$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa File: 8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json) Hash identifier: QlyJGbwRVeqUniFB8kai6D8e7KfCq73qBKk/eZ26WhY= Subject key identifier: 4B:9E:D8:F4:76:0F:53:8D:E6:24:2F:F0:F4:70:B2:64:B7:3B:AF:A1 Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F4328584F7E7DAAA3C20A5EBAA8668F80 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 10965 IP address blocks: 2001:410:2000::/40 maxlen: 48 2001:410:2000::/48 maxlen: 48 2001:410:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:aa:a3:c2:0a:5e:ba:a8:66:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d7ed3f3b-640e-4687-a6da-ec7dcfdf2bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:be:64:22:94:70:3e:48:a0:bb:2d:8e:ea: 67:9f:94:f2:5f:c8:5a:e3:b7:19:13:f9:de:c6:1a: ea:82:63:e0:6c:c7:ae:0b:3f:54:b4:97:7e:22:a2: 8f:30:80:87:6e:79:4f:fb:e7:2a:80:57:71:b0:3f: 8a:73:0f:97:4b:f4:e8:ef:ef:07:ac:e8:9a:22:df: 1a:29:bd:88:62:9a:27:e8:98:37:b6:da:dc:76:b4: dc:da:dd:d6:ad:9a:d1:d6:75:03:4c:2e:1e:64:c8: f9:ee:17:62:e7:d5:2f:5f:c7:87:65:e0:b3:60:82: 07:3a:66:76:5f:57:f7:b0:61:cc:b8:65:9e:ab:a1: 5c:df:4f:2d:0e:19:f1:e9:e8:7b:53:66:05:ba:c8: a1:37:ea:47:0f:03:47:6c:c8:fb:26:e7:da:31:50: fe:65:4b:30:fd:a4:0f:2a:84:fe:29:2c:c7:a7:ae: 77:e8:6a:ce:ba:20:75:e6:d6:61:49:77:83:df:8b: 99:a6:85:55:fe:a2:fe:d6:21:52:eb:97:ef:83:98: dc:98:5c:02:09:e1:af:f1:d0:0e:01:af:72:cc:07: 77:1c:9c:7a:c6:c7:7f:71:25:0f:3f:f6:bc:65:c7: 95:a9:04:fe:fc:68:15:b6:e3:a1:81:57:dd:1f:7d: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:D8:F4:76:0F:53:8D:E6:24:2F:F0:F4:70:B2:64:B7:3B:AF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv6: 2001:410:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:da:68:0b:75:5e:5c:c6:b4:b9:cc:00:9d:c6:d7:42:a5:4b: 51:23:1f:c5:e3:a7:fc:9e:a2:8e:56:40:52:c1:8c:45:e3:9d: a1:e0:1f:ad:8f:9b:c9:77:fe:17:05:20:de:46:29:d2:d5:05: 44:ff:2f:50:89:77:55:d6:98:ae:70:c0:ea:73:4c:12:8e:03: 70:de:6b:d6:a1:df:45:9f:54:ed:b3:8e:d6:ec:df:b7:f3:f6: 2a:1c:16:bd:a1:78:f2:d1:5e:8b:91:6c:56:a1:bf:e3:87:3e: e2:5b:6e:46:4a:a8:f7:f5:7d:25:33:d1:5e:b4:87:ff:ff:22: 50:5a:d6:e7:cc:5d:46:71:2b:39:b5:8a:b2:b0:93:11:16:03: b9:41:48:06:b6:ef:49:f1:b6:bb:70:1f:c3:64:e5:66:fd:d9: f2:1b:d2:0d:ef:54:53:d4:3f:42:6e:86:5d:44:fb:39:c8:d1: 4f:a1:f0:87:12:d5:3e:29:ff:4f:cb:41:da:d5:76:7c:12:3a: 3a:c8:39:a4:3c:b6:8f:96:4b:09:ce:69:2e:7b:ab:e0:db:49: 4a:fe:d2:3c:60:15:48:de:48:3a:21:56:e6:a2:51:83:4b:40: a9:3c:49:ca:54:15:9d:b3:72:5e:52:bb:11:e9:8e:c5:55:b7: 46:2d:0c:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9+faqjwgpeuqhmj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDdlZDNmM2ItNjQwZS00Njg3LWE2ZGEtZWM3ZGNmZGYyYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDi+ZCKUcD5IoLstjupnn5TyX8ha47cZE/ne xhrqgmPgbMeuCz9UtJd+IqKPMICHbnlP++cqgFdxsD+Kcw+XS/To7+8HrOiaIt8a Kb2IYpon6Jg3ttrcdrTc2t3WrZrR1nUDTC4eZMj57hdi59UvX8eHZeCzYIIHOmZ2 X1f3sGHMuGWeq6Fc308tDhnx6eh7U2YFusihN+pHDwNHbMj7JufaMVD+ZUsw/aQP KoT+KSzHp6536GrOuiB15tZhSXeD34uZpoVV/qL+1iFS65fvg5jcmFwCCeGv8dAO Aa9yzAd3HJx6xsd/cSUPP/a8ZceVqQT+/GgVtuOhgVfdH30GNwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEue2PR2D1ON5iQv8PRwsmS3O6+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvOGRmZDVmNmQtMzBjMi0z YWI1LTllOTAtOGZkZWMzZWY0NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEECAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQNpoC3VeXMa0ucwAncbXQqVLUSMfxeOn/J6ijlZAUsGMReOdoeAf rY+byXf+FwUg3kYp0tUFRP8vUIl3VdaYrnDA6nNMEo4DcN5r1qHfRZ9U7bOO1uzf t/P2KhwWvaF48tFei5FsVqG/44c+4ltuRkqo9/V9JTPRXrSH//8iUFrW58xdRnEr ObWKsrCTERYDuUFIBrbvSfG2u3Afw2TlZv3Z8hvSDe9UU9Q/Qm6GXUT7OcjRT6Hw hxLVPin/T8tB2tV2fBI6Osg5pDy2j5ZLCc5pLnur4NtJSv7SPGAVSN5IOiFW5qJR g0tAqTxJylQVnbNyXlK7EemOxVW3Ri0Meg== -----END CERTIFICATE-----Generated at Tue Oct 20 02:03:26 2026 by rpki-client