$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa File: 998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa (raw, json) Hash identifier: D3K1a45mNZYMarajR0dyprxQ+kBRVTdepcRwTNFnClk= Subject key identifier: 4A:81:86:EC:A9:0B:9D:79:77:98:40:53:CD:9A:29:0D:16:B2:0F:67 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3023214148107B2F550C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 60781 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:32:14:14:81:07:b2:f5:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=4d8ae4c8-d2ab-429e-b4cb-24bd5abe95e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:85:93:2c:12:50:43:cd:1b:1d:b9:16:c4: 5e:6f:4a:8e:73:b5:3f:c3:25:c1:d3:73:60:65:d7: 3c:41:d3:2a:2b:e2:70:69:1f:d0:ed:54:27:75:b3: 5f:5b:4a:c6:1a:97:e9:a9:90:0a:f3:f9:64:cf:74: 22:cb:18:b9:31:a3:08:24:ce:83:88:9d:dc:73:69: 19:a5:bd:2b:b5:2d:06:a5:77:7e:d3:6c:9b:1b:9a: 91:78:43:c3:49:f0:93:74:6e:76:6e:aa:97:1a:d1: 09:00:23:64:0e:3b:c6:68:66:43:94:b9:ba:1f:c8: 84:f4:20:a5:12:03:c5:1a:ec:86:37:e1:b1:9e:b1: 14:72:ad:9a:0e:5b:e8:8e:d2:75:93:54:0e:52:90: 03:ef:87:af:09:0d:b8:ad:1c:b2:09:dc:09:f6:33: 60:4c:f9:ca:7b:84:51:c1:0e:b3:19:ec:e8:9b:a2: 56:ff:cd:1a:a2:5e:84:d8:8d:7e:3d:44:59:2b:c3: 9c:1f:da:4d:58:f9:69:c5:46:67:85:1a:dc:e4:c8: a0:af:8d:6d:b3:43:28:6b:c3:46:7b:a0:b7:ba:4c: 4b:1c:26:6d:55:f3:1f:b5:fa:04:e1:e0:b5:76:19: 8f:a8:c6:1c:8c:53:f2:83:ef:40:1a:6d:59:53:d7: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:86:EC:A9:0B:9D:79:77:98:40:53:CD:9A:29:0D:16:B2:0F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cc:ea:d8:0c:30:20:0b:7f:ce:98:33:66:1f:79:8c:b9:3f: a8:8d:e0:61:c7:0b:81:64:95:ff:60:a3:bf:82:db:c0:b6:9b: 9a:ad:f2:b2:4a:40:90:d1:06:80:27:67:58:fc:6e:5e:c4:53: 5f:a0:64:1e:a7:e6:9d:a8:cb:2d:c3:e1:e5:e2:5c:09:45:14: ae:43:10:f0:98:bd:27:13:15:8b:44:34:ef:01:fe:15:4a:ab: 44:4b:41:cf:76:23:f2:25:9c:9e:50:8e:df:d2:9e:f1:e4:c6: 6e:34:94:93:49:d0:48:f4:18:15:67:35:87:dd:3b:5e:7d:9d: 6c:f9:55:6d:a5:c8:f4:61:66:60:9a:4d:ff:e1:03:bf:f8:7d: 8d:39:f3:ad:3a:ae:2c:fc:f6:fe:f2:72:01:85:4c:0a:89:4c: cd:f9:65:8a:25:d7:6d:76:16:83:9e:2c:59:4d:2a:a1:38:53: 61:26:7b:3a:17:a1:eb:95:be:c1:ae:f6:14:d9:55:c9:36:cc: 2f:1a:f2:2f:0e:80:2c:0d:8d:83:b3:8a:85:5e:c5:a9:34:c9: 83:60:78:3c:82:93:4a:56:08:7d:81:d8:25:7c:a1:bb:16:07: cf:19:c5:aa:32:f0:52:30:23:4f:1a:de:fe:04:f0:c3:28:a3: 0b:e5:72:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97swIyFBSBB7L1UMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NGQ4YWU0YzgtZDJhYi00MjllLWI0Y2ItMjRiZDVhYmU5NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83mFkywSUEPNGx25FsReb0qOc7U/wyXB03Ng Zdc8QdMqK+JwaR/Q7VQndbNfW0rGGpfpqZAK8/lkz3Qiyxi5MaMIJM6DiJ3cc2kZ pb0rtS0GpXd+02ybG5qReEPDSfCTdG52bqqXGtEJACNkDjvGaGZDlLm6H8iE9CCl EgPFGuyGN+GxnrEUcq2aDlvojtJ1k1QOUpAD74evCQ24rRyyCdwJ9jNgTPnKe4RR wQ6zGezom6JW/80aol6E2I1+PURZK8OcH9pNWPlpxUZnhRrc5Migr41ts0Moa8NG e6C3ukxLHCZtVfMftfoE4eC1dhmPqMYcjFPyg+9AGm1ZU9feqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqBhuypC515d5hAU82aKQ0Wsg9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTk4ZGZjNjctMWU3NS0z YzQzLWEwZmMtYzUxMmUwZjM0NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArM6tgMMCALf86YM2YfeYy5P6iN4GHHC4Fklf9go7+C28C2m5qt 8rJKQJDRBoAnZ1j8bl7EU1+gZB6n5p2oyy3D4eXiXAlFFK5DEPCYvScTFYtENO8B /hVKq0RLQc92I/IlnJ5Qjt/SnvHkxm40lJNJ0Ej0GBVnNYfdO159nWz5VW2lyPRh ZmCaTf/hA7/4fY058606riz89v7ycgGFTAqJTM35ZYol1212FoOeLFlNKqE4U2Em ezoXoeuVvsGu9hTZVck2zC8a8i8OgCwNjYOzioVexak0yYNgeDyCk0pWCH2B2CV8 obsWB88Zxaoy8FIwI08a3v4E8MMoowvlcoM= -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:37 2026 by rpki-client