$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa File: 3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa (raw, json) Hash identifier: jW72dj/0sUZM4Y6ivu4rkECbJX+Qc0EbAzd6kRshFrM= Subject key identifier: 41:86:B3:42:CD:5B:9C:45:01:45:66:7F:D6:17:66:D4:F5:EB:88:83 Certificate issuer: /CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Certificate serial: 010D0C9F4328584F74B8276DD3A3C1CB14159F00 Authority key identifier: 91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 20382 IP address blocks: 2604:2da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:27:6d:d3:a3:c1:cb:14:15:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=d715d8c4-96e2-47b7-a47f-8a6e1c720e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:3a:9e:63:84:17:3b:b2:66:7c:a8:95:39: 21:10:9c:8f:ff:b5:31:f2:26:6a:c1:ea:e5:f1:ae: 42:04:67:20:3d:82:ae:14:0b:db:c8:56:cd:b1:0a: 49:41:76:8b:eb:b7:e7:a1:85:af:db:a8:24:52:e5: dc:62:88:d2:cf:2a:d0:f5:b3:c0:e8:d8:c0:73:da: d9:96:4f:aa:f4:4d:cd:68:b3:af:03:23:39:89:18: 7a:c5:3c:55:5b:e8:dd:17:11:eb:84:46:de:8a:94: b3:59:83:d4:0c:b5:91:71:3b:a8:11:72:53:09:8d: 6c:58:55:19:3f:28:91:cc:63:f8:a5:76:bb:91:07: 70:46:db:dd:b4:99:78:23:30:af:2a:5f:22:6c:40: e4:8e:5b:2f:58:fe:22:96:0d:9f:7e:e5:3e:69:f4: f3:19:22:70:b4:f8:81:ef:41:2e:30:26:f0:0a:25: 41:c8:ad:ac:55:c5:16:74:c0:53:16:b0:e6:ff:fb: a8:0f:3d:62:d4:4e:c0:de:dc:32:72:08:5a:f5:bb: 28:84:2c:87:cf:69:c8:f9:0c:88:66:fe:e2:7d:e5: 2d:6f:fc:3a:a5:1e:29:e9:f1:69:4a:b8:f4:e9:b4: ad:18:83:5a:be:3a:03:b1:dd:c5:ed:b8:84:53:64: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:B3:42:CD:5B:9C:45:01:45:66:7F:D6:17:66:D4:F5:EB:88:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl X509v3 Authority Key Identifier: keyid:91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer sbgp-ipAddrBlock: critical IPv6: 2604:2da0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8e:18:a7:3f:4c:4d:31:91:3e:1a:12:00:31:bb:2f:45:eb: 0e:31:2d:2d:d1:fa:23:44:28:a0:3f:df:60:f5:e2:07:86:8f: ba:21:9c:f8:0a:3c:2b:d9:04:34:f0:ce:00:69:04:54:e3:91: 1e:d3:17:bc:57:47:b1:b1:88:78:c8:fa:b5:09:4d:be:53:c2: ac:e3:83:51:9d:6f:ef:aa:9c:e9:77:50:9d:10:21:70:68:42: bb:90:f9:95:11:9e:5c:38:2f:3c:48:91:d0:74:70:0c:47:de: dd:65:d3:e7:00:f9:69:f6:02:46:d0:e3:dd:d5:37:4e:38:7d: 76:8a:52:c1:35:66:cb:e7:75:e5:39:75:a8:db:99:e1:15:39: fe:a4:d1:b0:2b:be:ff:8b:ee:95:c6:85:30:53:e6:77:c5:e5: 67:2b:1a:ea:0b:df:4b:d3:ef:d3:1e:2c:9f:38:e2:9b:8b:b9: b9:21:4c:ff:0e:2e:f3:d6:4e:c9:0d:3f:53:e5:e0:3c:33:4d: 7d:ff:68:dd:14:ec:b8:6f:45:08:99:97:d2:ab:b7:3d:4a:9d: 4b:9c:7f:38:85:df:b1:1c:cf:12:34:fe:35:7f:50:57:b1:81: 1f:19:de:4d:d5:cd:40:5a:57:1f:65:28:ce:81:c3:b5:ef:ac: ab:ff:42:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE90uCdt06PByxQVnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1NWFkODQtZjlmMi00NjRiLWI1MGEtYTlkMjY4YzVi YjRlMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk ZDcxNWQ4YzQtOTZlMi00N2I3LWE0N2YtOGE2ZTFjNzIwZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH86nmOEFzuyZnyolTkhEJyP/7Ux8iZqwerl 8a5CBGcgPYKuFAvbyFbNsQpJQXaL67fnoYWv26gkUuXcYojSzyrQ9bPA6NjAc9rZ lk+q9E3NaLOvAyM5iRh6xTxVW+jdFxHrhEbeipSzWYPUDLWRcTuoEXJTCY1sWFUZ PyiRzGP4pXa7kQdwRtvdtJl4IzCvKl8ibEDkjlsvWP4ilg2ffuU+afTzGSJwtPiB 70EuMCbwCiVByK2sVcUWdMBTFrDm//uoDz1i1E7A3twycgha9bsohCyHz2nI+QyI Zv7ifeUtb/w6pR4p6fFpSrj06bStGINavjoDsd3F7biEU2TQgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEGGs0LNW5xFAUVmf9YXZtT164iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1 YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQyNjhjNWJiNGUvM2JmZGU5MmMtMjhmNC0z MDc0LThlNTQtYjZlYTVkN2Y3M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTI1NWFkODQtZjlmMi00NjRiLWI1 MGEtYTlkMjY4YzViYjRlLzEyNTVhZDg0LWY5ZjItNDY0Yi1iNTBhLWE5ZDI2OGM1 YmI0ZS5jcmwwHwYDVR0jBBgwFoAUkXTnzCE/SkbK1XASPRpJ3ydGTiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQy NjhjNWJiNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQtoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVjhinP0xNMZE+GhIAMbsvResOMS0t0fojRCigP99g9eIHho+6IZz4 Cjwr2QQ08M4AaQRU45Ee0xe8V0exsYh4yPq1CU2+U8Ks44NRnW/vqpzpd1CdECFw aEK7kPmVEZ5cOC88SJHQdHAMR97dZdPnAPlp9gJG0OPd1TdOOH12ilLBNWbL53Xl OXWo25nhFTn+pNGwK77/i+6VxoUwU+Z3xeVnKxrqC99L0+/THiyfOOKbi7m5IUz/ Di7z1k7JDT9T5eA8M019/2jdFOy4b0UImZfSq7c9Sp1LnH84hd+xHM8SNP41f1BX sYEfGd5N1c1AWlcfZSjOgcO176yr/0K/ -----END CERTIFICATE-----Generated at Sun Oct 11 22:32:46 2026 by rpki-client