$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: Pj4fA8P8sF7aVAVZFy0dL/NJ4/+CnufKx29rog4VS88= Subject key identifier: 9A:31:D9:C6:01:0D:FA:CA:95:87:A1:32:99:28:49:C2:83:EF:E5:FD Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F4328584F5E62C3DC46695DDA07FF4480 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c3:dc:46:69:5d:da:07:ff:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=76eec1ec-4b02-477a-98d4-a4cde53eca34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:77:74:56:2e:33:10:97:ee:b9:ec:5d:a7: 68:92:39:04:69:1e:2c:3d:1c:98:a9:cd:8d:49:5c: 44:40:96:2c:09:6d:ac:f7:b0:50:2e:b8:5f:1e:9c: 96:41:6b:69:31:fe:97:ea:45:97:31:b8:23:3f:de: c4:5e:d4:b4:6f:77:25:60:ba:4f:59:7f:04:72:7d: 9c:91:88:a8:6f:48:49:e7:ef:ac:29:b5:ab:a3:5a: 44:96:0f:2f:32:95:92:30:23:16:f6:8b:fc:9c:dc: 81:76:11:6c:16:85:34:19:2b:16:02:d7:52:c9:2c: 5b:af:74:a8:3f:82:5a:79:97:9b:d4:91:ca:8d:67: d6:11:b1:38:16:a8:49:d5:d3:d7:00:c2:8e:1f:c8: b8:b3:1c:3a:bc:fa:d8:90:6b:21:62:66:8e:05:04: 49:6d:08:01:d4:27:78:57:e4:2e:fa:1f:27:77:69: 5e:f4:95:99:11:cb:58:57:42:76:4a:8c:aa:d5:48: da:71:bf:d7:75:8f:fc:ac:39:d2:f1:aa:12:4f:4d: ce:6a:f4:55:3b:64:51:70:1e:b7:ae:10:73:60:2b: f5:67:f4:3f:9e:29:52:cd:90:ad:ae:9a:ee:8f:0f: cb:02:f1:bb:20:ba:1a:70:aa:ed:c2:d8:c3:60:72: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:31:D9:C6:01:0D:FA:CA:95:87:A1:32:99:28:49:C2:83:EF:E5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:aa:ff:15:f4:e9:20:e9:6b:f8:93:c6:22:5a:d0:6d:16:23: fe:48:fe:47:bd:be:fe:0a:e7:59:a1:7e:df:5b:2d:08:a7:bb: 7b:c0:cf:7b:d9:1e:31:7e:3c:67:95:8b:ae:85:d7:88:29:f4: 1c:02:f8:78:31:c7:4a:e2:4b:e9:d8:8e:91:a9:bd:2d:fd:b2: 96:6d:5f:d0:c8:e4:0b:87:8d:db:67:11:2a:57:e1:4a:a5:ad: c3:df:a9:94:21:c0:08:26:ce:d4:d0:7a:c6:21:ce:c4:ff:21: 42:5d:8d:75:dc:4c:66:1c:93:15:9d:c3:7b:8b:ea:d2:6b:5b: b8:87:5a:63:55:9a:9e:17:8a:4c:c4:9f:2a:47:d7:82:d1:0b: 9f:07:51:0c:a0:71:e0:fb:53:62:3d:59:e5:d1:a9:82:69:b0: bd:66:a2:3e:5b:b8:96:97:75:55:41:7c:07:28:eb:ed:0c:3d: 5a:1d:6b:df:18:36:9d:42:5b:c7:17:cf:04:f6:50:9d:cd:63: 01:0b:48:a6:28:bd:f9:92:77:b1:a5:b4:f3:79:c8:74:43:3d: 01:18:01:4a:33:05:96:06:4a:71:af:03:8c:c5:a4:6c:f4:5f: a1:0c:ee:0e:b8:77:fc:1c:f3:30:42:eb:a2:0d:46:8e:21:8c: 1d:c0:85:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYsPcRmld2gf/RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NzZlZWMxZWMtNGIwMi00NzdhLTk4ZDQtYTRjZGU1M2VjYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX53dFYuMxCX7rnsXadokjkEaR4sPRyYqc2N SVxEQJYsCW2s97BQLrhfHpyWQWtpMf6X6kWXMbgjP97EXtS0b3clYLpPWX8Ecn2c kYiob0hJ5++sKbWro1pElg8vMpWSMCMW9ov8nNyBdhFsFoU0GSsWAtdSySxbr3So P4JaeZeb1JHKjWfWEbE4FqhJ1dPXAMKOH8i4sxw6vPrYkGshYmaOBQRJbQgB1Cd4 V+Qu+h8nd2le9JWZEctYV0J2Soyq1Ujacb/XdY/8rDnS8aoST03OavRVO2RRcB63 rhBzYCv1Z/Q/nilSzZCtrprujw/LAvG7ILoacKrtwtjDYHKceQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJox2cYBDfrKlYehMpkoScKD7+X9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJWq/xX06SDpa/iTxiJa0G0WI/5I/ke9vv4K51mhft9bLQinu3vA z3vZHjF+PGeVi66F14gp9BwC+Hgxx0riS+nYjpGpvS39spZtX9DI5AuHjdtnESpX 4UqlrcPfqZQhwAgmztTQesYhzsT/IUJdjXXcTGYckxWdw3uL6tJrW7iHWmNVmp4X ikzEnypH14LRC58HUQygceD7U2I9WeXRqYJpsL1moj5buJaXdVVBfAco6+0MPVod a98YNp1CW8cXzwT2UJ3NYwELSKYovfmSd7GltPN5yHRDPQEYAUozBZYGSnGvA4zF pGz0X6EM7g64d/wc8zBC66INRo4hjB3AhTs= -----END CERTIFICATE-----Generated at Sun Oct 4 14:15:42 2026 by rpki-client