$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa File: ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json) Hash identifier: VAjEbHMWwmnmjYWlZrGQ0miW3WOeh4pmRxnltZ2XKAU= Subject key identifier: 80:29:63:70:1D:78:36:2B:3D:A0:1C:37:96:B7:63:B7:63:D6:79:F7 Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F4328584FB3A6944C1E0F0778E49A1B00 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 397041 IP address blocks: 2604:f740:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:94:4c:1e:0f:07:78:e4:9a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=d49bc8a8-fcc4-4e66-8c3d-efc45e84a8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:7c:29:c6:d1:04:78:ac:2c:ed:34:b1:8d: 5e:e1:51:fb:ae:a7:b2:88:28:e1:04:2e:fc:d1:65: 0c:17:6f:07:2f:48:c4:3b:eb:b1:54:c5:e0:4c:7f: b7:6a:8d:ef:79:1c:af:0c:de:cb:74:71:28:1b:cd: c2:f1:8f:be:5f:3d:43:76:a3:9d:f0:7a:bb:e3:88: 1a:aa:f2:d6:01:4a:15:4c:c7:ad:e7:ed:7f:1c:19: 01:0b:43:7f:c5:4a:79:a1:d0:6e:ef:f6:70:2e:96: 7f:30:63:55:33:91:66:80:e9:9f:d2:3a:cd:d1:06: 5e:62:a2:38:91:7a:b1:c5:a8:c1:ff:35:fb:2a:90: b3:a4:03:3a:fe:90:08:07:14:51:7a:f0:c0:2b:03: 1d:e3:c7:9e:ff:49:b6:fa:2d:c2:ec:c9:00:e1:68: 7c:60:b1:1a:0a:13:0b:33:9e:ad:be:54:4f:37:0f: 85:3c:19:c7:e3:ec:6c:21:4b:c3:2b:e2:71:c8:22: c1:0a:f7:d7:6a:42:a5:43:1d:d7:64:16:5d:4e:4c: 05:3b:3f:c3:88:14:d4:f7:e0:a6:f3:85:b1:cd:17: 32:f0:da:22:fe:c5:aa:ee:4d:14:96:f6:a4:3d:24: d5:9e:cb:40:e3:57:83:87:7a:6e:4f:9c:4f:12:d9: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:29:63:70:1D:78:36:2B:3D:A0:1C:37:96:B7:63:B7:63:D6:79:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv6: 2604:f740:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:f8:a7:af:c0:3b:92:e4:9a:12:e9:31:98:5c:41:1a:10: 05:ec:84:ac:d5:74:90:f4:ff:69:55:d7:8d:c4:39:c3:4f:e1: 7b:48:b9:c2:a6:6a:ba:5f:64:e7:47:40:af:6b:a0:d9:eb:cf: 6c:e4:53:e1:9c:4e:10:ff:2f:0f:b1:f0:a9:0e:89:c4:c9:b0: ed:6a:78:97:79:92:23:4a:f4:e3:41:ac:9c:33:97:56:67:99: 80:24:93:c6:3a:17:e7:47:6f:26:64:2f:ad:74:aa:12:b2:09: 6e:d0:e4:8a:ca:64:2d:b9:74:8e:01:0a:02:a5:11:c1:0d:fb: 34:26:ce:f2:03:df:79:bf:ba:54:82:26:d2:ac:f9:ae:5b:c4: ae:26:87:3b:63:54:3d:e8:67:1b:a5:b8:de:e9:6c:44:1c:31: 6d:13:76:26:0d:9f:41:4a:9c:13:5d:e2:db:38:19:6f:74:b3: f6:11:fb:4f:5e:58:a6:38:e8:c3:73:51:0a:35:c4:24:42:16: 55:00:f8:78:f4:63:ec:e1:09:b8:ed:fb:a1:13:cd:57:82:db: aa:96:98:60:47:10:5a:67:cc:39:6f:4b:86:a7:e6:4a:8b:64: 38:85:99:d5:28:28:e6:9d:4e:da:59:4e:b0:8f:2f:3a:6a:c7: 1e:63:91:cb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+zppRMHg8HeOSaGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDQ5YmM4YTgtZmNjNC00ZTY2LThjM2QtZWZjNDVlODRhOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuZ8KcbRBHisLO00sY1e4VH7rqeyiCjhBC78 0WUMF28HL0jEO+uxVMXgTH+3ao3veRyvDN7LdHEoG83C8Y++Xz1DdqOd8Hq744ga qvLWAUoVTMet5+1/HBkBC0N/xUp5odBu7/ZwLpZ/MGNVM5FmgOmf0jrN0QZeYqI4 kXqxxajB/zX7KpCzpAM6/pAIBxRRevDAKwMd48ee/0m2+i3C7MkA4Wh8YLEaChML M56tvlRPNw+FPBnH4+xsIUvDK+JxyCLBCvfXakKlQx3XZBZdTkwFOz/DiBTU9+Cm 84WxzRcy8Noi/sWq7k0UlvakPSTVnstA41eDh3puT5xPEtlpKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIApY3AdeDYrPaAcN5a3Y7dj1nn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvYWUyYzViMGYtMzNmYi0z ZmZlLWI3YWQtYzQ4Mzg1NmQ0MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT3QAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOpX4p6/AO5LkmhLpMZhcQRoQBeyErNV0kPT/aVXXjcQ5w0/he0i5 wqZqul9k50dAr2ug2evPbORT4ZxOEP8vD7HwqQ6JxMmw7Wp4l3mSI0r040GsnDOX VmeZgCSTxjoX50dvJmQvrXSqErIJbtDkispkLbl0jgEKAqURwQ37NCbO8gPfeb+6 VIIm0qz5rlvEriaHO2NUPehnG6W43ulsRBwxbRN2Jg2fQUqcE13i2zgZb3Sz9hH7 T15Ypjjow3NRCjXEJEIWVQD4ePRj7OEJuO37oRPNV4LbqpaYYEcQWmfMOW9Lhqfm SotkOIWZ1Sgo5p1O2llOsI8vOmrHHmORyw== -----END CERTIFICATE-----Generated at Mon Nov 2 11:50:59 2026 by rpki-client