$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa File: f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json) Hash identifier: mZ2je/en5bi0Q4L+yFq2zo0ec09BIarvLSeYSNgMlH8= Subject key identifier: E3:F3:72:34:F1:D5:C2:17:23:BF:A8:F0:E5:D1:C7:1D:D4:C1:1C:E0 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584F9BCDD77BCEF278A94C373220 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 46455 IP address blocks: 2604:c880::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d7:7b:ce:f2:78:a9:4c:37:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=8bf34b5e-f9c6-43c1-bab2-d5e6e8dada23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:e0:4f:69:e0:44:fe:00:72:eb:0a:ee:ca: 31:98:e9:af:39:51:32:2d:42:97:73:50:dd:2e:91: c9:36:d7:de:48:46:01:95:9a:f4:55:0f:91:a4:ad: 50:30:9e:15:cb:9b:da:46:66:5d:04:63:dc:56:59: 0d:f4:9a:f7:d3:28:98:4e:cb:85:37:4b:12:30:3a: 56:c8:af:7a:84:9c:a0:a1:76:8d:f7:68:d6:2e:9f: b4:14:c4:8c:64:a5:2e:e3:d0:5e:23:af:b5:4b:1c: 53:dd:3b:ad:79:6c:8c:a6:4f:27:2e:6a:4e:98:fa: 85:c4:34:60:7a:bf:cc:32:bd:97:a3:03:d4:fe:7d: af:a4:51:e3:4e:98:43:a6:71:46:98:9e:63:ea:19: 99:c7:39:c3:bc:5f:d7:17:a0:27:2c:7a:a4:af:54: c0:31:1c:a0:9c:22:b4:8d:58:83:41:f0:1d:e4:0e: 3e:1f:79:bb:17:44:94:e2:27:1d:21:b5:6c:24:8b: e8:0f:c9:29:c1:6b:3c:74:48:b1:df:95:15:2c:cd: f3:6f:35:16:3c:b2:c1:9d:d2:fe:96:2f:02:2c:35: 79:2e:36:c6:2a:ba:c9:6b:4a:73:3b:e9:28:6d:31: 4c:a9:6a:09:f5:4b:c0:a3:14:1c:15:10:76:2c:7b: 8a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F3:72:34:F1:D5:C2:17:23:BF:A8:F0:E5:D1:C7:1D:D4:C1:1C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv6: 2604:c880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:24:46:cf:ee:60:c4:8e:74:39:79:b8:24:0c:1a:2c:71: a8:6a:df:81:79:71:f1:c7:24:09:f6:b3:89:e0:bc:78:da:51: 8b:57:cf:6f:da:aa:16:72:64:75:98:52:6e:44:cd:16:3f:1d: 48:5c:83:9c:2a:e4:1a:43:9a:21:e7:18:e9:13:da:ff:1e:08: 78:41:dd:43:e5:0e:72:17:78:a3:0f:c9:b8:31:74:a4:96:cf: 25:58:0e:68:96:4b:a3:ce:87:29:af:39:88:60:40:f2:fd:9b: 0d:94:68:57:35:a0:ff:c6:6e:46:1d:fa:d6:da:be:fb:f8:d5: 3c:cb:b7:fd:e0:6a:73:09:b0:c5:bf:5b:c6:44:9a:17:67:fa: e7:83:12:c2:ba:97:63:22:11:3b:56:8a:4d:cd:1a:ca:58:2e: c0:33:bc:cc:4b:e8:3f:1e:d5:73:e3:94:2b:64:96:a4:cb:0d: ac:28:bb:51:02:02:7a:0e:da:a1:f4:6e:43:68:5e:61:24:81: e1:0b:9d:df:37:b2:80:4a:a7:23:73:49:7b:23:61:b4:22:11: 35:9c:6d:71:00:50:40:d9:50:73:2b:ff:49:56:90:e4:1b:7f: 24:97:bc:6d:31:d0:58:01:98:c3:ef:b6:7b:ce:3f:c6:aa:a0: c0:9e:21:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+bzdd7zvJ4qUw3MiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OGJmMzRiNWUtZjljNi00M2MxLWJhYjItZDVlNmU4ZGFkYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xzgT2ngRP4AcusK7soxmOmvOVEyLUKXc1Dd LpHJNtfeSEYBlZr0VQ+RpK1QMJ4Vy5vaRmZdBGPcVlkN9Jr30yiYTsuFN0sSMDpW yK96hJygoXaN92jWLp+0FMSMZKUu49BeI6+1SxxT3TuteWyMpk8nLmpOmPqFxDRg er/MMr2XowPU/n2vpFHjTphDpnFGmJ5j6hmZxznDvF/XF6AnLHqkr1TAMRygnCK0 jViDQfAd5A4+H3m7F0SU4icdIbVsJIvoD8kpwWs8dEix35UVLM3zbzUWPLLBndL+ li8CLDV5LjbGKrrJa0pzO+kobTFMqWoJ9UvAoxQcFRB2LHuK2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOPzcjTx1cIXI7+o8OXRxx3UwRzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZjVhZDI4Y2UtOWFlNS0z ZWI1LWFlMTItZDBhNzFmOGFjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBB3SRGz+5gxI50OXm4JAwaLHGoat+BeXHxxyQJ9rOJ4Lx42lGLV89v 2qoWcmR1mFJuRM0WPx1IXIOcKuQaQ5oh5xjpE9r/Hgh4Qd1D5Q5yF3ijD8m4MXSk ls8lWA5olkujzocprzmIYEDy/ZsNlGhXNaD/xm5GHfrW2r77+NU8y7f94GpzCbDF v1vGRJoXZ/rngxLCupdjIhE7VopNzRrKWC7AM7zMS+g/HtVz45QrZJakyw2sKLtR AgJ6Dtqh9G5DaF5hJIHhC53fN7KASqcjc0l7I2G0IhE1nG1xAFBA2VBzK/9JVpDk G38kl7xtMdBYAZjD77Z7zj/GqqDAniFa -----END CERTIFICATE-----Generated at Sat Oct 31 05:42:26 2026 by rpki-client