$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa File: 0ab91e94-64e8-38f1-9485-8c741188fc51.roa (raw, json) Hash identifier: Vb71r6Dh8TPDNyQdUCy+9GfoaHj89sIiG4Lv8bYVg+o= Subject key identifier: C8:14:43:71:64:E8:88:5A:D2:E5:E8:21:57:6D:A9:47:9E:FD:34:AD Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F655D6A5E00FF19194561F0C0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 136557 IP address blocks: 2606:fc40:4002::/48 maxlen: 48 2606:fc40:4003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6a:5e:00:ff:19:19:45:61:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=7f8c64f8-2b52-4a06-9780-a6612d93ac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:e2:d4:86:47:10:28:98:03:96:8e:be:cd: 3a:aa:0d:9b:ff:90:89:94:28:af:83:7d:a7:05:9a: 91:07:a0:51:ad:46:1a:9f:9b:12:95:31:ad:df:70: d0:90:64:2a:4e:f9:f6:a2:5d:d6:e2:d8:4d:11:80: e2:33:a6:df:7e:97:49:47:27:c9:c5:5c:52:bc:0c: 18:03:1e:51:f0:b9:39:27:0a:db:68:c9:87:3e:8c: 78:81:13:59:6b:23:84:ca:0c:f0:23:9a:7b:95:b5: d7:bc:79:d3:39:cc:b7:7a:e9:ee:0c:f5:86:b5:25: 81:0f:fc:64:6a:3f:2d:57:e8:fd:fc:b6:eb:dd:35: 0c:de:07:05:d1:f7:ef:62:fa:21:87:76:95:32:53: 0a:58:2c:ad:d9:ab:ea:63:d2:7c:5e:54:50:ad:02: 13:3f:28:b1:5a:80:b1:4c:b0:b1:26:e0:0d:3c:8b: 9f:98:5b:56:37:f1:fa:c1:54:5d:dc:0b:5a:72:08: 36:74:35:76:98:16:f7:3e:38:31:8a:60:af:ac:a5: 98:3d:8d:e9:2f:48:5b:01:58:4d:51:11:b9:22:93: 37:52:e9:9c:a0:b8:96:f4:36:fd:4c:65:48:29:40: 4a:8c:52:6f:17:ea:74:f1:13:59:52:f0:04:9e:f5: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:14:43:71:64:E8:88:5A:D2:E5:E8:21:57:6D:A9:47:9E:FD:34:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2606:fc40:4002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2e:70:0b:42:8f:c3:89:b2:4d:b1:9c:b7:4c:07:c5:c6:df: f4:2c:c2:41:95:4e:4e:e8:fc:9a:09:aa:7c:8b:91:03:33:9c: 0a:f0:17:cf:de:5c:af:4a:88:35:e6:57:6d:f0:b5:10:58:f4: b4:49:f0:f9:ba:51:f9:c0:80:e9:4c:c0:a0:f3:ac:ca:ac:80: 4d:6a:27:31:0a:1e:30:16:b1:56:e7:84:9e:a4:0d:46:5e:6b: fe:66:2c:65:bf:3e:52:48:84:e2:cf:83:d9:49:2f:b3:0b:f6: f5:6d:de:16:e5:9f:88:4c:b0:d6:30:c9:20:df:71:bd:a9:8b: d8:0c:02:28:7b:db:2d:1c:92:5e:09:e8:0b:4e:b4:01:62:f1: b2:4b:0f:8c:ff:45:6b:09:78:95:8f:b6:07:d4:05:c2:8c:65: 3b:a2:67:fc:0c:cf:44:ac:ae:be:80:e7:25:95:d5:c6:24:06: 2c:02:ba:86:da:c1:68:f3:3e:cb:a1:06:c1:e8:49:cb:2f:1f: 38:c8:db:77:5e:66:9e:10:ad:d3:83:c6:61:f3:e4:8c:e8:2e: 19:65:08:9c:1a:fc:9d:98:d8:8f:cf:79:1a:22:d2:97:de:b8: f5:61:0d:2d:53:d6:2f:5a:24:c6:6c:3e:df:70:82:43:92:5c: d6:12:1d:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9lXWpeAP8ZGUVh8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk N2Y4YzY0ZjgtMmI1Mi00YTA2LTk3ODAtYTY2MTJkOTNhYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8ji1IZHECiYA5aOvs06qg2b/5CJlCivg32n BZqRB6BRrUYan5sSlTGt33DQkGQqTvn2ol3W4thNEYDiM6bffpdJRyfJxVxSvAwY Ax5R8Lk5JwrbaMmHPox4gRNZayOEygzwI5p7lbXXvHnTOcy3eunuDPWGtSWBD/xk aj8tV+j9/Lbr3TUM3gcF0ffvYvohh3aVMlMKWCyt2avqY9J8XlRQrQITPyixWoCx TLCxJuANPIufmFtWN/H6wVRd3Atacgg2dDV2mBb3PjgximCvrKWYPY3pL0hbAVhN URG5IpM3UumcoLiW9Db9TGVIKUBKjFJvF+p08RNZUvAEnvXOrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMgUQ3Fk6Iha0uXoIVdtqUee/TStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMGFiOTFlOTQtNjRlOC0z OGYxLTk0ODUtOGM3NDExODhmYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgb8QEAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGoucAtCj8OJsk2xnLdMB8XG3/QswkGVTk7o/JoJqnyLkQMznArw F8/eXK9KiDXmV23wtRBY9LRJ8Pm6UfnAgOlMwKDzrMqsgE1qJzEKHjAWsVbnhJ6k DUZea/5mLGW/PlJIhOLPg9lJL7ML9vVt3hbln4hMsNYwySDfcb2pi9gMAih72y0c kl4J6AtOtAFi8bJLD4z/RWsJeJWPtgfUBcKMZTuiZ/wMz0Ssrr6A5yWV1cYkBiwC uobawWjzPsuhBsHoScsvHzjI23deZp4QrdODxmHz5IzoLhllCJwa/J2Y2I/PeRoi 0pfeuPVhDS1T1i9aJMZsPt9wgkOSXNYSHVQ= -----END CERTIFICATE-----Generated at Sat Oct 24 19:06:02 2026 by rpki-client