$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dcf9398-9524-39b7-8b44-a30ce9cfde24.roa File: 5dcf9398-9524-39b7-8b44-a30ce9cfde24.roa (raw, json) Hash identifier: nUC5wfYpl4LgSCRk1XAjb1P/2/vVpD1fSRNt0oT/0GQ= Subject key identifier: 4C:EC:D3:48:A7:96:2E:AB:4B:E8:24:C2:C1:D3:8F:5F:8A:7D:94:10 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5B97FC9D29EA0F587A440F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dcf9398-9524-39b7-8b44-a30ce9cfde24.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 393886 IP address blocks: 2607:f5b6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fc:9d:29:ea:0f:58:7a:44:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=14bebc10-4ba6-439d-aaa4-e11296e7958d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:98:a6:a1:30:5f:0e:f3:5f:08:59:15:99: 81:d5:ff:7e:fa:85:b9:0b:2f:62:04:ec:0e:53:62: 05:c9:a4:ea:4b:ac:fa:e7:af:4f:82:08:ca:f1:fc: 26:54:64:fe:41:98:c8:b0:83:c3:6b:c1:6c:d1:a2: cf:dd:25:35:dd:99:84:6e:4a:20:08:dc:85:c0:e3: 71:0c:e2:3a:d2:68:6a:02:40:f3:a7:95:57:0a:df: ce:22:84:d2:a4:c4:59:c2:48:1b:80:a7:f6:81:e1: be:a9:13:f9:6a:10:c2:18:22:d0:fa:03:85:af:f7: 60:c5:78:fd:0e:7b:80:27:ec:b9:36:90:f1:2c:17: 98:8b:f9:c1:e7:2a:ed:bc:13:6a:ea:50:dc:b8:3b: 4a:4d:59:e4:1d:0f:53:97:96:3d:2b:04:de:d6:6e: 47:09:53:43:04:38:4f:b6:cf:88:1f:60:c4:0c:f3: d9:09:36:e1:ef:a5:c4:de:95:c2:36:50:e0:db:c6: 2c:27:16:1d:39:52:12:49:cb:fc:46:11:4f:9c:3e: e4:e8:24:71:59:43:33:ab:a5:0c:63:3d:76:af:07: db:86:52:d1:c4:d9:69:81:3e:14:de:06:be:10:c7: ae:6d:9c:d7:27:9f:0f:c6:a4:a2:db:8c:23:3d:3c: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:D3:48:A7:96:2E:AB:4B:E8:24:C2:C1:D3:8F:5F:8A:7D:94:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dcf9398-9524-39b7-8b44-a30ce9cfde24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b6::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cc:86:8e:35:59:d9:05:28:29:50:fd:4b:59:a2:e1:b4:90: b8:55:42:88:f2:5b:9c:e5:f6:5b:4e:92:d9:02:a4:49:b9:ed: a5:ac:08:f9:32:0e:19:d4:0e:b3:af:0b:93:68:bf:89:9c:d2: 3a:94:ba:9e:42:ac:c2:93:6c:78:96:b1:cf:d8:d2:95:a7:35: f2:13:fd:c1:b0:b6:00:c3:0b:64:e1:9e:2f:ca:31:31:76:0a: 65:58:e0:ff:ca:3a:41:eb:98:b7:a6:d8:0b:7d:5a:ec:6d:a8: ff:47:2d:20:0a:0c:0c:b4:44:94:32:6c:45:38:be:56:49:8b: 9b:c3:8b:d7:d5:7b:41:ba:ce:81:78:67:d8:0d:2a:62:8d:0b: 5d:f2:01:c7:66:1f:5d:82:87:77:7e:77:87:8e:45:f7:4d:4e: c3:26:a2:d4:32:6e:5a:c2:04:5a:a5:1f:45:65:7c:38:ae:95: 48:7b:8f:e9:f1:62:a1:4b:b3:67:c9:22:e2:68:95:c4:c7:0b: 3a:97:81:51:ee:c4:91:87:99:29:50:e7:df:b1:27:ec:35:e7: 7a:b7:f5:12:a2:e8:a3:b7:f8:02:0d:a8:1d:be:12:70:99:f9: 02:fc:5d:f2:a1:cc:c8:ef:90:10:82:c0:55:44:88:42:a2:3a: 1a:fb:3f:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9bl/ydKeoPWHpED4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MTRiZWJjMTAtNGJhNi00MzlkLWFhYTQtZTExMjk2ZTc5NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcuYpqEwXw7zXwhZFZmB1f9++oW5Cy9iBOwO U2IFyaTqS6z6569PggjK8fwmVGT+QZjIsIPDa8Fs0aLP3SU13ZmEbkogCNyFwONx DOI60mhqAkDzp5VXCt/OIoTSpMRZwkgbgKf2geG+qRP5ahDCGCLQ+gOFr/dgxXj9 DnuAJ+y5NpDxLBeYi/nB5yrtvBNq6lDcuDtKTVnkHQ9Tl5Y9KwTe1m5HCVNDBDhP ts+IH2DEDPPZCTbh76XE3pXCNlDg28YsJxYdOVISScv8RhFPnD7k6CRxWUMzq6UM Yz12rwfbhlLRxNlpgT4U3ga+EMeubZzXJ58PxqSi24wjPTy9GQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEzs00inli6rS+gkwsHTj1+KfZQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWRjZjkzOTgtOTUyNC0z OWI3LThiNDQtYTMwY2U5Y2ZkZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1tjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFzIaONVnZBSgpUP1LWaLhtJC4VUKI8luc5fZbTpLZAqRJue2lrAj5 Mg4Z1A6zrwuTaL+JnNI6lLqeQqzCk2x4lrHP2NKVpzXyE/3BsLYAwwtk4Z4vyjEx dgplWOD/yjpB65i3ptgLfVrsbaj/Ry0gCgwMtESUMmxFOL5WSYubw4vX1XtBus6B eGfYDSpijQtd8gHHZh9dgod3fneHjkX3TU7DJqLUMm5awgRapR9FZXw4rpVIe4/p 8WKhS7NnySLiaJXExws6l4FR7sSRh5kpUOffsSfsNed6t/USouijt/gCDagdvhJw mfkC/F3yoczI75AQgsBVRIhCojoa+z+8 -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:48 2026 by rpki-client