$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa File: 424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json) Hash identifier: cOsYT7zeBXnY4eJH/eArCwuInonMG3V8i8y+D4JVdyc= Subject key identifier: 10:60:EE:9A:96:FE:02:E7:C4:0B:36:CC:0B:16:FE:76:F6:3E:DC:BC Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F7BB2FFDB0970481718D3F520 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 397181 IP address blocks: 2604:c840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:ff:db:09:70:48:17:18:d3:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=091f6652-b3c2-4170-ad5d-bb86ddf71f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:19:80:45:c7:4f:88:84:3d:d2:97:42:47: 1b:a6:3b:52:78:bc:1a:66:c2:b1:57:dc:e0:58:d4: d3:ee:92:eb:82:33:19:7a:87:0f:cf:3a:7d:61:79: ee:89:df:70:3b:d5:ec:24:35:53:d7:7b:d0:1c:c9: 8d:ce:c8:04:e7:b4:42:c5:14:a9:fa:94:be:ba:ae: f6:0b:e3:83:d7:a1:47:87:3c:20:bd:ab:a9:15:0d: 73:11:3c:a6:08:27:16:aa:27:d8:b6:87:5b:26:0e: f0:b2:24:39:bb:8d:2c:ee:43:e1:7d:fa:37:d9:1c: bf:8c:95:e8:15:e3:b5:24:9e:1b:df:ae:c5:ee:f7: 3a:af:73:01:b8:b8:cd:49:20:52:96:68:13:ba:9c: a8:31:65:b4:6c:91:11:5d:af:3e:aa:d0:df:50:66: f5:cf:5f:7d:18:87:e3:5b:82:2b:bd:2e:a2:9b:b5: 4c:f8:08:a1:76:ec:25:41:1f:33:a7:e1:d1:8f:00: d4:e3:aa:7c:f6:06:f1:28:54:bb:1d:05:50:5d:48: 46:7f:68:9c:ed:22:f8:13:fb:b9:ae:6c:30:8c:36: b5:ec:1a:36:3f:83:ba:2d:a2:2a:4f:08:00:7b:f6: 91:71:4b:d1:15:ef:ca:e9:bd:1c:1c:f2:ee:5a:9b: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:EE:9A:96:FE:02:E7:C4:0B:36:CC:0B:16:FE:76:F6:3E:DC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv6: 2604:c840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:19:f7:87:8e:fc:7b:35:ba:66:fc:86:0e:c9:34:a3:0e: 24:df:1c:8b:26:bc:48:d0:4e:07:61:21:69:94:90:b8:24:4e: 57:4e:d7:5c:fc:f5:b9:ff:a5:12:7d:58:04:44:f7:2c:3a:90: 96:c7:35:8f:21:78:7a:3b:4f:e1:f5:e4:98:ad:6d:d7:c5:ac: a7:f6:ee:df:3b:42:bd:6a:75:bb:3f:c2:e8:06:f6:f1:78:2b: 46:68:f9:21:1d:03:a3:db:be:4e:ac:00:73:ae:82:77:be:be: e5:eb:82:06:fc:07:1d:9a:45:bf:98:8d:86:56:d2:1b:7e:3e: 7b:43:af:50:25:c9:69:ca:35:c0:74:37:7a:b7:32:d5:77:d5: 94:f0:20:8a:c2:de:ae:37:a8:f9:ae:c8:61:20:71:df:c6:18: 4a:46:54:86:7f:50:5d:7f:13:de:d2:66:52:06:12:b4:8a:b0: 95:20:07:48:4b:1f:67:4f:1e:dd:4c:12:bd:16:73:d0:42:5c: 16:bb:65:61:2f:c5:cc:71:07:72:ef:21:b6:19:8f:69:62:f7: 82:f5:3b:f0:57:3e:1e:84:db:0e:95:b1:08:de:13:6b:ac:fc: 68:36:fa:b8:88:6d:21:dc:97:9d:f4:b5:af:bb:4a:93:89:ff: d8:23:d8:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE97sv/bCXBIFxjT9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MDkxZjY2NTItYjNjMi00MTcwLWFkNWQtYmI4NmRkZjcxZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokwZgEXHT4iEPdKXQkcbpjtSeLwaZsKxV9zg WNTT7pLrgjMZeocPzzp9YXnuid9wO9XsJDVT13vQHMmNzsgE57RCxRSp+pS+uq72 C+OD16FHhzwgvaupFQ1zETymCCcWqifYtodbJg7wsiQ5u40s7kPhffo32Ry/jJXo FeO1JJ4b367F7vc6r3MBuLjNSSBSlmgTupyoMWW0bJERXa8+qtDfUGb1z199GIfj W4IrvS6im7VM+AihduwlQR8zp+HRjwDU46p89gbxKFS7HQVQXUhGf2ic7SL4E/u5 rmwwjDa17Bo2P4O6LaIqTwgAe/aRcUvRFe/K6b0cHPLuWpvs/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBBg7pqW/gLnxAs2zAsW/nb2Pty8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNDI0ZjI2YzQtODg3Yi0z ZDQ2LTgwZjEtMjVmYWQzMmY4MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPbhn3h478ezW6ZvyGDsk0ow4k3xyLJrxI0E4HYSFplJC4JE5XTtdc /PW5/6USfVgERPcsOpCWxzWPIXh6O0/h9eSYrW3Xxayn9u7fO0K9anW7P8LoBvbx eCtGaPkhHQOj275OrABzroJ3vr7l64IG/AcdmkW/mI2GVtIbfj57Q69QJclpyjXA dDd6tzLVd9WU8CCKwt6uN6j5rshhIHHfxhhKRlSGf1BdfxPe0mZSBhK0irCVIAdI Sx9nTx7dTBK9FnPQQlwWu2VhL8XMcQdy7yG2GY9pYveC9TvwVz4ehNsOlbEI3hNr rPxoNvq4iG0h3Jed9LWvu0qTif/YI9jd -----END CERTIFICATE-----Generated at Wed Oct 28 13:15:03 2026 by rpki-client