:50:7a:ae:7d:e3: ec:b8:df:1f:84:d5:7e:c5:61:aa:39:e3:e2:35:63:cc:c9:c5: 17:4d:ac:2b:2e:0c:c6:67:da:ec:5e:c4:c0:97:91:45:ef:39: a9:9f:6c:8f:03:69:5a:98:7c:35:77:e1:6d:1f:80:fb:ea:67: 8a:61:44:78:43:74:59:a5:c2:0b:cc:d0:93:f9:65:a1:fc:1f: 81:c9:34:37 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE96T4eE2o5nzgB1C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTAxYTQ5MDctNDBiOS00MDMyLWJiMmQtN2M1MzA5NDAyZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDOc3ovYlDfMJRbw5RnqYfy1RH0YGrRxDKOy ZzqU4ez2hiXpAaHwDjtoaB4VOv6QoREd2Sy7TksonAkY+pQGbergzTvECuYxCkk/ f/PJq3QZRbrVnOxkAxmmLAIfMbDi75Cjz+ybGuS03DgGKdmEmsc+VfswO2gBdRNs mifkQ3Z1rLK2eXDkRE+enDoI+a3xIbNlxvSU1N0F6K7g1qk1ntBzqCEheHJMvzSX nlgISmcDksBiuogJCdJsc9zWkBz0iUoCR5EUsxK9XG+49X9zxjQ1CAhNmIvZ99Mi 5kRVuIuwOKnXGckLH5VT+hjbsGtcNACc2P3h3eWRQ3sky1Q0qQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDpDMeQ+hBXkUWjyfeWwodXmGbVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdjYmIxYWYtMDQ3Zi0z YTc3LWExYTAtMDMxZjQxMTEwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEED0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAet2RSg/m6xJz4TuSVWSResOeqVH0YSyBNNmGzYQFcCjgL/8OFMOT yORI+ZNfqAKRKE0hUKuz0SVSOKajUKHsYi11WwFlkacSW3o2Is6oGTemG6bIK98c M1xeDeVkmGHttGiMwlfYN/cguskZPKeLjhbC+j28x92WSjfTjxn9NGHns98lI+mg guWdlUOJPwJLDS/wrl9aNF6o6dWhiP4LGvAt6MH+yW1+fuENxP4jslB6rn3j7Ljf H4TVfsVhqjnj4jVjzMnFF02sKy4Mxmfa7F7EwJeRRe85qZ9sjwNpWph8NXfhbR+A ++pnimFEeEN0WaXCC8zQk/llofwfgck0Nw== -----END CERTIFICATE-----Generated at Tue Oct 20 18:42:56 2026 by rpki-client