$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa File: 985c170d-dbb4-389f-8f2f-9ee25de080e6.roa (raw, json) Hash identifier: ayXn0JQaBG5diBA1QkwgLXWtzDXuE4Tu1bZShZkTJk0= Subject key identifier: C4:EF:A8:DA:7C:FC:88:5C:E5:F2:73:7E:8B:30:FA:6C:69:BC:32:60 Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769 Certificate serial: 010D0C9F4328584F94D35D2EF678E5BFC680BA00 Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 21981 IP address blocks: 2604:5c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:5d:2e:f6:78:e5:bf:c6:80:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=4305558a-2e64-43d3-bf77-d21a3f01a6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:cd:7c:9d:63:3e:fd:a9:8c:62:03:74:6e: f4:b4:53:87:65:19:d0:6a:a8:2d:3a:10:79:ac:3c: c3:1a:fa:2c:a4:43:bd:3d:32:0b:61:f5:0a:2a:f7: f7:09:76:bc:be:39:b2:6a:03:18:b9:50:cf:4a:30: 9b:fc:cb:87:4e:c6:71:19:7d:ad:e5:8d:a6:51:b5: 46:15:ea:a0:c4:19:1f:0f:8e:7c:8d:09:d0:05:a3: d1:47:89:44:d7:71:c2:b3:dc:e5:0d:1e:b2:40:29: a1:a0:a9:5c:58:24:20:d0:60:fa:b6:e6:ce:79:a0: ee:f3:68:ea:90:68:b3:b0:3d:d5:79:d5:7f:10:bb: f4:88:18:60:54:70:21:7c:a3:70:c6:dc:77:25:2a: 49:74:6e:90:9d:73:6d:ca:24:e3:cb:22:01:f7:77: b5:eb:f3:72:4a:49:4e:da:08:09:ec:33:88:0f:67: cb:38:39:46:fc:06:b1:5a:f7:e2:73:ff:d6:c5:69: e8:f6:6f:f4:69:49:0d:3f:18:1b:f9:c0:28:1d:42: 84:c4:09:70:0d:86:d4:48:c1:81:ad:9a:3c:9c:d9: 2d:52:de:15:20:73:30:b7:58:63:cb:17:a7:21:ca: ba:1d:62:f4:3d:7f:fc:02:e6:c2:2a:6e:e6:1e:0a: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EF:A8:DA:7C:FC:88:5C:E5:F2:73:7E:8B:30:FA:6C:69:BC:32:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl X509v3 Authority Key Identifier: keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer sbgp-ipAddrBlock: critical IPv6: 2604:5c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6f:39:30:ea:dd:7b:82:a0:7e:b1:d1:44:db:87:1b:5f:82: 5c:63:0b:4c:08:ed:3e:9b:e2:1a:aa:fc:42:15:36:00:2c:d6: c4:d2:07:d8:07:3d:cf:16:c6:f3:74:21:09:cd:b0:48:68:12: 69:19:24:9b:ad:f6:31:e1:64:59:09:9a:fb:27:31:9d:41:02: 8e:47:6f:01:9b:22:eb:cb:fd:ed:16:53:81:ed:39:e5:f4:c0: 65:37:25:1b:0e:4e:48:c5:59:1e:3a:ff:40:da:2a:05:75:5b: b8:dd:e3:c2:92:02:68:ee:8f:43:35:9a:c4:11:03:f9:f4:26: 22:3f:ea:fd:2e:2c:23:7f:59:7c:e7:48:3d:eb:65:f3:f0:93: 21:26:36:5e:20:81:c3:a6:80:c3:2f:d4:4d:1f:f3:91:9f:44: a7:be:b9:fc:51:46:c3:2c:b1:5f:57:06:34:0c:49:f5:96:b2: f3:c9:8b:1c:6c:b1:cc:6e:7f:b1:3a:3b:ac:f5:5e:99:27:19: 18:9a:b3:b9:38:d1:8c:33:48:2c:72:38:95:9c:19:91:ad:cc: e4:13:7c:d2:50:74:83:04:e4:18:d8:9f:e9:b1:f4:5a:1a:a1: 8e:c8:7f:4c:85:19:57:aa:93:ee:e7:85:ba:d9:b8:00:42:38: 3b:16:4b:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+U010u9njlv8aAugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw NzY5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NDMwNTU1OGEtMmU2NC00M2QzLWJmNzctZDIxYTNmMDFhNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihrNfJ1jPv2pjGIDdG70tFOHZRnQaqgtOhB5 rDzDGvospEO9PTILYfUKKvf3CXa8vjmyagMYuVDPSjCb/MuHTsZxGX2t5Y2mUbVG FeqgxBkfD458jQnQBaPRR4lE13HCs9zlDR6yQCmhoKlcWCQg0GD6tubOeaDu82jq kGizsD3VedV/ELv0iBhgVHAhfKNwxtx3JSpJdG6QnXNtyiTjyyIB93e16/NySklO 2ggJ7DOID2fLODlG/AaxWvfic//WxWno9m/0aUkNPxgb+cAoHUKExAlwDYbUSMGB rZo8nNktUt4VIHMwt1hjyxenIcq6HWL0PX/8AubCKm7mHgpMuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTvqNp8/Ihc5fJzfosw+mxpvDJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4 YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvOTg1YzE3MGQtZGJiNC0z ODlmLThmMmYtOWVlMjVkZTA4MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3 YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3 MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1 YjVmNzA3NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFbzkw6t17gqB+sdFE24cbX4JcYwtMCO0+m+IaqvxCFTYALNbE0gfY Bz3PFsbzdCEJzbBIaBJpGSSbrfYx4WRZCZr7JzGdQQKOR28BmyLry/3tFlOB7Tnl 9MBlNyUbDk5IxVkeOv9A2ioFdVu43ePCkgJo7o9DNZrEEQP59CYiP+r9Liwjf1l8 50g962Xz8JMhJjZeIIHDpoDDL9RNH/ORn0Snvrn8UUbDLLFfVwY0DEn1lrLzyYsc bLHMbn+xOjus9V6ZJxkYmrO5ONGMM0gscjiVnBmRrczkE3zSUHSDBOQY2J/psfRa GqGOyH9MhRlXqpPu54W62bgAQjg7Fktv -----END CERTIFICATE-----Generated at Tue Oct 27 20:33:46 2026 by rpki-client