$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: 2lpUUk+vufdbPl2AZrR2LXAksVOWzHxNZOJA5E1U9Nc= Subject key identifier: 34:85:81:4B:09:96:09:C6:95:AC:98:DE:65:27:C5:C0:06:B7:31:88 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3023E8D2E35E5C78A9D80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:3e:8d:2e:35:e5:c7:8a:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=004f2f05-82e4-434c-80de-a94a863d17be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:56:0a:61:d8:0f:e8:9c:66:36:2d:1d:44: 1d:bb:62:aa:7c:81:fe:47:7e:36:36:b2:9f:b3:e9: e5:44:9e:51:73:8a:c5:13:d1:3e:aa:46:17:8a:29: fb:36:e7:7e:43:a3:6c:02:ca:5c:34:fb:ef:75:a4: ce:a2:f8:ee:1a:fa:f2:fa:27:e4:47:08:68:42:cf: b2:33:20:86:af:b6:f1:d7:ca:49:a6:7b:64:75:e8: 87:7a:1b:96:49:03:38:9b:59:d4:fe:19:a7:c0:5d: 4f:25:24:f5:0e:6f:5b:fa:55:b2:fe:aa:73:70:f2: 71:da:04:65:1b:e1:43:bf:85:e7:ab:59:bc:af:69: 68:1c:ff:a5:72:fd:05:3c:00:fc:07:28:99:e4:eb: 79:8e:66:68:27:53:8d:fe:7f:91:0d:9d:62:08:02: 1b:73:e2:c7:e0:b2:f1:e4:76:ac:fb:a1:cb:72:f7: 80:13:18:f3:2d:88:46:78:e1:17:11:02:66:1d:72: bc:da:f4:70:a6:cc:e9:4d:05:d1:d7:4d:19:1a:ae: 77:4d:2d:d1:8c:e6:76:5a:ed:e2:43:eb:28:b1:a9: 57:cf:fd:20:b9:e6:b6:1c:5b:8a:9d:63:62:89:1f: b6:9a:01:41:2f:77:99:fc:12:ec:35:e1:cf:14:4a: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:85:81:4B:09:96:09:C6:95:AC:98:DE:65:27:C5:C0:06:B7:31:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d2:01:63:73:55:9d:ed:cc:fa:7a:5c:49:4b:ef:82:6b:d6: 77:4a:b6:df:16:38:31:36:89:af:80:e3:77:62:f3:1e:7f:30: 1a:88:bf:d2:cd:c2:8e:7b:d3:7f:6d:c6:35:35:ad:d8:cd:aa: 2e:b9:3f:d8:c7:98:5b:a0:01:3c:65:1a:b5:69:8a:0b:77:97: 30:01:d9:d6:80:6f:cd:73:c3:6e:c4:59:8b:ad:41:45:c6:d1: b6:79:89:6d:fc:e6:0c:3e:c4:a0:e7:67:83:cf:16:6c:ef:64: 3e:90:b8:0e:f2:e8:4c:f9:4c:57:3b:4e:a4:18:50:e0:f2:19: ee:04:e9:bb:bf:be:11:74:c5:07:c9:b9:42:ae:48:e6:7f:35: e9:c3:b6:eb:a9:48:8a:cd:62:16:5a:a0:cc:f6:1d:e9:e4:fe: 75:d1:07:05:cf:a6:c1:72:39:1b:25:83:7b:d5:2b:ea:95:8a: 5b:91:94:c5:91:12:6e:dd:fe:19:f9:36:1e:93:a0:10:1f:e0: 08:3d:66:4c:32:67:07:2d:58:91:81:38:88:60:02:f2:11:87: ef:fd:2e:b2:80:f3:86:f5:0a:44:50:2d:24:76:b8:60:79:3e: 88:7f:e1:40:97:17:c0:ed:66:42:21:fe:c8:82:87:7e:c1:e0: f5:fe:e6:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97swI+jS415ceKnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MDA0ZjJmMDUtODJlNC00MzRjLTgwZGUtYTk0YTg2M2QxN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYpWCmHYD+icZjYtHUQdu2KqfIH+R342NrKf s+nlRJ5Rc4rFE9E+qkYXiin7Nud+Q6NsAspcNPvvdaTOovjuGvry+ifkRwhoQs+y MyCGr7bx18pJpntkdeiHehuWSQM4m1nU/hmnwF1PJST1Dm9b+lWy/qpzcPJx2gRl G+FDv4Xnq1m8r2loHP+lcv0FPAD8ByiZ5Ot5jmZoJ1ON/n+RDZ1iCAIbc+LH4LLx 5Has+6HLcveAExjzLYhGeOEXEQJmHXK82vRwpszpTQXR100ZGq53TS3RjOZ2Wu3i Q+sosalXz/0guea2HFuKnWNiiR+2mgFBL3eZ/BLsNeHPFEos2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDSFgUsJlgnGlayY3mUnxcAGtzGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7SAWNzVZ3tzPp6XElL74Jr1ndKtt8WODE2ia+A43di8x5/MBqI v9LNwo57039txjU1rdjNqi65P9jHmFugATxlGrVpigt3lzAB2daAb81zw27EWYut QUXG0bZ5iW385gw+xKDnZ4PPFmzvZD6QuA7y6Ez5TFc7TqQYUODyGe4E6bu/vhF0 xQfJuUKuSOZ/NenDtuupSIrNYhZaoMz2Henk/nXRBwXPpsFyORslg3vVK+qViluR lMWREm7d/hn5Nh6ToBAf4Ag9ZkwyZwctWJGBOIhgAvIRh+/9LrKA84b1CkRQLSR2 uGB5Poh/4UCXF8DtZkIh/siCh37B4PX+5nA= -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:54 2026 by rpki-client