$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/08afe929-aca3-35be-9c6b-009ef229184c.roa File: 08afe929-aca3-35be-9c6b-009ef229184c.roa (raw, json) Hash identifier: 8KYelZ3ObKyC+scEWzNUPYQv1a4DDFd52hVYV9mttQc= Subject key identifier: 95:EA:28:BD:89:36:AE:E7:C4:C7:CB:85:BC:19:A2:00:12:F0:B1:6F Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Certificate serial: 010D0C9F4328584FA2C87CAFA6CEBF2E27861E80 Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/08afe929-aca3-35be-9c6b-009ef229184c.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 29757 IP address blocks: 2604:d680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7c:af:a6:ce:bf:2e:27:86:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=57a377b4-2b93-43f1-8afa-e46d3a7654a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:7d:b9:04:4f:6e:6a:f6:9a:db:9b:4b:00: 06:bc:28:db:60:14:e0:89:79:fd:5e:3e:a7:7b:3c: d8:0d:b6:f4:46:24:d8:60:d0:8b:91:88:7f:a0:4e: 03:56:32:71:92:7e:e5:80:52:a7:c5:b1:37:06:ff: ca:a7:b2:de:f5:04:73:46:f9:41:c3:9f:dd:03:8f: 23:04:5e:09:35:32:24:b3:81:69:c9:4f:c6:6d:67: 9e:01:68:5a:7f:fe:e7:9f:34:8b:f7:15:59:7a:0d: bc:97:09:08:3a:ea:1d:d2:4c:81:2f:0d:cd:04:81: 47:22:72:5b:ca:0b:b2:ec:eb:98:56:06:2c:39:e7: fe:7f:bd:b0:eb:ed:0a:c7:95:0f:5f:0b:ca:9f:a1: ca:0f:19:c6:5c:22:d2:3d:f7:94:c2:e8:e1:75:52: 3a:98:db:18:ea:f7:13:27:d3:6e:ed:92:bd:c3:2c: a3:68:39:f5:d6:0d:99:77:51:eb:7d:88:f6:cc:3d: 9c:d0:f9:8b:9a:ec:60:6f:99:93:7b:d3:cb:0d:57: 75:99:12:a7:42:7b:04:19:fb:40:e4:73:9f:f3:3b: f7:46:ef:1f:4e:a0:7d:79:18:c1:7b:22:b8:53:33: 88:49:b3:fd:d3:83:75:46:6d:c9:05:e8:64:f0:a9: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:28:BD:89:36:AE:E7:C4:C7:CB:85:BC:19:A2:00:12:F0:B1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/08afe929-aca3-35be-9c6b-009ef229184c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl X509v3 Authority Key Identifier: keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer sbgp-ipAddrBlock: critical IPv6: 2604:d680::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:97:b6:ec:85:cf:04:bb:29:97:6b:32:1c:4d:ef:68:ec:4d: be:ee:e4:83:75:70:b2:40:70:21:64:b0:1f:0d:06:f0:57:72: 44:27:19:8f:c2:15:20:de:0e:82:05:22:d8:f0:fe:66:af:d1: f1:7c:73:1f:e9:72:9d:40:7b:1b:39:b8:41:0d:75:cd:55:46: 23:18:6a:29:d6:25:5e:7a:b9:19:a8:7f:7d:45:c8:7e:8e:55: 95:e5:45:ca:3f:e4:ab:91:e5:0b:47:09:7e:d3:0a:ea:0a:44: c2:fb:ec:78:2e:0c:83:04:cf:41:1c:80:db:6b:11:5d:91:0f: 17:16:23:25:66:d7:f3:29:83:b1:f9:74:63:fa:06:23:34:15: 7f:1c:f9:2e:fe:db:17:84:93:cc:a4:6a:ae:3c:bf:eb:53:d8: 94:95:f2:85:05:fc:d8:cd:d8:d6:9a:3a:b9:30:cf:b3:eb:0f: 75:9a:70:f3:e0:97:41:f7:47:8c:be:2a:0e:b2:04:d2:d1:8f: f2:db:6b:17:41:44:15:60:d6:c3:cd:52:53:dc:f8:23:1c:19: 37:b5:ef:92:52:8d:5b:6a:b4:61:35:8d:6b:ba:36:81:d2:fe: 85:dd:e7:93:17:24:66:69:71:78:2c:5b:1e:ff:04:db:6a:4c: fd:4d:a5:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+iyHyvps6/LieGHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBkZWZjOTktNzNmMS00Y2NmLTkzZmYtYWMwOGI3MzAx YTE4MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk NTdhMzc3YjQtMmI5My00M2YxLThhZmEtZTQ2ZDNhNzY1NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ19uQRPbmr2mtubSwAGvCjbYBTgiXn9Xj6n ezzYDbb0RiTYYNCLkYh/oE4DVjJxkn7lgFKnxbE3Bv/Kp7Le9QRzRvlBw5/dA48j BF4JNTIks4FpyU/GbWeeAWhaf/7nnzSL9xVZeg28lwkIOuod0kyBLw3NBIFHInJb yguy7OuYVgYsOef+f72w6+0Kx5UPXwvKn6HKDxnGXCLSPfeUwujhdVI6mNsY6vcT J9Nu7ZK9wyyjaDn11g2Zd1HrfYj2zD2c0PmLmuxgb5mTe9PLDVd1mRKnQnsEGftA 5HOf8zv3Ru8fTqB9eRjBeyK4UzOISbP904N1Rm3JBehk8KlqxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXqKL2JNq7nxMfLhbwZogAS8LFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRl ZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4YjczMDFhMTgvMDhhZmU5MjktYWNhMy0z NWJlLTljNmItMDA5ZWYyMjkxODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBkZWZjOTktNzNmMS00Y2NmLTkz ZmYtYWMwOGI3MzAxYTE4LzIwZGVmYzk5LTczZjEtNGNjZi05M2ZmLWFjMDhiNzMw MWExOC5jcmwwHwYDVR0jBBgwFoAUGVL0PL3a0EHYb5rqmuhcTFVNeGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRlZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4 YjczMDFhMTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTWgAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqXtuyFzwS7KZdrMhxN72jsTb7u5IN1cLJAcCFksB8NBvBXckQn GY/CFSDeDoIFItjw/mav0fF8cx/pcp1Aexs5uEENdc1VRiMYainWJV56uRmof31F yH6OVZXlRco/5KuR5QtHCX7TCuoKRML77HguDIMEz0EcgNtrEV2RDxcWIyVm1/Mp g7H5dGP6BiM0FX8c+S7+2xeEk8ykaq48v+tT2JSV8oUF/NjN2NaaOrkwz7PrD3Wa cPPgl0H3R4y+Kg6yBNLRj/LbaxdBRBVg1sPNUlPc+CMcGTe175JSjVtqtGE1jWu6 NoHS/oXd55MXJGZpcXgsWx7/BNtqTP1Npec= -----END CERTIFICATE-----Generated at Tue Nov 3 12:07:36 2026 by rpki-client