$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa File: df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa (raw, json) Hash identifier: ZXERz/Py626Gh0OSAHlBfAoQ7GDPGgFObEtwghDHf1Y= Subject key identifier: 1E:71:41:4E:26:60:9E:C9:5E:95:ED:E0:97:1A:95:39:E0:0D:26:8C Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584F8F3DB411854F1B3808B92580 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 26211 IP address blocks: 2620:100:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b4:11:85:4f:1b:38:08:b9:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=7c354996-a722-4435-904f-0d0d06845a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:75:23:12:33:2d:fc:22:47:b0:b4:43:75: 90:48:c9:f5:9b:8b:b0:01:7f:29:a8:00:c9:7f:d1: 71:ac:de:3f:be:3b:6a:40:4e:f2:bc:3e:9d:d9:03: d4:a4:18:05:8e:19:bf:b8:88:b5:12:80:d1:12:c1: ec:7d:1e:2d:c4:e5:65:17:68:c4:b4:28:16:6b:61: 56:27:6a:f6:af:0e:9c:75:4d:0f:90:10:3a:3c:ec: 29:9e:4a:d5:45:ea:3b:86:35:70:1a:6e:43:c3:50: f5:ea:d3:87:90:b8:fd:9c:28:05:c2:d6:17:f7:06: 36:e6:d9:18:d5:d8:e5:84:26:1d:3e:9d:1c:ab:70: 6d:37:aa:be:91:c5:a7:d4:80:ae:da:41:83:47:a7: 8c:ce:88:1e:18:99:56:dc:b2:c0:0c:35:dc:c2:20: 73:e3:92:c8:96:f0:65:63:4d:e0:3f:f6:0f:ce:f2: cf:c9:e7:19:32:85:c2:51:fd:85:db:98:d7:c9:11: 0f:be:16:d3:26:27:84:bc:23:99:91:84:00:61:f8: fe:c8:b3:27:8d:16:06:f6:87:94:90:a3:0c:52:a8: e1:dd:ac:cb:03:5f:20:ab:07:60:a9:f5:54:9e:45: e1:42:e4:3a:82:a8:70:4f:80:92:0f:58:cb:7d:10: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:71:41:4E:26:60:9E:C9:5E:95:ED:E0:97:1A:95:39:E0:0D:26:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:100:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f6:b3:b0:7d:59:62:2d:4c:9d:ac:68:05:10:e6:7f:d5:d2: ca:91:4c:c6:87:0e:1e:4d:37:f0:72:be:c2:b8:b3:2b:8e:20: c4:af:ae:39:13:64:d2:29:2d:c3:94:e3:fc:45:42:1f:28:af: 17:d9:bc:83:9d:52:0d:01:aa:33:1a:b0:0e:02:ed:c5:fe:95: 76:1a:9a:7c:2e:81:45:db:70:ca:1d:f9:2a:16:48:28:07:7c: 3a:48:bb:a8:0a:17:9f:f9:75:ea:5d:20:ec:37:56:8a:2d:29: 15:ce:47:c7:72:7e:fd:c9:c2:19:93:c8:56:59:61:b9:c6:da: d4:48:50:36:27:d8:4c:fa:e7:e3:c9:9e:ed:ce:6c:fb:ab:5e: e0:39:9f:1c:f4:57:2f:7e:2d:99:af:74:41:b1:bf:47:94:93: d6:b4:ec:fb:a2:24:5b:8e:83:97:ca:86:d3:a3:58:ac:eb:6e: 35:f2:fb:8f:9f:b9:87:36:22:7b:57:2d:cc:a5:b8:b0:47:4e: 5b:46:b2:e1:40:71:8d:9c:62:41:40:e5:e0:97:d2:3c:bb:6f: 12:ee:77:f1:6b:79:53:e5:26:10:a2:75:70:f2:06:86:8b:a4: ed:3f:0c:b8:e8:70:df:d3:9e:43:35:2c:9c:72:4d:c4:86:c7: fe:e5:2e:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+PPbQRhU8bOAi5JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk N2MzNTQ5OTYtYTcyMi00NDM1LTkwNGYtMGQwZDA2ODQ1YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZ1IxIzLfwiR7C0Q3WQSMn1m4uwAX8pqADJ f9FxrN4/vjtqQE7yvD6d2QPUpBgFjhm/uIi1EoDREsHsfR4txOVlF2jEtCgWa2FW J2r2rw6cdU0PkBA6POwpnkrVReo7hjVwGm5Dw1D16tOHkLj9nCgFwtYX9wY25tkY 1djlhCYdPp0cq3BtN6q+kcWn1ICu2kGDR6eMzogeGJlW3LLADDXcwiBz45LIlvBl Y03gP/YPzvLPyecZMoXCUf2F25jXyREPvhbTJieEvCOZkYQAYfj+yLMnjRYG9oeU kKMMUqjh3azLA18gqwdgqfVUnkXhQuQ6gqhwT4CSD1jLfRDriQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5xQU4mYJ7JXpXt4JcalTngDSaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGYzY2IxYWUtYjI3ZC0z MGY5LWE5ZGMtODVkM2I1YjlmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABL2s7B9WWItTJ2saAUQ5n/V0sqRTMaHDh5NN/ByvsK4syuOIMSv rjkTZNIpLcOU4/xFQh8orxfZvIOdUg0BqjMasA4C7cX+lXYamnwugUXbcMod+SoW SCgHfDpIu6gKF5/5depdIOw3VootKRXOR8dyfv3JwhmTyFZZYbnG2tRIUDYn2Ez6 5+PJnu3ObPurXuA5nxz0Vy9+LZmvdEGxv0eUk9a07PuiJFuOg5fKhtOjWKzrbjXy +4+fuYc2IntXLcyluLBHTltGsuFAcY2cYkFA5eCX0jy7bxLud/FreVPlJhCidXDy BoaLpO0/DLjocN/TnkM1LJxyTcSGx/7lLk8= -----END CERTIFICATE-----Generated at Wed Oct 28 16:37:13 2026 by rpki-client