$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa File: d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json) Hash identifier: +wdF3O1cdk3LrnoUiiU3Lqi9AJPa0Q5+y2h9t0t4oA8= Subject key identifier: BC:75:B2:EA:23:C5:D3:C5:CA:39:32:DD:89:37:82:14:43:BB:5C:8D Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F4328584F861C30F664D8A2FE568786C0 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa Signing time: Fri 16 Oct 2026 18:30:34 +0000 ROA not before: Fri 16 Oct 2026 18:30:34 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14807 IP address blocks: 2607:b7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:1c:30:f6:64:d8:a2:fe:56:87:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Oct 16 18:30:34 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74ea53dd-a9c7-4b86-8a6d-dba234c06c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:db:0f:77:92:df:b2:7c:8c:77:14:8d:11: aa:b9:bd:6d:ea:35:2b:e5:ec:d7:54:e4:06:9c:32: 5b:4a:74:42:3a:23:09:38:e5:31:34:dc:81:2f:1d: 32:c4:fc:0b:57:83:93:e3:5c:58:54:b0:27:c3:1b: 11:93:1c:5c:1f:a7:9d:b7:0b:5d:53:99:97:08:a7: c8:22:ec:a1:67:0b:a0:a4:72:3d:8c:25:f9:c3:50: 07:97:8f:2c:0a:78:4d:90:b0:f8:53:20:25:bb:0f: 28:74:4a:03:3b:94:ba:fc:93:bc:32:f8:38:5d:8d: 8a:a7:bc:7f:42:a7:2e:96:87:c3:72:43:e6:1c:2f: b2:3a:1a:40:d8:2d:72:65:cc:b2:f0:0e:ad:ae:10: dc:d9:83:e0:f6:d0:76:42:95:5e:25:28:45:d8:18: 22:dc:3f:d1:28:76:ba:75:ae:43:23:46:b8:1d:6c: bc:cb:7b:ea:78:7c:38:b6:a8:2c:60:15:4f:ad:92: bd:2b:15:ae:1c:79:d7:ba:02:0f:62:00:8b:93:2e: 59:76:74:03:4c:4e:9e:9f:48:6d:ae:73:d1:e6:1e: c9:7f:9c:4a:31:03:9b:94:bf:2e:97:33:40:52:5a: b2:24:c7:cf:50:e8:6f:c0:ca:d6:10:f7:19:53:19: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:B2:EA:23:C5:D3:C5:CA:39:32:DD:89:37:82:14:43:BB:5C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv6: 2607:b7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1c:fa:7b:89:d5:a7:ac:3c:a0:cc:65:bd:94:18:23:c5:01: 98:f8:5d:52:2f:9b:4b:ca:fd:1d:4b:ba:8e:a1:93:19:f3:08: 19:63:cb:ae:a1:9d:88:27:e9:fe:f2:a0:04:46:66:83:57:4c: 14:8c:1a:1f:0a:21:d1:f3:1c:ba:d1:63:33:1f:f6:18:c2:da: 75:38:79:4c:b5:4a:74:36:db:02:05:5e:e8:87:38:98:e5:2c: bd:37:92:59:02:90:e9:4a:0b:88:a4:5a:3f:f6:03:61:38:e5: 0e:cb:0e:9d:46:69:eb:30:8c:e5:95:06:90:22:ef:7a:62:d1: 2a:b1:0d:94:d1:5b:59:61:bb:ae:f5:f7:fc:ec:ef:56:fc:13: 8a:e0:63:98:09:35:2a:36:74:2a:bb:d2:04:e5:67:8c:3e:19: 36:d9:40:71:92:55:78:c4:d3:7c:68:13:e5:42:9e:84:8b:55: 4e:05:31:81:cc:25:c9:d3:be:68:50:53:58:b3:1d:ae:74:c9: 26:21:18:ab:f0:9d:43:34:6c:47:99:ab:a7:78:9c:84:24:64: ef:33:f1:a0:0c:c3:42:2e:af:88:34:68:dc:6c:a1:ac:d0:0d: b0:d9:eb:12:73:43:13:db:f7:57:08:33:b5:2b:d5:6f:e0:ea: 86:a0:7c:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+GHDD2ZNii/laHhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI2MTAxNjE4MzAzNFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzRlYTUzZGQtYTljNy00Yjg2LThhNmQtZGJhMjM0YzA2YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UvbD3eS37J8jHcUjRGqub1t6jUr5ezXVOQG nDJbSnRCOiMJOOUxNNyBLx0yxPwLV4OT41xYVLAnwxsRkxxcH6edtwtdU5mXCKfI IuyhZwugpHI9jCX5w1AHl48sCnhNkLD4UyAluw8odEoDO5S6/JO8Mvg4XY2Kp7x/ QqculofDckPmHC+yOhpA2C1yZcyy8A6trhDc2YPg9tB2QpVeJShF2Bgi3D/RKHa6 da5DI0a4HWy8y3vqeHw4tqgsYBVPrZK9KxWuHHnXugIPYgCLky5ZdnQDTE6en0ht rnPR5h7Jf5xKMQOblL8ulzNAUlqyJMfPUOhvwMrWEPcZUxnOCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLx1suojxdPFyjky3Yk3ghRDu1yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvZDg4ZjE5ZGYtNzdmNS0z ZGM1LWE0OGEtOWIxNGM1YzllNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTHPp7idWnrDygzGW9lBgjxQGY+F1SL5tLyv0dS7qOoZMZ8wgZY8uu oZ2IJ+n+8qAERmaDV0wUjBofCiHR8xy60WMzH/YYwtp1OHlMtUp0NtsCBV7ohziY 5Sy9N5JZApDpSguIpFo/9gNhOOUOyw6dRmnrMIzllQaQIu96YtEqsQ2U0VtZYbuu 9ff87O9W/BOK4GOYCTUqNnQqu9IE5WeMPhk22UBxklV4xNN8aBPlQp6Ei1VOBTGB zCXJ075oUFNYsx2udMkmIRir8J1DNGxHmauneJyEJGTvM/GgDMNCLq+INGjcbKGs 0A2w2esSc0MT2/dXCDO1K9Vv4OqGoHy8 -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:58 2026 by rpki-client