$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/c814302f-c254-34ac-bd60-06896ff764c2.roa File: c814302f-c254-34ac-bd60-06896ff764c2.roa (raw, json) Hash identifier: dQLgN7gxPxjx0g4FnG0a3aFhhojCik1Jxq/8qQppq8U= Subject key identifier: 6A:0D:B9:8E:1C:73:59:22:80:DD:F1:55:EF:57:CE:AA:9C:00:D1:B6 Certificate issuer: /CN=5dfc19b2-15c9-4fcd-9fee-64d61bd31357 Certificate serial: 010D0C9F4328584F7BB2F3784D4CE7F1BA8339C0 Authority key identifier: 3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/c814302f-c254-34ac-bd60-06896ff764c2.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 402630 IP address blocks: 2620:36:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f3:78:4d:4c:e7:f1:ba:83:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfc19b2-15c9-4fcd-9fee-64d61bd31357 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5684cde3-91af-49ff-af11-e6be3cc066ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:f3:b9:52:02:27:59:8f:28:f1:b1:1e:51: 2f:61:ee:3a:32:cb:61:e1:c3:89:28:93:d9:c7:67: f1:83:f8:fe:4e:50:9e:75:48:ac:46:1c:77:13:84: 6e:ea:e6:11:d7:c3:7b:e1:8f:35:0d:e4:6f:fd:03: 90:b6:3a:23:fb:9a:62:51:4b:c5:4e:29:de:ba:0b: ba:2d:1f:8e:c9:06:75:6c:58:c6:61:64:27:88:9c: 52:5e:39:25:b7:d8:88:63:1a:cd:0d:1d:ac:72:cc: 6a:43:c9:c8:31:08:9e:b3:4d:39:bc:c8:2f:c7:54: 7d:4f:a2:63:2d:f6:36:ce:a2:91:fa:10:89:61:58: cd:0c:5a:ed:cc:94:d9:ca:34:ab:d0:51:b3:04:4a: 00:4f:5a:e7:cf:30:44:49:95:16:67:97:0e:e9:2b: 2b:b7:7a:7a:8b:60:b3:8d:74:50:14:fa:33:00:9d: b2:8a:51:72:b5:b3:ff:47:89:ca:a2:14:69:d0:37: cd:32:e9:76:b2:89:f4:8c:3b:12:3a:88:3a:f0:9d: 7b:d7:83:b8:26:a5:2f:0f:e5:39:d6:ef:01:16:71: 05:53:f1:b6:85:f1:6b:df:85:98:f6:62:83:26:e4: 1f:ff:43:9c:73:5c:c8:99:5a:c0:8c:77:db:d7:ea: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0D:B9:8E:1C:73:59:22:80:DD:F1:55:EF:57:CE:AA:9C:00:D1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/c814302f-c254-34ac-bd60-06896ff764c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.crl X509v3 Authority Key Identifier: keyid:3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer sbgp-ipAddrBlock: critical IPv6: 2620:36:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a4:71:5d:a9:96:89:8f:84:28:50:85:33:0b:34:a6:8e:9e: 76:9f:36:57:74:1e:27:67:25:60:a5:4c:69:63:de:9d:e7:ea: fb:16:49:28:3d:92:03:b7:0d:cd:98:c3:6d:82:d8:50:67:0f: 9d:11:84:de:15:fa:da:b5:3b:d9:10:7c:52:2f:7f:f2:69:56: ac:0a:ea:3f:b7:83:d8:9c:2f:0a:ec:36:0e:d4:f3:0e:af:9d: 3b:f2:02:18:0d:36:4f:98:b8:11:70:de:74:40:82:c8:41:1e: 6c:18:55:02:75:de:47:f8:e8:3b:66:25:e9:f5:95:a5:c1:d2: 06:2d:31:ce:63:48:e3:0e:1b:0b:db:21:c9:3b:3a:e6:66:9f: 72:79:4e:a3:45:fe:ed:06:8d:80:90:a1:b9:20:e7:8a:05:85: f6:3e:d8:1a:53:46:b3:ec:c1:a1:a4:d1:be:43:05:80:8b:77: 50:cf:94:33:ff:c5:81:74:fc:0d:09:23:ab:e4:2e:86:71:c8: a3:d9:5f:6a:66:58:d2:2f:89:30:8a:bc:68:09:20:12:f4:93: 48:fe:5e:7c:98:d8:e3:5c:3d:df:71:2a:88:be:8e:d9:90:3f: 86:29:e7:47:af:77:d4:b9:be:5f:4d:43:82:18:00:26:9e:fb: 42:16:0c:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97svN4TUzn8bqDOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmYzE5YjItMTVjOS00ZmNkLTlmZWUtNjRkNjFiZDMx MzU3MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NTY4NGNkZTMtOTFhZi00OWZmLWFmMTEtZTZiZTNjYzA2NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnzuVICJ1mPKPGxHlEvYe46Msth4cOJKJPZ x2fxg/j+TlCedUisRhx3E4Ru6uYR18N74Y81DeRv/QOQtjoj+5piUUvFTineugu6 LR+OyQZ1bFjGYWQniJxSXjklt9iIYxrNDR2scsxqQ8nIMQies005vMgvx1R9T6Jj LfY2zqKR+hCJYVjNDFrtzJTZyjSr0FGzBEoAT1rnzzBESZUWZ5cO6Ssrt3p6i2Cz jXRQFPozAJ2yilFytbP/R4nKohRp0DfNMul2son0jDsSOog68J1714O4JqUvD+U5 1u8BFnEFU/G2hfFr34WY9mKDJuQf/0Occ1zImVrAjHfb1+qIYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGoNuY4cc1kigN3xVe9XzqqcANG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZGZj MTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2MWJkMzEzNTcvYzgxNDMwMmYtYzI1NC0z NGFjLWJkNjAtMDY4OTZmZjc2NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWRmYzE5YjItMTVjOS00ZmNkLTlm ZWUtNjRkNjFiZDMxMzU3LzVkZmMxOWIyLTE1YzktNGZjZC05ZmVlLTY0ZDYxYmQz MTM1Ny5jcmwwHwYDVR0jBBgwFoAUOlSdF9KGxlllAvBrAhxsEaijo8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZGZjMTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2 MWJkMzEzNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAANiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGakcV2plomPhChQhTMLNKaOnnafNld0HidnJWClTGlj3p3n6vsW SSg9kgO3Dc2Yw22C2FBnD50RhN4V+tq1O9kQfFIvf/JpVqwK6j+3g9icLwrsNg7U 8w6vnTvyAhgNNk+YuBFw3nRAgshBHmwYVQJ13kf46DtmJen1laXB0gYtMc5jSOMO GwvbIck7OuZmn3J5TqNF/u0GjYCQobkg54oFhfY+2BpTRrPswaGk0b5DBYCLd1DP lDP/xYF0/A0JI6vkLoZxyKPZX2pmWNIviTCKvGgJIBL0k0j+XnyY2ONcPd9xKoi+ jtmQP4Yp50evd9S5vl9NQ4IYACae+0IWDOA= -----END CERTIFICATE-----Generated at Tue Oct 20 18:24:25 2026 by rpki-client