$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json) Hash identifier: WBZz9yMw748u/mSx/5lnPNYWOmQ2utQXRDddXyzSqtA= Subject key identifier: 9D:F1:8F:D4:7B:76:1B:CB:88:5D:34:D8:49:B0:91:A7:AE:41:57:67 Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Certificate serial: 010D0C9F4328584F7BB2F857B29825E7D0AAE580 Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 0 IP address blocks: 2001:504:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f8:57:b2:98:25:e7:d0:aa:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=92ed76d4-fd57-422c-be26-7d2c96f76f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:70:b6:bd:ba:d8:73:ec:96:48:94:78:4d: d3:00:bd:04:21:1c:55:51:bd:19:72:d8:e5:23:d6: 40:35:d1:ac:5b:7b:c5:f2:0a:aa:b7:ba:6e:41:18: 4e:51:be:c2:60:8a:0b:4d:14:86:fb:5c:da:3d:96: 43:2b:3a:9f:3a:6c:6c:04:56:1c:c1:b6:fb:94:24: 02:ed:6a:a5:61:ff:29:3f:50:3b:e5:62:31:7e:22: e0:eb:3a:1b:75:a1:1b:54:d6:43:ae:e9:7e:5c:2e: 4e:02:86:07:aa:c6:e8:2c:ad:e5:93:75:4a:79:0d: cc:e3:07:f2:64:da:d0:5d:b2:1c:51:e7:80:f2:76: bb:90:09:c6:dc:3e:d4:3e:0c:48:13:bc:03:19:c1: af:47:0e:da:10:3d:e2:55:cd:0e:83:78:94:c3:85: 14:aa:26:d7:13:8c:df:5c:8e:ed:df:48:79:93:91: 4a:18:0b:c4:8f:f5:de:95:c9:bd:bc:db:7a:2b:84: 7e:16:ce:24:28:d2:1a:02:6a:7b:bf:91:98:36:c6: 0e:d1:6c:6a:4a:ed:63:ce:e4:22:4a:b4:ad:d1:15: b9:e7:1f:ff:1f:9b:f4:ac:66:74:dc:0f:a0:2e:4c: 78:6d:3d:98:a0:e9:f9:68:79:2b:1f:4b:fd:4b:3f: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F1:8F:D4:7B:76:1B:CB:88:5D:34:D8:49:B0:91:A7:AE:41:57:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl X509v3 Authority Key Identifier: keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:49:0e:56:f1:9e:d8:a6:2f:a6:a0:eb:c3:85:b3:a1:ff:a7: d5:66:71:4b:97:ba:5f:02:75:18:a4:1c:8f:40:43:85:74:a0: 87:90:fb:e9:5e:91:f5:90:e6:5d:02:cb:92:d0:79:c1:9d:63: 0b:d5:28:94:00:f7:dc:98:6e:69:d9:81:11:e1:a7:43:e8:bd: a3:04:de:e0:45:20:c8:ec:0a:d1:96:bf:16:6d:29:09:71:ad: e7:91:42:b6:d2:79:0f:9e:92:a4:32:e5:89:19:1e:56:07:50: 2d:74:cd:18:62:4c:25:17:fb:ef:ae:ee:d4:b0:d2:05:86:98: f7:8c:77:b2:4b:d8:02:56:3f:c2:29:d8:9e:96:04:c6:a0:e8: 24:e7:9c:60:bc:4d:c2:d8:3a:9b:78:80:d3:62:18:fd:22:9b: 0b:a1:8c:53:9f:91:8f:25:f6:75:1b:51:34:9d:50:c3:ed:18: 6f:0f:0c:b1:ad:60:52:f9:65:84:a9:30:44:18:a7:59:98:c1: 9e:78:34:fa:a5:66:a0:c3:9a:08:67:11:3e:62:dc:99:bf:4d: 4d:4e:e5:ee:21:a0:e2:b3:4e:b0:d9:7a:17:e2:d1:dc:2e:4c: 15:a8:5f:bc:98:7f:59:ce:04:c7:26:80:f2:af:e5:e2:79:c5: cc:a5:72:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97svhXspgl59Cq5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1 ZTgzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OTJlZDc2ZDQtZmQ1Ny00MjJjLWJlMjYtN2QyYzk2Zjc2ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgtwtr262HPslkiUeE3TAL0EIRxVUb0Zctjl I9ZANdGsW3vF8gqqt7puQRhOUb7CYIoLTRSG+1zaPZZDKzqfOmxsBFYcwbb7lCQC 7WqlYf8pP1A75WIxfiLg6zobdaEbVNZDrul+XC5OAoYHqsboLK3lk3VKeQ3M4wfy ZNrQXbIcUeeA8na7kAnG3D7UPgxIE7wDGcGvRw7aED3iVc0Og3iUw4UUqibXE4zf XI7t30h5k5FKGAvEj/Xelcm9vNt6K4R+Fs4kKNIaAmp7v5GYNsYO0WxqSu1jzuQi SrSt0RW55x//H5v0rGZ03A+gLkx4bT2YoOn5aHkrH0v9Sz8z1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3xj9R7dhvLiF002EmwkaeuQVdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvYTY4NDE2YzAtMTk1Mi0z MTlkLTg5ODEtNGYxYTkzNWRjNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0 YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5 NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3 ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNJDlbxntimL6ag68OFs6H/p9VmcUuXul8CdRikHI9AQ4V0oIeQ ++lekfWQ5l0Cy5LQecGdYwvVKJQA99yYbmnZgRHhp0PovaME3uBFIMjsCtGWvxZt KQlxreeRQrbSeQ+ekqQy5YkZHlYHUC10zRhiTCUX+++u7tSw0gWGmPeMd7JL2AJW P8Ip2J6WBMag6CTnnGC8TcLYOpt4gNNiGP0imwuhjFOfkY8l9nUbUTSdUMPtGG8P DLGtYFL5ZYSpMEQYp1mYwZ54NPqlZqDDmghnET5i3Jm/TU1O5e4hoOKzTrDZehfi 0dwuTBWoX7yYf1nOBMcmgPKv5eJ5xcylchc= -----END CERTIFICATE-----Generated at Tue Oct 13 04:19:33 2026 by rpki-client