$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa File: 0171cd60-0e42-34d9-ace3-f8951f31be1f.roa (raw, json) Hash identifier: JMdkiOS4esFT+JfEcWeAxjX9cebFEqHh/JFowNQQx4E= Subject key identifier: D9:82:47:F9:CA:CE:04:E7:B1:F4:5B:2B:40:E4:20:9A:EF:0D:84:40 Certificate issuer: /CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8 Certificate serial: 010D0C9F4328584F7E7D8B00CA1CD0C17A46CD80 Authority key identifier: D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398031 IP address blocks: 2620:77:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:8b:00:ca:1c:d0:c1:7a:46:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e7472040-0220-4a13-9569-1e150948a262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:ee:37:ec:0a:e1:ce:74:e6:01:38:1a:67: c4:45:e7:a9:46:10:43:f5:df:b5:31:f2:66:dc:1f: ab:dd:6a:25:42:7e:51:4f:c6:94:80:ac:17:00:94: 24:b9:30:e4:7f:c4:46:83:ce:91:1e:de:35:ca:53: 6e:90:cd:54:c1:eb:40:1f:32:5b:2e:53:9b:4e:fe: e6:fd:b0:c8:2e:76:d2:d2:4b:c2:d7:dd:57:12:43: c1:cb:fc:49:a5:5a:31:71:79:1f:e3:a9:4f:1e:6c: 42:10:e4:85:e3:47:9e:7c:30:fa:92:0c:ed:59:84: 58:d0:ee:c3:c2:80:66:ee:b5:2a:ad:5e:31:99:92: 09:3a:2c:16:2c:50:fd:6e:2d:83:c8:4e:14:b5:50: 89:01:32:1e:90:ac:a2:40:49:52:d0:69:f7:19:85: 18:ea:57:8c:8c:2c:51:bb:77:ba:1d:66:5a:80:73: 37:a4:3c:90:18:9f:9c:2e:43:e3:ab:83:c0:ca:0f: b6:d6:6c:7c:60:33:56:28:ed:17:ec:cc:9c:48:0a: c6:9a:30:a0:06:22:56:a3:81:1f:17:87:46:d2:43: 92:d6:33:fe:68:5b:3d:00:7a:31:c9:17:08:4e:ba: 25:61:ed:ca:d8:21:5b:17:d7:0a:b6:d5:63:01:6f: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:82:47:F9:CA:CE:04:E7:B1:F4:5B:2B:40:E4:20:9A:EF:0D:84:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/0171cd60-0e42-34d9-ace3-f8951f31be1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl X509v3 Authority Key Identifier: keyid:D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:77:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c0:ab:df:dc:a6:a5:7e:41:0f:89:7d:69:26:0f:fd:1d:fb: fd:f2:cb:17:b0:61:d7:20:c0:8e:cf:46:ce:a3:39:24:5d:91: a5:b6:c3:68:0f:fe:d1:2c:ee:fe:e2:48:d7:31:30:59:25:b5: 4d:c6:36:3a:38:75:49:4d:aa:2e:5c:95:7e:33:97:63:6f:c5: a8:f7:d0:a5:f9:71:37:fc:fe:c9:cd:57:cc:5b:e3:83:18:d6: 52:a0:87:af:9b:03:d0:4b:4d:a5:5c:46:1d:86:dc:ce:96:89: c2:b3:6d:0f:b7:8f:a9:ad:2d:83:9c:7a:f1:6a:ab:d2:8b:ec: 7c:bc:90:ee:67:0c:88:7d:4d:1f:f8:eb:10:4c:be:9f:1e:dc: 30:a9:e8:95:c2:2d:24:df:ae:fd:f5:c4:7d:76:95:17:9c:31: 71:1e:32:ef:44:ad:c8:f9:90:10:27:7f:2f:f5:2c:42:05:eb: dd:45:6f:48:6c:ce:fc:6a:dd:44:aa:a8:72:59:84:cd:5f:66: 0a:31:0b:99:f5:2c:d3:14:b7:a7:e9:a9:86:ba:18:a9:bb:75: f1:a6:c1:68:a4:f9:e2:ce:a9:0a:22:1a:8d:29:64:3a:45:6f: d5:a0:6b:62:66:79:b3:ed:98:9c:89:f8:63:fa:6a:4f:54:d0: 3c:cd:3e:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fYsAyhzQwXpGzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg0ZTcxNjgtOTcwNy00OGRkLWJlYWYtYjdiYjRiNWU4 NGI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTc0NzIwNDAtMDIyMC00YTEzLTk1NjktMWUxNTA5NDhhMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwjuN+wK4c505gE4GmfEReepRhBD9d+1MfJm 3B+r3WolQn5RT8aUgKwXAJQkuTDkf8RGg86RHt41ylNukM1UwetAHzJbLlObTv7m /bDILnbS0kvC191XEkPBy/xJpVoxcXkf46lPHmxCEOSF40eefDD6kgztWYRY0O7D woBm7rUqrV4xmZIJOiwWLFD9bi2DyE4UtVCJATIekKyiQElS0Gn3GYUY6leMjCxR u3e6HWZagHM3pDyQGJ+cLkPjq4PAyg+21mx8YDNWKO0X7MycSArGmjCgBiJWo4Ef F4dG0kOS1jP+aFs9AHoxyRcITrolYe3K2CFbF9cKttVjAW/g7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmCR/nKzgTnsfRbK0DkIJrvDYRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ODRl NzE2OC05NzA3LTQ4ZGQtYmVhZi1iN2JiNGI1ZTg0YjgvMDE3MWNkNjAtMGU0Mi0z NGQ5LWFjZTMtZjg5NTFmMzFiZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTg0ZTcxNjgtOTcwNy00OGRkLWJl YWYtYjdiYjRiNWU4NGI4LzU4NGU3MTY4LTk3MDctNDhkZC1iZWFmLWI3YmI0YjVl ODRiOC5jcmwwHwYDVR0jBBgwFoAU2M3xagT14ERCEyXtsdbrVYTjGHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ODRlNzE2OC05NzA3LTQ4ZGQtYmVhZi1iN2Ji NGI1ZTg0YjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAd2AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETAq9/cpqV+QQ+JfWkmD/0d+/3yyxewYdcgwI7PRs6jOSRdkaW2 w2gP/tEs7v7iSNcxMFkltU3GNjo4dUlNqi5clX4zl2Nvxaj30KX5cTf8/snNV8xb 44MY1lKgh6+bA9BLTaVcRh2G3M6WicKzbQ+3j6mtLYOcevFqq9KL7Hy8kO5nDIh9 TR/46xBMvp8e3DCp6JXCLSTfrv31xH12lRecMXEeMu9Ercj5kBAnfy/1LEIF691F b0hszvxq3USqqHJZhM1fZgoxC5n1LNMUt6fpqYa6GKm7dfGmwWik+eLOqQoiGo0p ZDpFb9Wga2JmebPtmJyJ+GP6ak9U0DzNPnY= -----END CERTIFICATE-----Generated at Sun Oct 25 11:20:28 2026 by rpki-client