$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa File: f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa (raw, json) Hash identifier: zJ0iak1w7StnAnqro62ZoApW1R7QRIIAUlOrEoxIALc= Subject key identifier: 90:64:5E:BF:9C:5C:A2:7E:3D:CD:B5:7C:81:91:60:C6:F4:3C:BC:F5 Certificate issuer: /CN=9e34b68f-7f51-4c55-942a-9eae39c2faa2 Certificate serial: 010D0C9F4328584F4F0808AD50CECFB5A3CF9600 Authority key identifier: FF:2A:5A:0F:2A:02:AE:AD:C9:A7:35:A1:45:29:FD:CA:44:A6:DC:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 53873 IP address blocks: 2604:520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:08:ad:50:ce:cf:b5:a3:cf:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b68f-7f51-4c55-942a-9eae39c2faa2 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=8af5f860-907c-4db4-9bd1-fbf9636d927f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:4c:1d:8f:68:d6:ce:e3:55:3f:e4:1d:94: 40:2e:1f:29:61:dd:51:56:fc:a5:b9:ba:ed:df:bd: 40:cb:e3:9d:4c:9c:e6:f0:f7:63:b2:73:84:e4:6a: 63:66:04:9e:51:78:86:21:7f:9b:b4:7b:35:47:75: 71:1f:a2:92:8f:a1:29:14:97:75:10:b7:aa:13:40: 6e:5f:ee:27:e5:fd:cb:27:e6:e0:ad:05:6f:e6:c9: cd:1b:dc:95:0d:6f:b7:aa:01:c9:a8:3f:6f:d0:0c: 3a:a0:1b:60:60:0e:0c:1b:1c:2f:60:6f:1b:4b:4b: 6b:12:3f:6d:b9:38:32:70:c9:70:f9:da:71:7c:73: 71:10:fe:d4:87:5a:a7:22:b9:00:c2:2c:ee:65:0e: a8:11:44:d3:15:44:dd:d7:00:be:43:80:b8:60:de: 05:8a:7a:c5:ce:b1:56:9e:6c:35:e8:68:5b:9b:85: 89:d6:e8:f1:a6:35:46:03:e3:bb:61:ce:e4:60:57: 59:a3:ba:11:e2:f4:f6:96:90:60:4a:28:99:9c:a5: 47:83:0b:cf:d8:ee:15:10:c7:82:75:81:01:0b:10: 33:51:8b:b9:4b:c2:b0:4e:75:f1:dc:11:3d:8f:0c: 8d:55:de:0e:78:95:2b:33:4c:94:58:f4:ad:cb:49: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:5E:BF:9C:5C:A2:7E:3D:CD:B5:7C:81:91:60:C6:F4:3C:BC:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/f1dafeaf-bd3d-36bf-ad62-6a6f97bdf6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2/9e34b68f-7f51-4c55-942a-9eae39c2faa2.crl X509v3 Authority Key Identifier: keyid:FF:2A:5A:0F:2A:02:AE:AD:C9:A7:35:A1:45:29:FD:CA:44:A6:DC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e34b68f-7f51-4c55-942a-9eae39c2faa2.cer sbgp-ipAddrBlock: critical IPv6: 2604:520::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:47:76:9f:a7:08:a1:4e:d6:41:b6:49:0b:1f:61:15:85:95: 07:0f:b1:0f:bf:b1:6b:b6:e5:5c:65:43:3a:7b:da:b4:1b:40: ce:84:e3:51:4d:6a:f9:bc:8e:a7:c0:ad:f7:fd:f4:a1:e5:bb: 2a:b1:fb:e0:f4:0a:7a:b7:92:4a:2f:91:85:ae:a9:bd:6b:dc: 98:45:2c:8a:73:0e:10:5b:bb:f5:34:74:44:f5:65:88:c0:22: be:2b:03:aa:a4:29:d3:c8:72:a6:f8:76:91:ab:71:3e:48:32: 17:af:25:48:a1:27:5b:da:fe:17:92:47:a1:c9:96:aa:44:76: 5e:fb:d8:4d:1c:9f:0f:f4:31:a0:49:9b:6c:63:87:b5:9f:f2: 05:30:6a:dd:1c:47:04:92:43:79:d6:67:db:fc:9a:89:f9:33: a0:80:01:21:2a:bb:c6:c7:93:5e:34:81:ea:27:81:25:1a:42: 4e:0c:53:8c:41:46:cc:b0:38:78:97:e4:d6:22:ff:8d:47:78: aa:b2:62:3e:3d:19:de:dd:3e:8c:e1:39:17:fb:3a:5c:25:fa: 18:6c:16:85:2f:9c:73:90:77:de:e2:40:38:0b:de:1c:29:de: a0:85:ec:d3:48:42:ba:b7:bf:45:a0:73:bb:6b:ee:91:90:b8: 0b:af:38:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9PCAitUM7PtaPPlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNGI2OGYtN2Y1MS00YzU1LTk0MmEtOWVhZTM5YzJm YWEyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OGFmNWY4NjAtOTA3Yy00ZGI0LTliZDEtZmJmOTYzNmQ5MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTJMHY9o1s7jVT/kHZRALh8pYd1RVvylubrt 371Ay+OdTJzm8PdjsnOE5GpjZgSeUXiGIX+btHs1R3VxH6KSj6EpFJd1ELeqE0Bu X+4n5f3LJ+bgrQVv5snNG9yVDW+3qgHJqD9v0Aw6oBtgYA4MGxwvYG8bS0trEj9t uTgycMlw+dpxfHNxEP7Uh1qnIrkAwizuZQ6oEUTTFUTd1wC+Q4C4YN4FinrFzrFW nmw16Ghbm4WJ1ujxpjVGA+O7Yc7kYFdZo7oR4vT2lpBgSiiZnKVHgwvP2O4VEMeC dYEBCxAzUYu5S8KwTnXx3BE9jwyNVd4OeJUrM0yUWPSty0kc2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJBkXr+cXKJ+Pc21fIGRYMb0PLz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ZTM0 YjY4Zi03ZjUxLTRjNTUtOTQyYS05ZWFlMzljMmZhYTIvZjFkYWZlYWYtYmQzZC0z NmJmLWFkNjItNmE2Zjk3YmRmNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWUzNGI2OGYtN2Y1MS00YzU1LTk0 MmEtOWVhZTM5YzJmYWEyLzllMzRiNjhmLTdmNTEtNGM1NS05NDJhLTllYWUzOWMy ZmFhMi5jcmwwHwYDVR0jBBgwFoAU/ypaDyoCrq3JpzWhRSn9ykSm3HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ZTM0YjY4Zi03ZjUxLTRjNTUtOTQyYS05ZWFl MzljMmZhYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZR3afpwihTtZBtkkLH2EVhZUHD7EPv7FrtuVcZUM6e9q0G0DOhONR TWr5vI6nwK33/fSh5bsqsfvg9Ap6t5JKL5GFrqm9a9yYRSyKcw4QW7v1NHRE9WWI wCK+KwOqpCnTyHKm+HaRq3E+SDIXryVIoSdb2v4XkkehyZaqRHZe+9hNHJ8P9DGg SZtsY4e1n/IFMGrdHEcEkkN51mfb/JqJ+TOggAEhKrvGx5NeNIHqJ4ElGkJODFOM QUbMsDh4l+TWIv+NR3iqsmI+PRne3T6M4TkX+zpcJfoYbBaFL5xzkHfe4kA4C94c Kd6ghezTSEK6t79FoHO7a+6RkLgLrzhM -----END CERTIFICATE-----Generated at Sat Oct 24 03:13:05 2026 by rpki-client