$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: Ic+kO0KPPFUxKsvvjLHICxheGReE46GoQVxqlfT5k6A= Subject key identifier: 2D:62:73:FD:EA:4A:EF:B7:A1:61:3F:8C:83:58:FD:9D:57:42:88:04 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F71EDA1E41FB00248D1C52400 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a1:e4:1f:b0:02:48:d1:c5:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=f18db260-828e-4ebd-9600-71c67c299457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:05:d0:ba:7a:66:a2:d0:91:a0:d7:3e:d3: ed:ef:ee:24:f9:01:ea:e3:01:22:39:7c:f1:18:3f: b2:fb:14:25:df:a7:5e:ff:e7:48:98:2a:69:06:b8: b9:6d:04:60:65:13:3b:49:8b:d9:14:fc:8c:3a:7a: aa:a5:f3:31:94:6f:fa:59:cd:69:0e:85:2e:15:c2: f5:b0:94:56:34:26:2b:85:03:be:41:c9:86:91:3e: fb:21:f9:40:99:a7:65:44:f7:6f:ae:34:fe:27:01: 87:57:14:62:08:b4:a7:d6:b8:50:8e:2d:94:96:75: 55:05:00:b7:09:15:3e:01:67:1f:61:24:87:69:d7: 0a:9d:aa:f6:39:c6:27:87:39:81:38:8e:7c:7d:bc: 6e:5e:52:cb:c7:3d:3f:03:c2:28:b4:ec:9d:06:df: ed:a0:27:16:80:11:81:12:d2:e8:50:ac:2a:26:72: 21:70:dc:8d:8f:13:7a:a0:0d:68:57:ad:55:9d:b3: a2:6f:62:c1:cd:c3:31:bc:1e:89:63:b5:a1:60:39: 3a:0a:af:f5:d8:6e:6e:11:3e:2d:d4:8b:41:9e:5e: 66:de:3d:f0:42:ab:db:e0:be:04:98:c1:af:d4:e3: c6:74:57:7a:74:6a:39:7a:43:79:69:ea:2e:25:03: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:62:73:FD:EA:4A:EF:B7:A1:61:3F:8C:83:58:FD:9D:57:42:88:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:03:5a:04:9e:1b:ee:e3:4b:3c:88:d4:45:ed:5f:59:7f:6e: d1:77:6b:b6:9f:68:6b:78:16:9d:b3:ac:85:63:d3:93:4d:f3: 97:de:5d:ce:dc:34:3c:50:de:72:e2:3d:25:44:43:84:0f:25: 40:1c:fe:06:68:84:7b:ac:41:4d:c8:43:c4:fa:1d:85:98:f1: 06:35:33:55:57:ba:86:74:9e:98:c6:a7:85:2c:31:c8:53:c6: 15:20:c0:31:15:bb:a8:82:9f:5d:f8:09:ba:b8:d7:e4:c4:6f: 7b:f0:50:e6:95:88:1a:93:f9:88:45:17:48:c0:c5:7e:73:b7: 98:41:b8:08:f1:43:f4:bb:a7:7a:e0:09:85:4a:a9:0d:08:a1: 96:24:fd:cf:cb:f1:9b:3e:90:78:3c:fc:ac:94:71:52:7e:5b: eb:03:84:18:9f:0b:d3:90:7a:c7:52:bc:2f:bc:a1:f7:da:a1: 85:9b:df:f0:a0:f5:69:c3:bb:53:0c:66:1c:25:69:54:f2:e7: 75:46:bc:74:c9:37:d2:87:1a:3f:f8:a1:07:5d:08:1e:73:a3: 63:ce:42:41:d9:42:d1:33:1e:a7:ea:f2:71:54:57:5d:2a:6e: 92:ad:bc:c5:65:bc:43:9f:59:d2:6f:16:06:4d:87:c3:f4:d1: 26:3a:7f:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7aHkH7ACSNHFJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZjE4ZGIyNjAtODI4ZS00ZWJkLTk2MDAtNzFjNjdjMjk5NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEkF0Lp6ZqLQkaDXPtPt7+4k+QHq4wEiOXzx GD+y+xQl36de/+dImCppBri5bQRgZRM7SYvZFPyMOnqqpfMxlG/6Wc1pDoUuFcL1 sJRWNCYrhQO+QcmGkT77IflAmadlRPdvrjT+JwGHVxRiCLSn1rhQji2UlnVVBQC3 CRU+AWcfYSSHadcKnar2OcYnhzmBOI58fbxuXlLLxz0/A8IotOydBt/toCcWgBGB EtLoUKwqJnIhcNyNjxN6oA1oV61VnbOib2LBzcMxvB6JY7WhYDk6Cq/12G5uET4t 1ItBnl5m3j3wQqvb4L4EmMGv1OPGdFd6dGo5ekN5aeouJQNaOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1ic/3qSu+3oWE/jINY/Z1XQogEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEDWgSeG+7jSzyI1EXtX1l/btF3a7afaGt4Fp2zrIVj05NN85fe Xc7cNDxQ3nLiPSVEQ4QPJUAc/gZohHusQU3IQ8T6HYWY8QY1M1VXuoZ0npjGp4Us MchTxhUgwDEVu6iCn134Cbq41+TEb3vwUOaViBqT+YhFF0jAxX5zt5hBuAjxQ/S7 p3rgCYVKqQ0IoZYk/c/L8Zs+kHg8/KyUcVJ+W+sDhBifC9OQesdSvC+8offaoYWb 3/Cg9WnDu1MMZhwlaVTy53VGvHTJN9KHGj/4oQddCB5zo2POQkHZQtEzHqfq8nFU V10qbpKtvMVlvEOfWdJvFgZNh8P00SY6f+o= -----END CERTIFICATE-----Generated at Mon Nov 2 07:28:06 2026 by rpki-client