$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa File: d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa (raw, json) Hash identifier: Px/RIJTB4vSRJWdyrhJfbxBvhGeH29foYA8F0m23Zcw= Subject key identifier: F8:4A:9B:DD:81:06:5F:3D:2E:D8:61:C6:96:47:69:BB:32:0D:89:3F Certificate issuer: /CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Certificate serial: 010D0C9F4328584F7E7E07AFAEB127EAE6B7FA40 Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 29 IP address blocks: 2604:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:07:af:ae:b1:27:ea:e6:b7:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=6a832a08-dadb-4544-895b-de8786e68451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:8f:75:b4:2e:03:d1:ff:2b:5c:cb:17:f9: bd:c6:cb:cd:fb:7b:51:55:5a:d9:9e:1a:a6:96:fd: 56:98:27:95:fe:21:f0:6d:20:fe:cf:6f:0b:19:17: 7b:5a:67:c5:14:5a:e8:fb:39:ba:28:50:06:3d:ac: 40:0f:b8:07:b2:3b:cb:c5:57:42:28:c9:6d:2d:31: 75:58:94:37:6a:24:af:e0:f3:18:92:b5:2f:ec:a1: 8a:d7:78:d8:b5:3e:a5:3a:6b:65:86:09:8a:c8:f8: ab:81:d1:46:60:fd:d3:fa:15:d7:01:88:9c:68:bd: da:53:41:30:1b:0e:cd:66:2f:41:cc:d7:74:cf:e6: c3:29:74:c6:e2:b1:7d:5b:01:8e:5d:5e:62:d1:20: cd:92:f1:51:9c:ed:5f:19:ed:5d:3e:7f:72:4d:8a: 09:99:0f:35:6e:98:5c:ba:80:b4:4b:9b:5f:88:11: 2b:12:b4:e0:29:63:59:d7:45:4e:02:54:11:3f:eb: 29:d2:73:1c:28:8b:87:06:66:23:00:84:0d:ce:7b: 57:be:6c:0c:b2:53:32:03:56:be:99:09:70:09:ce: 0e:5f:fe:8c:7c:58:6e:24:1e:e5:03:a4:6f:3c:0d: 58:e4:e3:de:fb:83:25:d5:85:50:6a:b1:2d:fb:a8: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:9B:DD:81:06:5F:3D:2E:D8:61:C6:96:47:69:BB:32:0D:89:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl X509v3 Authority Key Identifier: keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer sbgp-ipAddrBlock: critical IPv6: 2604:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:bf:3d:cd:2d:3c:5f:7e:fa:aa:6d:4e:88:28:7e:41:97: 76:ac:f7:fa:ce:f2:4c:7d:1d:10:2f:7d:dc:33:93:d2:97:e9: 4d:c7:11:54:1e:38:f6:01:01:2c:b6:c4:4c:1f:64:8f:aa:c3: fe:1e:7d:98:f5:a7:fb:b6:d8:2a:a0:11:e0:eb:e7:50:10:2a: 87:69:1b:fe:0c:fd:4c:73:d7:78:58:c7:a5:f6:79:75:ce:e2: 9f:a2:1a:43:ba:13:97:24:7d:cd:6d:fc:6e:a1:96:f5:58:04: b4:5a:2a:13:c7:5a:9b:10:5c:c6:e5:73:dc:dc:81:2e:06:97: 4a:55:0f:ee:a2:42:9f:5a:79:5c:07:d5:7e:c9:95:ee:be:ec: e7:ee:c8:3f:ad:55:ad:c2:6d:7f:e0:05:c6:91:80:a5:0e:1a: 3d:e5:a2:16:c4:37:09:d1:d9:3e:36:28:10:13:7f:be:08:c6: 89:c5:0f:42:28:0c:3d:b4:5c:01:84:7a:26:64:4b:76:cc:8f: c3:b3:87:cf:5f:7b:8b:c4:60:56:48:d3:a8:22:00:1b:56:cf: 88:23:0a:e0:b3:74:08:c7:4c:0d:30:37:22:b7:2a:66:7e:12: f9:fd:11:4a:a8:18:bb:2f:86:ce:40:e1:86:93:fc:39:33:0f: 77:f2:68:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9+fgevrrEn6ua3+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc1NTkzZDUtNWVjNy00YmE3LTkxMzQtNjc2MWNkZTZi NjAxMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NmE4MzJhMDgtZGFkYi00NTQ0LTg5NWItZGU4Nzg2ZTY4NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCPdbQuA9H/K1zLF/m9xsvN+3tRVVrZnhqm lv1WmCeV/iHwbSD+z28LGRd7WmfFFFro+zm6KFAGPaxAD7gHsjvLxVdCKMltLTF1 WJQ3aiSv4PMYkrUv7KGK13jYtT6lOmtlhgmKyPirgdFGYP3T+hXXAYicaL3aU0Ew Gw7NZi9BzNd0z+bDKXTG4rF9WwGOXV5i0SDNkvFRnO1fGe1dPn9yTYoJmQ81bphc uoC0S5tfiBErErTgKWNZ10VOAlQRP+sp0nMcKIuHBmYjAIQNzntXvmwMslMyA1a+ mQlwCc4OX/6MfFhuJB7lA6RvPA1Y5OPe+4Ml1YVQarEt+6gbvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPhKm92BBl89LthhxpZHabsyDYk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1 OTNkNS01ZWM3LTRiYTctOTEzNC02NzYxY2RlNmI2MDEvZDdhZjdmYmMtNjlkMS0z ZDUyLTljMWQtNDBjOTY4ZmYyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjc1NTkzZDUtNWVjNy00YmE3LTkx MzQtNjc2MWNkZTZiNjAxLzY3NTU5M2Q1LTVlYzctNGJhNy05MTM0LTY3NjFjZGU2 YjYwMS5jcmwwHwYDVR0jBBgwFoAUWim2d2+LiMuN4g3agBDQL+JE2sMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1OTNkNS01ZWM3LTRiYTctOTEzNC02NzYx Y2RlNmI2MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSyADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvB789zS08X376qm1OiCh+QZd2rPf6zvJMfR0QL33cM5PSl+lNxxFU Hjj2AQEstsRMH2SPqsP+Hn2Y9af7ttgqoBHg6+dQECqHaRv+DP1Mc9d4WMel9nl1 zuKfohpDuhOXJH3NbfxuoZb1WAS0WioTx1qbEFzG5XPc3IEuBpdKVQ/uokKfWnlc B9V+yZXuvuzn7sg/rVWtwm1/4AXGkYClDho95aIWxDcJ0dk+NigQE3++CMaJxQ9C KAw9tFwBhHomZEt2zI/Ds4fPX3uLxGBWSNOoIgAbVs+IIwrgs3QIx0wNMDcitypm fhL5/RFKqBi7L4bOQOGGk/w5Mw938mjf -----END CERTIFICATE-----Generated at Tue Oct 27 09:01:27 2026 by rpki-client