$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa File: f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa (raw, json) Hash identifier: wjTk05mjbB9OKyz1VfvHqTe7sotY0mRZ+v0aLlbg8lY= Subject key identifier: BC:4D:F0:93:72:5D:E5:B7:31:95:37:87:61:33:EF:AE:FA:80:FA:6B Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F655E6BB7911A7019BA4B9580 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 398395 IP address blocks: 2606:fc40:40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:6b:b7:91:1a:70:19:ba:4b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=01284834-d644-45fb-bfbf-d4d3364c2876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:bd:08:6a:79:e2:d4:ba:bf:97:2b:60:37: 7c:91:df:77:14:35:97:f3:22:9a:7e:cc:b7:5d:e5: 54:34:fd:98:f2:e0:cc:74:e9:83:91:41:6d:52:53: a7:62:1a:26:78:1b:ca:63:2a:42:69:c4:7a:e5:a4: 0b:35:ae:3e:43:17:9e:28:e5:3a:32:51:be:d3:13: 2f:f4:15:4a:e4:a2:a5:a9:31:37:c0:08:55:8c:b1: 19:37:db:c3:e0:e2:5c:5a:ab:7e:58:c0:6b:fd:0e: c7:e6:b9:4f:c2:e4:cc:bc:17:81:d1:70:b5:b8:c8: 83:f0:6a:3e:1c:f1:78:f4:8f:b1:aa:de:c7:02:75: 65:ce:72:d1:5a:9b:88:7c:71:ab:3f:37:b9:c4:d1: 19:82:d3:80:d9:26:6e:ea:79:34:85:4a:da:0d:3a: bf:22:63:c6:1c:39:46:b3:76:f3:37:5d:ae:6a:b2: aa:97:53:59:6c:63:8c:79:33:34:4a:69:a4:f6:06: d5:1f:ad:4b:5c:58:fc:b7:71:8c:7d:cb:bd:1e:4c: a7:6a:72:24:c0:7b:06:ca:41:54:39:31:9e:ab:76: b5:82:31:94:32:05:c7:dd:95:49:0a:d9:4b:ac:b2: 5f:d0:2a:47:9a:1c:57:f9:67:71:44:42:88:61:0a: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4D:F0:93:72:5D:E5:B7:31:95:37:87:61:33:EF:AE:FA:80:FA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2606:fc40:40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:34:dc:94:a5:b4:e4:1c:a4:bc:a2:37:b0:4e:55:7d:f3:8c: ef:de:f8:b6:e8:19:b3:af:f6:ec:d6:5d:7c:35:76:18:30:65: 78:d1:86:ae:fe:db:7d:77:70:4c:dc:e8:eb:41:57:32:fe:81: 9c:f2:df:78:c3:dc:af:35:ac:61:dc:d3:02:a2:f3:94:80:e6: 12:37:21:c4:f6:e9:48:3d:0f:15:75:7b:fc:04:c7:82:18:de: 1e:4c:ca:cb:74:cf:e7:cc:d3:b6:88:f9:54:b8:09:eb:8a:3a: d0:a4:83:ee:0e:2d:cb:77:25:fb:47:c5:45:bb:b7:d5:fa:0a: 44:7c:db:85:73:6c:f4:99:a3:df:7c:1d:2e:9b:ae:d8:19:87: 41:ea:6f:b6:c9:d8:19:d7:30:27:e8:0a:a9:91:23:6c:f6:d9: c7:d0:c3:08:e3:5a:f7:81:2d:16:c9:d4:84:c9:0d:60:40:fe: b1:af:6d:b6:7b:e4:02:5a:22:f4:37:0e:d6:e1:de:88:72:4e: ed:5c:ae:cc:fb:c3:dd:ae:de:2f:58:03:ce:5d:43:c0:12:48: 58:4a:c7:d0:49:99:d7:09:b1:59:b9:f3:72:87:a0:a6:8f:12: 2a:38:2f:90:8d:90:54:5a:65:56:35:c2:a6:3b:b8:b1:1b:ec: 46:b0:f2:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9lXmu3kRpwGbpLlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MDEyODQ4MzQtZDY0NC00NWZiLWJmYmYtZDRkMzM2NGMyODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9K9CGp54tS6v5crYDd8kd93FDWX8yKafsy3 XeVUNP2Y8uDMdOmDkUFtUlOnYhomeBvKYypCacR65aQLNa4+QxeeKOU6MlG+0xMv 9BVK5KKlqTE3wAhVjLEZN9vD4OJcWqt+WMBr/Q7H5rlPwuTMvBeB0XC1uMiD8Go+ HPF49I+xqt7HAnVlznLRWpuIfHGrPze5xNEZgtOA2SZu6nk0hUraDTq/ImPGHDlG s3bzN12uarKql1NZbGOMeTM0Smmk9gbVH61LXFj8t3GMfcu9HkynanIkwHsGykFU OTGeq3a1gjGUMgXH3ZVJCtlLrLJf0CpHmhxX+WdxREKIYQp9uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxN8JNyXeW3MZU3h2Ez7676gPprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZjg1ZTVhYmMtM2Q2MC0z NmM1LTg2M2UtYjdmZWYxNGRlMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgb8QABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQ03JSltOQcpLyiN7BOVX3zjO/e+LboGbOv9uzWXXw1dhgwZXjR hq7+2313cEzc6OtBVzL+gZzy33jD3K81rGHc0wKi85SA5hI3IcT26Ug9DxV1e/wE x4IY3h5Myst0z+fM07aI+VS4CeuKOtCkg+4OLct3JftHxUW7t9X6CkR824VzbPSZ o998HS6brtgZh0Hqb7bJ2BnXMCfoCqmRI2z22cfQwwjjWveBLRbJ1ITJDWBA/rGv bbZ75AJaIvQ3Dtbh3ohyTu1crsz7w92u3i9YA85dQ8ASSFhKx9BJmdcJsVm583KH oKaPEio4L5CNkFRaZVY1wqY7uLEb7Eaw8iI= -----END CERTIFICATE-----Generated at Thu Oct 22 05:54:51 2026 by rpki-client