$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa File: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json) Hash identifier: I58svoAm2S2Q4yoJvu73nvt5ZjEy91HtYes4D/FVzAA= Subject key identifier: 98:E6:65:EF:F8:45:3F:99:58:6F:54:54:B4:FA:53:63:6C:3A:27:A2 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584F655D6E1D8999AE75908B3D80 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 22191 IP address blocks: 2604:1dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6e:1d:89:99:ae:75:90:8b:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=59ca2157-1a36-433a-82b9-78b2b57e898f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:89:91:32:8d:83:51:38:d7:b9:19:96:1c:d1: da:ca:6c:71:ce:f7:8b:67:13:a5:f9:15:5f:af:c8: b7:9b:c8:73:f7:b8:c8:48:a4:1a:69:3e:94:b3:d7: 66:5d:d5:7a:f6:4e:dd:38:bb:6c:48:07:73:ab:19: 9d:7e:c8:a0:83:60:2d:2a:21:29:1f:c6:1f:2e:94: 79:d2:a5:7f:f4:1e:98:5e:7a:b8:15:73:46:f6:a9: 50:72:21:d1:3c:58:cb:ce:14:c6:d8:85:fe:8c:f4: 8f:99:98:74:16:ea:5b:68:f5:23:9a:38:79:a1:d3: 7b:a7:47:fe:d0:61:d8:8d:2d:8a:85:33:bb:4f:9d: e4:44:92:8f:72:66:a2:a0:82:ce:9a:8f:87:8b:1d: f7:bd:ab:bf:a3:6e:5e:66:6f:dc:ca:b7:9c:24:bf: b6:1c:e6:29:ab:e8:89:75:ad:fa:3c:4c:8b:e3:75: 3b:f6:1a:25:5a:50:60:ee:56:5c:72:b9:b3:25:c5: c3:aa:63:0b:b0:46:8e:10:38:79:ae:4e:6d:ed:a0: 95:3f:27:3e:82:95:47:bc:7a:86:98:b0:16:7a:d1: b0:86:39:d3:2b:63:7a:75:48:73:b2:a9:da:07:f3: c6:78:73:42:a3:42:f1:b8:17:c3:3c:c1:e7:a1:24: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:65:EF:F8:45:3F:99:58:6F:54:54:B4:FA:53:63:6C:3A:27:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv6: 2604:1dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ec:99:54:61:28:c6:ca:0d:e2:80:df:69:3f:ed:66:8a:a9: da:7c:47:84:94:e4:bd:55:83:25:24:dd:33:1e:3a:ed:b6:77: cc:6a:4e:d8:15:2c:cf:7b:92:ab:c6:0c:f9:a7:c3:d4:2e:39: 57:12:73:ac:c6:7a:a8:fb:68:27:63:74:16:5e:97:ce:17:68: 68:70:df:cc:59:9d:1d:73:97:b9:eb:12:e8:86:9b:74:83:c9: f2:8d:d8:0c:e3:e3:0b:32:f0:1f:b1:50:af:0f:b1:b4:41:5a: b1:30:30:33:d1:f0:f4:6f:a5:ea:85:94:9b:c4:77:36:3f:37: eb:04:5d:ac:07:45:49:a7:78:bb:6a:0b:2e:8f:13:6b:a1:a2: 7a:c1:1c:33:8d:da:b2:5b:88:87:8d:38:ab:e3:46:76:c7:95: 66:d8:ec:c4:75:98:96:e8:91:38:23:3e:c5:8d:ae:50:e6:66: 28:79:46:c2:bc:25:06:69:49:d9:9a:2c:9b:73:d5:5b:77:79: 99:fa:26:16:00:83:19:3b:c8:70:0b:83:17:05:26:4d:ec:7d: 40:30:6b:a0:e8:b3:74:22:fa:0b:64:8c:d2:6d:f4:92:1e:ad: d4:e6:f4:1e:0a:b7:d9:14:a2:8e:61:54:4d:2f:c0:45:b8:75: 13:24:ef:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9lXW4diZmudZCLPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NTljYTIxNTctMWEzNi00MzNhLTgyYjktNzhiMmI1N2U4OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhImRMo2DUTjXuRmWHNHaymxxzveLZxOl+RVf r8i3m8hz97jISKQaaT6Us9dmXdV69k7dOLtsSAdzqxmdfsigg2AtKiEpH8YfLpR5 0qV/9B6YXnq4FXNG9qlQciHRPFjLzhTG2IX+jPSPmZh0FupbaPUjmjh5odN7p0f+ 0GHYjS2KhTO7T53kRJKPcmaioILOmo+Hix33vau/o25eZm/cyrecJL+2HOYpq+iJ da36PEyL43U79holWlBg7lZccrmzJcXDqmMLsEaOEDh5rk5t7aCVPyc+gpVHvHqG mLAWetGwhjnTK2N6dUhzsqnaB/PGeHNCo0LxuBfDPMHnoSRPgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJjmZe/4RT+ZWG9UVLT6U2NsOieiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvZThmNDUxMGMtNWRlNi0z ZjFlLThlNmMtOGE0Zjg5MGEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQdwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBV7JlUYSjGyg3igN9pP+1miqnafEeElOS9VYMlJN0zHjrttnfMak7Y FSzPe5Krxgz5p8PULjlXEnOsxnqo+2gnY3QWXpfOF2hocN/MWZ0dc5e56xLohpt0 g8nyjdgM4+MLMvAfsVCvD7G0QVqxMDAz0fD0b6XqhZSbxHc2PzfrBF2sB0VJp3i7 agsujxNroaJ6wRwzjdqyW4iHjTir40Z2x5Vm2OzEdZiW6JE4Iz7Fja5Q5mYoeUbC vCUGaUnZmiybc9Vbd3mZ+iYWAIMZO8hwC4MXBSZN7H1AMGug6LN0IvoLZIzSbfSS Hq3U5vQeCrfZFKKOYVRNL8BFuHUTJO+/ -----END CERTIFICATE-----Generated at Fri Oct 9 20:17:37 2026 by rpki-client