$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa File: 32f15bc9-1c3d-3499-9769-540df2da6c5e.roa (raw, json) Hash identifier: NlB7BPbdDMtlS+PXiYhuvd2utVMeWlmDVo3Ur14CTSA= Subject key identifier: 6C:00:16:80:E8:0E:31:0C:7E:CD:49:71:F8:21:65:04:69:BF:C1:51 Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Certificate serial: 010D0C9F4328584F86DD9E9A0ED3A6C2F54BC1E0 Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 5400 IP address blocks: 2606:f100:d400::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:9e:9a:0e:d3:a6:c2:f5:4b:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=5bb4ef55-433a-4e66-a020-58013345390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:4c:d9:aa:84:77:3e:97:2c:21:97:12:e6: 50:85:02:f5:5b:33:8e:8a:67:af:38:29:64:65:35: 2d:82:0f:37:75:61:28:10:87:d6:72:72:d7:d1:04: 82:bb:9b:57:a7:bc:78:32:79:34:3a:76:a0:c1:39: b2:fd:c0:07:ce:96:a5:37:29:54:08:70:1d:0b:99: 19:12:ff:f0:23:4b:ae:aa:f0:36:77:81:33:40:41: 86:7e:d3:7b:b1:e5:cf:f7:d9:00:ca:ac:dc:1c:9a: 77:4b:34:a9:02:c9:0c:ca:68:7d:96:56:ed:5e:76: 3b:a4:ab:67:0f:29:f4:8c:65:95:5d:38:d7:da:ea: f7:54:bd:87:6a:45:b7:c0:1b:73:3f:5d:bc:1b:f0: f0:b5:e2:fb:47:fe:68:42:cf:46:88:ff:43:84:c1: 47:f2:ba:f4:c1:c2:50:48:9c:6e:da:0a:05:df:0f: 67:7b:ad:53:fa:53:45:b8:a6:97:2c:3f:1c:d1:14: 70:8b:ac:13:a3:11:55:46:f5:cc:c3:cc:fe:ae:68: f3:6b:1b:f2:8a:c2:0c:4e:fd:a3:db:65:c8:c9:c1: 8b:72:fa:90:ff:b7:d9:de:7f:c7:9d:96:2f:b0:53: 6f:a8:25:35:36:22:90:ac:cd:79:8d:60:52:33:11: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:00:16:80:E8:0E:31:0C:7E:CD:49:71:F8:21:65:04:69:BF:C1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/32f15bc9-1c3d-3499-9769-540df2da6c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl X509v3 Authority Key Identifier: keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer sbgp-ipAddrBlock: critical IPv6: 2606:f100:d400::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:56:e1:b0:1a:a9:8e:30:2a:79:6d:82:f5:18:83:47:46:5e: 58:8f:15:6c:e0:e6:91:c5:37:bf:93:65:9e:73:6b:f9:d7:49: 28:fe:b9:00:02:80:d0:47:85:8e:5b:24:ff:87:a9:b8:13:0a: 06:73:16:6e:ac:82:0d:35:09:13:3a:7e:75:f0:cf:3e:d8:4f: 43:24:28:7a:57:a0:1d:65:86:a9:4a:11:34:ed:18:93:01:5c: cc:e5:03:4f:6e:bb:97:70:fb:0b:b7:2b:d3:46:3b:d7:ec:c5: cd:88:21:32:28:12:35:75:ce:1c:3c:d2:43:78:21:98:82:09: bb:62:07:c6:06:1c:2d:46:7c:ea:55:7b:d1:c1:08:f4:06:e6: 4d:b5:4c:f4:c4:35:6d:a7:28:31:0f:e3:3c:9f:85:0e:27:ae: 97:37:5e:22:53:c8:d6:e5:08:e5:0f:35:93:7d:25:df:cc:81: 46:a0:32:23:d1:7e:50:ca:a8:54:e3:e1:48:9f:08:ab:ea:4a: e5:03:f1:64:1d:1f:67:d7:bc:0a:4d:d7:91:1a:86:3a:a5:9c: fc:7d:e9:20:0b:59:0a:34:28:5e:be:e3:3d:c8:b8:12:93:67: 10:b3:06:85:fb:e2:15:cc:54:49:7a:8d:74:97:6f:8a:d3:b6: c2:e6:37:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+G3Z6aDtOmwvVLweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3 YmNiMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk NWJiNGVmNTUtNDMzYS00ZTY2LWEwMjAtNTgwMTMzNDUzOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC5M2aqEdz6XLCGXEuZQhQL1WzOOimevOClk ZTUtgg83dWEoEIfWcnLX0QSCu5tXp7x4Mnk0OnagwTmy/cAHzpalNylUCHAdC5kZ Ev/wI0uuqvA2d4EzQEGGftN7seXP99kAyqzcHJp3SzSpAskMymh9llbtXnY7pKtn Dyn0jGWVXTjX2ur3VL2HakW3wBtzP128G/DwteL7R/5oQs9GiP9DhMFH8rr0wcJQ SJxu2goF3w9ne61T+lNFuKaXLD8c0RRwi6wToxFVRvXMw8z+rmjzaxvyisIMTv2j 22XIycGLcvqQ/7fZ3n/HnZYvsFNvqCU1NiKQrM15jWBSMxEe/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGwAFoDoDjEMfs1JcfghZQRpv8FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvMzJmMTViYzktMWMzZC0z NDk5LTk3NjktNTQwZGYyZGE2YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3 NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxANQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAllbhsBqpjjAqeW2C9RiDR0ZeWI8VbODmkcU3v5NlnnNr+ddJKP65 AAKA0EeFjlsk/4epuBMKBnMWbqyCDTUJEzp+dfDPPthPQyQoelegHWWGqUoRNO0Y kwFczOUDT267l3D7C7cr00Y71+zFzYghMigSNXXOHDzSQ3ghmIIJu2IHxgYcLUZ8 6lV70cEI9AbmTbVM9MQ1bacoMQ/jPJ+FDieulzdeIlPI1uUI5Q81k30l38yBRqAy I9F+UMqoVOPhSJ8Iq+pK5QPxZB0fZ9e8Ck3XkRqGOqWc/H3pIAtZCjQoXr7jPci4 EpNnELMGhfviFcxUSXqNdJdvitO2wuY3fA== -----END CERTIFICATE-----Generated at Mon Oct 26 23:38:02 2026 by rpki-client