$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json) Hash identifier: +0/lVrWEQzOE7tBCljdS18juzCaFWeNCXrl9/2iogKg= Subject key identifier: 9F:86:9E:23:AA:09:F2:36:F6:69:7C:B7:52:1F:93:8C:AD:54:A4:D9 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584F89A8773D6B87C7298CC4B950 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 32181 IP address blocks: 2001:1850::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:77:3d:6b:87:c7:29:8c:c4:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=2ba1464c-aa17-43ed-9840-c6a04a990a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:34:f3:62:8a:a5:a0:bb:bb:68:d3:1c:47: a2:91:89:9c:2a:1e:2f:53:d8:47:40:39:10:f6:35: 90:97:64:f3:a3:68:ba:4c:6e:81:e5:1e:82:7f:45: 60:79:cf:75:11:a5:57:22:1f:2e:88:57:1b:0d:4c: 56:3d:c4:c8:9e:e0:cd:f9:88:cc:53:47:b2:01:f4: 3a:4f:8e:a9:58:c9:58:07:af:5f:67:6d:50:cb:e3: 94:c3:da:bb:ba:d7:5b:c3:b2:77:52:c8:a1:3e:59: 78:be:4d:9f:74:c1:d1:f8:81:2d:a7:3f:61:e0:be: 34:f4:4d:a9:66:c5:a2:66:96:8e:a6:47:75:e9:39: 6f:8e:1b:fd:8f:e7:f9:32:d7:e6:93:de:19:bc:23: 6c:32:dc:4a:ae:c4:21:9a:61:3b:a1:56:0d:80:30: 9f:2a:c9:8b:b7:7a:15:7c:66:5c:75:e6:e6:f7:35: 6b:10:ca:16:9d:e8:00:85:64:18:e4:73:81:d9:29: ce:58:85:89:f0:f9:12:ee:b6:64:3d:26:fe:e5:b3: 34:db:42:18:92:8a:8b:0d:41:2d:c5:26:11:bb:41: 62:11:f0:a5:01:9d:1b:47:b7:3c:09:eb:0c:b5:c9: d3:9a:ef:18:3f:33:d4:92:6c:bc:01:16:d0:46:6d: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:9E:23:AA:09:F2:36:F6:69:7C:B7:52:1F:93:8C:AD:54:A4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv6: 2001:1850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5b:fe:55:cb:46:25:91:ac:fb:35:5c:2f:ce:34:27:59:49: 32:c9:bc:a2:85:66:83:aa:39:68:7b:cd:bc:b0:92:67:3c:f7: a0:01:4d:ec:f3:8a:4e:13:c9:3a:fe:eb:9f:47:ea:bb:cc:88: f7:f4:13:a9:0a:93:93:93:fc:57:fa:63:f6:25:cc:89:8a:f2: c1:39:f7:67:71:71:85:86:a4:dc:17:ef:95:6e:33:4a:4a:e5: 4d:84:05:c8:56:58:26:f7:f2:e2:59:d1:42:ec:01:be:57:f0: 4c:88:37:41:50:92:94:d4:ab:61:2f:4d:d4:65:11:dc:4c:af: 63:94:00:90:c9:de:9b:aa:39:9c:c0:00:7c:bd:fb:80:d6:3a: 12:10:3d:bf:11:8d:fe:c7:22:e9:5a:94:6e:ff:ff:c8:e6:77: e0:83:20:47:7a:b3:c0:97:c1:78:6d:70:4b:a3:b8:3f:36:65: e1:12:06:88:e1:d6:7e:f6:17:7e:63:ac:38:23:2b:ee:43:7c: 75:a9:a7:4b:04:e0:c1:b5:04:79:04:3c:cf:e6:00:a5:7c:bc: a4:01:91:1a:b2:5d:5e:5e:1d:ac:60:96:fd:f0:68:5a:9f:ac: 55:cf:1f:9b:e3:8b:ce:82:58:65:9e:2d:7b:cd:4a:00:b7:0c: d9:7c:94:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+JqHc9a4fHKYzEuVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MmJhMTQ2NGMtYWExNy00M2VkLTk4NDAtYzZhMDRhOTkwYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOM082KKpaC7u2jTHEeikYmcKh4vU9hHQDkQ 9jWQl2Tzo2i6TG6B5R6Cf0Vgec91EaVXIh8uiFcbDUxWPcTInuDN+YjMU0eyAfQ6 T46pWMlYB69fZ21Qy+OUw9q7utdbw7J3UsihPll4vk2fdMHR+IEtpz9h4L409E2p ZsWiZpaOpkd16Tlvjhv9j+f5Mtfmk94ZvCNsMtxKrsQhmmE7oVYNgDCfKsmLt3oV fGZcdebm9zVrEMoWnegAhWQY5HOB2SnOWIWJ8PkS7rZkPSb+5bM020IYkoqLDUEt xSYRu0FiEfClAZ0bR7c8CesMtcnTmu8YPzPUkmy8ARbQRm3J5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+GniOqCfI29ml8t1Ifk4ytVKTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTNkN2VhNjgtMzUxZS0z OGMzLTkzN2UtOGYyZTQ4ZTcwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuW/5Vy0Ylkaz7NVwvzjQnWUkyybyihWaDqjloe828sJJnPPegAU3s 84pOE8k6/uufR+q7zIj39BOpCpOTk/xX+mP2JcyJivLBOfdncXGFhqTcF++VbjNK SuVNhAXIVlgm9/LiWdFC7AG+V/BMiDdBUJKU1KthL03UZRHcTK9jlACQyd6bqjmc wAB8vfuA1joSED2/EY3+xyLpWpRu///I5nfggyBHerPAl8F4bXBLo7g/NmXhEgaI 4dZ+9hd+Y6w4IyvuQ3x1qadLBODBtQR5BDzP5gClfLykAZEasl1eXh2sYJb98Gha n6xVzx+b44vOglhlni17zUoAtwzZfJSk -----END CERTIFICATE-----Generated at Tue Oct 27 20:29:57 2026 by rpki-client