$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa File: dd33e40a-b34b-360b-81cc-117570e36a78.roa (raw, json) Hash identifier: K48jlshwjlu7mRNO9rtOEGvbW/C0yyIrptzSPaSxIk4= Subject key identifier: 44:29:BF:2E:85:21:E6:AF:00:60:A1:91:CB:D4:F1:2A:7D:40:07:D2 Certificate issuer: /CN=b8e4e496-994f-4877-8328-aec6386bbc01 Certificate serial: 010D0C9F4328584F86DDA974DF7BCA6F223D5800 Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 10662 IP address blocks: 2620:d5:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a9:74:df:7b:ca:6f:22:3d:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=dbac8083-3641-4a11-8f08-620dad64904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:2f:d8:e6:53:36:e1:d0:c5:15:03:c6:a5: 3b:45:d0:bd:4f:a9:5d:a0:10:5d:23:40:69:50:f0: 62:f8:15:39:52:ed:88:94:38:87:28:a5:f7:e8:64: ee:99:a4:e6:4c:b4:b6:f3:9d:77:78:e5:bf:0b:75: d4:c7:08:6e:02:59:54:79:71:ad:a9:97:e2:01:78: 72:2f:80:31:3a:4a:14:5b:2f:58:fd:61:23:16:d7: fb:e3:1b:58:a9:7c:d2:e3:9c:6a:0b:36:96:4f:8c: f3:e7:b3:c1:42:48:0e:11:8f:9c:aa:58:87:f9:f4: c4:67:24:fb:ea:22:45:0a:4b:6c:91:00:81:55:16: bf:5e:7b:eb:37:a8:ad:cd:85:4c:22:ce:96:81:76: 25:d8:5b:20:3f:23:db:59:48:8c:bc:9e:bc:ad:c1: d2:06:13:d0:93:bb:a3:30:d2:45:b3:21:70:e1:ed: 9c:89:58:30:25:98:39:6a:64:9e:df:98:b8:aa:16: b4:7e:4f:b1:97:04:3c:27:56:88:fa:7a:e5:ca:7f: c5:5e:50:11:3a:19:6c:5d:f2:8a:d3:f1:6f:3b:18: 14:6d:56:b4:25:70:dd:64:43:2a:bf:3c:3e:64:34: f4:ba:34:1c:db:24:fc:5d:ef:9a:15:8b:66:3d:32: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:29:BF:2E:85:21:E6:AF:00:60:A1:91:CB:D4:F1:2A:7D:40:07:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl X509v3 Authority Key Identifier: keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cb:f9:ae:96:68:dc:97:43:44:04:84:e5:0f:c8:6b:c8:81: 00:92:c7:8a:f4:b2:03:77:04:11:10:74:77:24:d8:71:01:c0: 46:c5:ee:30:10:56:98:53:99:12:1b:ce:7f:cc:06:ad:a0:31: 4c:c3:1d:c6:83:ba:d0:e2:98:78:cd:a8:70:ae:3d:84:c0:bd: 28:91:49:7c:9a:c8:29:db:9b:48:92:aa:61:d0:91:69:c9:e0: ac:4f:4c:bb:fd:49:6c:ae:81:5b:9d:bd:0a:f5:88:d0:88:52: 76:28:50:b9:d2:fb:cb:98:28:48:a5:dd:18:87:95:9b:ef:20: 81:9e:13:bd:55:fc:38:2e:17:7a:13:c7:ed:27:cc:92:43:2c: b6:95:77:9d:da:1b:42:ea:96:4a:2f:bc:ad:28:04:c7:12:57: e1:9c:a6:e6:d3:eb:91:67:d4:ae:45:7a:a1:09:7d:56:5d:c3: 53:5c:c8:be:e4:c1:07:c0:ad:b9:a0:dc:fa:ab:de:7b:6c:f9: 27:0d:b9:43:c6:2a:70:f0:06:9f:d5:3a:57:74:c0:27:9e:a6: 70:49:8d:3e:7d:f3:9a:67:76:d9:e6:c4:de:f2:c6:56:2d:38: cd:e7:aa:87:41:24:b9:50:8d:1a:6c:f9:01:63:dd:a3:3d:c5: ab:3e:f0:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+G3al033vKbyI9WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi YzAxMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGJhYzgwODMtMzY0MS00YTExLThmMDgtNjIwZGFkNjQ5MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYYv2OZTNuHQxRUDxqU7RdC9T6ldoBBdI0Bp UPBi+BU5Uu2IlDiHKKX36GTumaTmTLS28513eOW/C3XUxwhuAllUeXGtqZfiAXhy L4AxOkoUWy9Y/WEjFtf74xtYqXzS45xqCzaWT4zz57PBQkgOEY+cqliH+fTEZyT7 6iJFCktskQCBVRa/XnvrN6itzYVMIs6WgXYl2FsgPyPbWUiMvJ68rcHSBhPQk7uj MNJFsyFw4e2ciVgwJZg5amSe35i4qha0fk+xlwQ8J1aI+nrlyn/FXlAROhlsXfKK 0/FvOxgUbVa0JXDdZEMqvzw+ZDT0ujQc2yT8Xe+aFYtmPTLp3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEQpvy6FIeavAGChkcvU8Sp9QAfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0 ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvZGQzM2U0MGEtYjM0Yi0z NjBiLTgxY2MtMTE3NTcwZTM2YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2 Mzg2YmJjMDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1YAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbL+a6WaNyXQ0QEhOUPyGvIgQCSx4r0sgN3BBEQdHck2HEBwEbF 7jAQVphTmRIbzn/MBq2gMUzDHcaDutDimHjNqHCuPYTAvSiRSXyayCnbm0iSqmHQ kWnJ4KxPTLv9SWyugVudvQr1iNCIUnYoULnS+8uYKEil3RiHlZvvIIGeE71V/Dgu F3oTx+0nzJJDLLaVd53aG0LqlkovvK0oBMcSV+GcpubT65Fn1K5FeqEJfVZdw1Nc yL7kwQfArbmg3Pqr3nts+ScNuUPGKnDwBp/VOld0wCeepnBJjT5985pndtnmxN7y xlYtOM3nqodBJLlQjRps+QFj3aM9xas+8Kc= -----END CERTIFICATE-----Generated at Sat Oct 24 08:56:40 2026 by rpki-client