$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa File: 520c6060-826a-3f64-b994-794fc7c88795.roa (raw, json) Hash identifier: ODxq8OVjGgk6b1hE1SpiWGD5Bq4kgY/t00ej0Pgo85Q= Subject key identifier: 63:87:27:07:C7:3A:49:6A:14:AC:F6:24:25:FE:EE:99:18:B0:10:8F Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584F94D33EB625ADAF58DBFC9080 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 397378 IP address blocks: 2607:6004:a100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:3e:b6:25:ad:af:58:db:fc:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=86bb8f7e-754d-4a59-b66a-f9189c50b01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:41:ff:82:e5:1a:65:5a:ab:7b:f9:6a:da: d3:6b:a2:25:a4:6d:69:0b:15:b7:4c:57:db:76:de: 63:4e:fe:02:69:30:9e:3d:bc:f4:85:f8:0b:54:f3: 6f:16:9f:fa:60:68:2c:d9:41:f2:ee:06:c8:9d:e4: bf:18:5b:47:4e:c6:fe:04:8c:76:7f:02:0c:de:3a: d8:9b:bd:be:af:c0:cf:d9:cd:b1:9b:9a:67:2b:8b: cc:4e:e8:34:f8:21:96:93:2d:a8:01:79:02:3f:69: 96:99:91:ab:a8:c8:7b:9c:25:51:5a:04:69:b5:6d: 2f:68:41:04:f8:20:b2:60:aa:4d:82:62:b0:42:e8: 97:94:23:0b:92:06:e2:12:e4:0b:cd:c8:1c:d9:05: 4f:01:01:c4:ca:cf:92:7d:45:36:2c:da:2f:d7:e6: d9:22:da:c8:63:1f:63:7b:e9:7e:7c:08:9b:8f:81: 37:41:6d:0e:19:21:35:8c:be:e3:b6:6a:86:bb:09: bd:9a:65:bb:27:11:da:f4:10:4f:3e:ab:15:81:bb: b1:61:5c:39:17:5b:6c:af:9e:5d:63:33:78:52:3c: a3:31:54:ee:91:12:42:6b:e8:f8:88:bc:41:e6:77: 32:f2:dc:aa:f9:79:b2:5e:77:4c:91:ea:95:a6:a7: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:87:27:07:C7:3A:49:6A:14:AC:F6:24:25:FE:EE:99:18:B0:10:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6004:a100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:72:71:fc:a6:52:f0:2a:2f:a3:b6:2b:af:70:bb:14:2a:14: 44:0f:5a:26:6d:69:bf:6f:48:15:b6:2c:a9:63:54:12:01:df: aa:02:7b:31:f3:58:76:ed:b7:2a:27:c9:e7:93:82:31:d4:af: 63:e5:27:1b:65:fd:ce:7e:b2:7d:5c:cd:8c:31:0f:53:3c:2c: 4e:ea:31:55:5a:7d:9a:33:9d:e7:ca:a4:17:79:67:5e:7a:97: 58:de:a4:83:5e:a3:29:a8:dc:29:25:35:be:22:af:45:77:d3: e0:e0:2c:7f:11:2e:83:6c:f0:d2:fe:27:30:5e:44:f9:0a:37: 4f:0a:32:4f:46:8f:7c:4b:37:b2:cc:c8:ad:78:49:59:ae:8f: 2e:ab:08:8e:7e:be:6b:3e:25:a2:0b:47:55:d9:bb:29:57:49: 34:d2:a8:10:4a:37:15:48:ca:63:cd:a5:2d:0d:6c:39:f8:b9: 5c:34:e4:24:b3:cb:66:44:c1:05:f1:6f:b4:e5:66:3d:62:82: a1:95:e2:ef:66:61:f1:f7:08:06:94:9b:d6:b2:60:d1:a0:54: c2:3a:9b:7a:f3:f8:2c:f6:24:e3:c5:c1:2c:04:77:ac:b9:1f: 81:f2:83:5f:db:d2:5f:73:43:f0:57:a0:cb:75:6f:9f:a4:35: bb:9e:65:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+U0z62Ja2vWNv8kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODZiYjhmN2UtNzU0ZC00YTU5LWI2NmEtZjkxODljNTBiMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHBB/4LlGmVaq3v5atrTa6IlpG1pCxW3TFfb dt5jTv4CaTCePbz0hfgLVPNvFp/6YGgs2UHy7gbIneS/GFtHTsb+BIx2fwIM3jrY m72+r8DP2c2xm5pnK4vMTug0+CGWky2oAXkCP2mWmZGrqMh7nCVRWgRptW0vaEEE +CCyYKpNgmKwQuiXlCMLkgbiEuQLzcgc2QVPAQHEys+SfUU2LNov1+bZItrIYx9j e+l+fAibj4E3QW0OGSE1jL7jtmqGuwm9mmW7JxHa9BBPPqsVgbuxYVw5F1tsr55d YzN4UjyjMVTukRJCa+j4iLxB5ncy8tyq+XmyXndMkeqVpqehhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGOHJwfHOklqFKz2JCX+7pkYsBCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNTIwYzYwNjAtODI2YS0z ZjY0LWI5OTQtNzk0ZmM3Yzg4Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgBKEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYHJx/KZS8Covo7Yrr3C7FCoURA9aJm1pv29IFbYsqWNUEgHfqgJ7 MfNYdu23KifJ55OCMdSvY+UnG2X9zn6yfVzNjDEPUzwsTuoxVVp9mjOd58qkF3ln XnqXWN6kg16jKajcKSU1viKvRXfT4OAsfxEug2zw0v4nMF5E+Qo3TwoyT0aPfEs3 sszIrXhJWa6PLqsIjn6+az4logtHVdm7KVdJNNKoEEo3FUjKY82lLQ1sOfi5XDTk JLPLZkTBBfFvtOVmPWKCoZXi72Zh8fcIBpSb1rJg0aBUwjqbevP4LPYk48XBLAR3 rLkfgfKDX9vSX3ND8Fegy3Vvn6Q1u55lmA== -----END CERTIFICATE-----Generated at Mon Oct 26 17:10:18 2026 by rpki-client