$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa File: b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa (raw, json) Hash identifier: oajVAPl5bhFf+8VtEajnn9kdiEXFucLtAt42jcV2skk= Subject key identifier: 08:32:02:4C:AD:DC:2C:69:D9:3F:35:8B:51:FA:B6:0F:45:FD:E6:C9 Certificate issuer: /CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd Certificate serial: 010D0C9F4328584F63F8304E0123A36FF9015680 Authority key identifier: 88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 14430 IP address blocks: 2605:2f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:30:4e:01:23:a3:6f:f9:01:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=36179567-2806-48c1-8c63-30750725cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:a5:a4:e5:d7:41:e4:5d:14:bf:68:83:bb: 00:e6:d8:52:7d:21:41:ec:a8:4a:4d:31:d5:94:bb: b7:f5:17:12:12:be:81:e9:36:2f:81:3c:63:ab:de: 0e:63:25:eb:08:e4:94:63:4d:aa:18:12:c4:16:6a: b8:87:54:c1:55:f6:b6:fb:2d:2d:e9:be:ed:fa:c4: 6b:2f:8f:f3:99:e8:4b:be:fb:46:b6:af:1a:e1:81: 5f:c5:23:af:99:b9:51:00:58:6b:c9:6a:b8:d1:03: 33:a8:9b:bb:cb:c6:bc:da:c0:7e:79:b1:89:0c:a8: f3:cd:f7:77:f0:6c:aa:42:b1:de:c6:f4:87:3b:b6: 4a:8a:6c:47:e7:e0:9c:0d:ad:b8:2c:8d:5e:51:ea: 72:d2:5a:c7:07:ba:74:e9:85:e3:44:90:5d:e3:6d: 1d:ff:8b:21:07:5e:40:54:d3:8d:32:e2:bf:3d:1e: 59:fa:66:5a:4e:6f:67:66:72:d9:ea:af:e0:aa:57: d0:64:5c:97:ae:8b:c5:4c:31:37:76:66:7d:6a:16: 61:17:ac:64:f5:47:7c:b3:6f:cf:8f:1f:02:a5:9e: 0f:d5:f1:20:b2:e8:09:a2:1c:fa:b4:1d:53:27:83: 57:9d:87:04:63:37:5e:52:f2:29:db:d7:24:ff:05: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:02:4C:AD:DC:2C:69:D9:3F:35:8B:51:FA:B6:0F:45:FD:E6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl X509v3 Authority Key Identifier: keyid:88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer sbgp-ipAddrBlock: critical IPv6: 2605:2f40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5b:9c:44:d8:2a:99:94:30:1b:4e:75:77:09:66:99:28:0e: 7e:59:05:a6:76:47:21:43:6a:fa:7f:cb:dc:d1:58:f2:49:f8: 91:26:7b:e6:5e:5a:22:b2:28:ac:52:9e:b2:ae:fc:35:1e:bf: b8:81:0f:60:30:4b:65:e0:76:d3:97:cf:57:7d:6e:62:10:d3: ec:62:00:af:0d:c4:86:10:e0:5d:35:53:a1:12:89:b7:a3:7c: e5:5f:f8:b1:d3:e7:90:e2:fc:3a:97:da:d1:63:cc:b6:e6:f8: d5:53:ce:b2:c0:6e:8f:b2:7a:bf:1a:f2:cd:27:ce:21:c7:fe: c7:33:cf:45:a3:a4:7d:17:77:83:86:f9:c4:9f:4e:5e:56:94: 50:47:5c:8e:75:06:02:b8:b1:e2:2e:b9:44:cd:0d:f5:25:7f: fe:87:50:09:d0:4e:38:3c:02:d0:d5:45:c8:34:ed:1a:99:a5: 9e:84:c9:79:a9:32:97:44:fd:1d:c8:9f:b0:ce:8c:ce:da:ac: 75:5b:82:45:c3:2c:c2:22:49:4c:d1:30:ec:0c:7c:23:aa:0d: 4c:1f:ea:78:d5:f8:3c:77:d3:7f:3f:81:d0:f2:2f:99:7f:3c: eb:11:9e:0f:21:cd:a0:7b:f6:4e:e3:2e:11:f9:cd:75:18:45: 89:1b:47:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+DBOASOjb/kBVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhhYjY5Y2MtMGRiMi00OGNkLWE3MmEtNjY2ZGYxZWNi NWJkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzYxNzk1NjctMjgwNi00OGMxLThjNjMtMzA3NTA3MjVjYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGlpOXXQeRdFL9og7sA5thSfSFB7KhKTTHV lLu39RcSEr6B6TYvgTxjq94OYyXrCOSUY02qGBLEFmq4h1TBVfa2+y0t6b7t+sRr L4/zmehLvvtGtq8a4YFfxSOvmblRAFhryWq40QMzqJu7y8a82sB+ebGJDKjzzfd3 8GyqQrHexvSHO7ZKimxH5+CcDa24LI1eUepy0lrHB7p06YXjRJBd420d/4shB15A VNONMuK/PR5Z+mZaTm9nZnLZ6q/gqlfQZFyXrovFTDE3dmZ9ahZhF6xk9Ud8s2/P jx8CpZ4P1fEgsugJohz6tB1TJ4NXnYcEYzdeUvIp29ck/wXv0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgyAkyt3Cxp2T81i1H6tg9F/ebJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84OGFi NjljYy0wZGIyLTQ4Y2QtYTcyYS02NjZkZjFlY2I1YmQvYjIwZjgzMzgtMGI1Mi0z NWUxLWIwN2UtZmUzZmY2YjU2NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODhhYjY5Y2MtMGRiMi00OGNkLWE3 MmEtNjY2ZGYxZWNiNWJkLzg4YWI2OWNjLTBkYjItNDhjZC1hNzJhLTY2NmRmMWVj YjViZC5jcmwwHwYDVR0jBBgwFoAUiI7CKvniB+WUFd8y2dIgIh18boswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84OGFiNjljYy0wZGIyLTQ4Y2QtYTcyYS02NjZk ZjFlY2I1YmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUvQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPW5xE2CqZlDAbTnV3CWaZKA5+WQWmdkchQ2r6f8vc0VjySfiRJnvm XloisiisUp6yrvw1Hr+4gQ9gMEtl4HbTl89XfW5iENPsYgCvDcSGEOBdNVOhEom3 o3zlX/ix0+eQ4vw6l9rRY8y25vjVU86ywG6Psnq/GvLNJ84hx/7HM89Fo6R9F3eD hvnEn05eVpRQR1yOdQYCuLHiLrlEzQ31JX/+h1AJ0E44PALQ1UXINO0amaWehMl5 qTKXRP0dyJ+wzozO2qx1W4JFwyzCIklM0TDsDHwjqg1MH+p41fg8d9N/P4HQ8i+Z fzzrEZ4PIc2ge/ZO4y4R+c11GEWJG0fQ -----END CERTIFICATE-----Generated at Sat Oct 24 10:15:44 2026 by rpki-client