$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/a4fa5575-21e0-354d-b0f1-60c4a9da2048.roa File: a4fa5575-21e0-354d-b0f1-60c4a9da2048.roa (raw, json) Hash identifier: LEXJs3zgeAyPSipcrOyvnaWsnXuwNAj2YSYd/n7KBKw= Subject key identifier: 13:5C:6F:4A:9B:CA:09:71:4E:AF:67:EC:70:80:E7:13:E1:0B:C7:80 Certificate issuer: /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8 Certificate serial: 010D0C9F4328584F9E9867D3E07551F8E02CD500 Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/a4fa5575-21e0-354d-b0f1-60c4a9da2048.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 49592 IP address blocks: 2602:fa0a:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:67:d3:e0:75:51:f8:e0:2c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=a947b40a-fa9d-4f80-97b3-1b61c0d53a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:7f:df:de:27:cd:09:04:a3:1a:4a:00:fe: 34:41:be:62:91:84:63:9f:d1:27:07:ec:82:49:9c: ff:54:4f:e6:3a:05:1c:4e:25:bf:e5:dd:59:c3:25: c4:04:ae:d7:e2:aa:17:49:42:d0:50:24:79:b4:4c: 83:ec:bc:cf:65:de:19:39:2c:e7:d1:d5:bc:95:61: 09:78:c4:d5:c0:e9:3c:1c:cd:af:11:e9:1b:b9:b2: a8:b7:0b:19:7e:2b:24:d3:7b:fd:3c:b4:93:44:77: db:7f:42:eb:c9:91:03:48:0f:b5:61:e0:d0:d8:e7: 59:56:ef:4b:ac:aa:fe:01:95:e9:7b:8d:40:24:98: a6:79:d5:89:2e:2c:a8:d2:e8:5a:1c:6f:01:59:43: 24:a0:03:83:62:ea:2f:b4:ca:3b:96:90:5a:4c:8b: 5e:5f:4f:89:ca:6e:77:a5:77:ea:ac:4b:16:7e:3d: 47:bb:44:b0:25:71:2e:30:ee:87:b2:4a:88:44:9a: 23:f2:ff:17:a7:0e:d5:e5:1e:fd:8c:03:fb:36:9d: 15:28:d0:5e:99:fd:f9:76:ff:d1:96:34:95:40:76: 1a:78:c3:25:be:28:cb:64:59:96:23:6e:41:2e:d2: 0f:e6:7a:15:ea:2c:16:85:44:cc:24:3f:23:91:04: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:6F:4A:9B:CA:09:71:4E:AF:67:EC:70:80:E7:13:E1:0B:C7:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/a4fa5575-21e0-354d-b0f1-60c4a9da2048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl X509v3 Authority Key Identifier: keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa0a:40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a3:2e:18:2c:cb:37:14:c1:06:b2:18:0c:1e:56:03:4c:ab: 63:9a:ae:c0:98:23:ac:94:cb:5a:03:6b:95:1a:86:57:eb:e7: c4:c1:cf:57:76:f3:40:19:bb:76:99:75:40:34:55:dd:2b:93: 5e:91:66:97:5b:92:39:12:96:35:63:70:48:15:b1:31:86:40: 9c:b7:c0:c3:cb:ad:ca:1e:90:d3:1e:c3:e1:4c:93:6c:4d:26: e4:5e:f8:8b:93:38:29:ea:fc:6a:6f:6e:c7:f0:0f:f1:7a:0d: b8:67:d1:52:52:50:52:b5:42:48:9b:53:85:0a:77:9a:d0:67: a0:5c:16:90:40:31:4e:7e:92:74:a3:0f:d2:62:fc:15:b1:44: 78:ec:c6:f9:3a:1a:d0:43:5e:69:af:a2:08:a1:6e:55:0d:90: 2a:6b:2c:cf:ca:c0:4a:ae:95:98:d2:3f:62:79:ec:e7:ad:01: 81:a9:c5:fb:68:11:b6:01:ca:7f:99:0c:04:94:8b:cf:e3:b8: a0:10:d3:2a:fa:e6:db:76:57:73:d8:c4:79:37:5a:de:63:98: ea:8b:c4:1a:1a:dc:c6:b7:94:ff:4e:62:65:ba:55:87:9e:62: 3d:aa:a5:2f:2b:cb:ed:41:f0:a3:84:90:50:b8:87:b6:70:5f: 54:09:a1:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+emGfT4HVR+OAs1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1YjEzYjAtYTk5NC00ODVmLWFkY2EtYTJlYTI3ZmM5 ZGU4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk YTk0N2I0MGEtZmE5ZC00ZjgwLTk3YjMtMWI2MWMwZDUzYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2J/394nzQkEoxpKAP40Qb5ikYRjn9EnB+yC SZz/VE/mOgUcTiW/5d1ZwyXEBK7X4qoXSULQUCR5tEyD7LzPZd4ZOSzn0dW8lWEJ eMTVwOk8HM2vEekbubKotwsZfisk03v9PLSTRHfbf0LryZEDSA+1YeDQ2OdZVu9L rKr+AZXpe41AJJimedWJLiyo0uhaHG8BWUMkoAODYuovtMo7lpBaTIteX0+Jym53 pXfqrEsWfj1Hu0SwJXEuMO6HskqIRJoj8v8Xpw7V5R79jAP7Np0VKNBemf35dv/R ljSVQHYaeMMlvijLZFmWI25BLtIP5noV6iwWhUTMJD8jkQTfpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNcb0qbyglxTq9n7HCA5xPhC8eAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTVi MTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVhMjdmYzlkZTgvYTRmYTU1NzUtMjFlMC0z NTRkLWIwZjEtNjBjNGE5ZGEyMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWU1YjEzYjAtYTk5NC00ODVmLWFk Y2EtYTJlYTI3ZmM5ZGU4LzllNWIxM2IwLWE5OTQtNDg1Zi1hZGNhLWEyZWEyN2Zj OWRlOC5jcmwwHwYDVR0jBBgwFoAUhDSp8l1Fz4TB6iFuF+Mg2Er7APswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTViMTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVh MjdmYzlkZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6CgBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFajLhgsyzcUwQayGAweVgNMq2OarsCYI6yUy1oDa5Uahlfr58TB z1d280AZu3aZdUA0Vd0rk16RZpdbkjkSljVjcEgVsTGGQJy3wMPLrcoekNMew+FM k2xNJuRe+IuTOCnq/GpvbsfwD/F6Dbhn0VJSUFK1QkibU4UKd5rQZ6BcFpBAMU5+ knSjD9Ji/BWxRHjsxvk6GtBDXmmvogihblUNkCprLM/KwEqulZjSP2J57OetAYGp xftoEbYByn+ZDASUi8/juKAQ0yr65tt2V3PYxHk3Wt5jmOqLxBoa3Ma3lP9OYmW6 VYeeYj2qpS8ry+1B8KOEkFC4h7ZwX1QJodM= -----END CERTIFICATE-----Generated at Thu Oct 29 10:58:59 2026 by rpki-client