$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa File: dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa (raw, json) Hash identifier: aL2wj0Kr4x/+nxWcIDeh9Yvhka1i0UDiCFBU5pl6ftk= Subject key identifier: B5:54:AA:D5:55:20:62:D3:E7:B3:8E:C8:A5:9D:F8:95:83:B5:A1:FE Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F498BF98956992394B1FAA700 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13737 IP address blocks: 2604:7580:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f9:89:56:99:23:94:b1:fa:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fcdc3e0-2858-4e8a-a3bc-d66e84378ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:58:f5:f2:ab:b7:a8:00:a5:fe:4e:26:e5: 48:fb:af:d2:c5:27:13:93:d8:ce:88:9c:d8:fd:c2: e7:01:a2:6e:c9:7c:18:ec:48:09:e2:7d:d6:14:ce: 8a:19:36:a5:7d:d0:40:ff:d6:04:aa:a5:ed:9b:b8: 7b:a3:3a:d5:3e:9a:15:1d:37:48:d5:1e:e5:82:cf: ae:87:74:77:b6:15:c8:ca:73:8a:d8:0b:61:6e:15: 18:8b:84:56:27:bb:61:0c:8f:8e:54:72:21:8a:ba: c7:c6:73:7f:9e:48:aa:67:ac:d1:08:4d:c9:06:03: f5:49:a1:46:8c:16:5a:ed:d3:b0:fe:5a:29:01:00: 8f:c7:fe:5a:f0:92:9a:78:4d:4b:ee:ac:71:cc:27: c4:5c:53:64:aa:91:4f:7d:0c:88:c7:12:c7:ac:07: 77:c8:f3:cf:c9:ec:85:44:13:0f:5c:4c:84:ca:fe: 1c:51:c3:4c:9a:c9:d6:dd:cb:20:e7:28:58:8e:5e: 14:84:a8:4d:d1:e5:06:e1:10:32:6c:ac:65:b6:42: 19:ae:b9:aa:e0:ae:a4:97:ce:1e:7a:14:bb:6b:fe: c9:eb:2a:c2:ca:7c:fa:a4:46:26:38:a1:3c:48:d9: 7b:db:fd:ab:b8:ec:de:3f:43:a9:25:79:c4:51:0e: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:AA:D5:55:20:62:D3:E7:B3:8E:C8:A5:9D:F8:95:83:B5:A1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:54:35:20:44:05:da:e6:a7:85:1f:de:a3:f0:30:c9:51:b9: 4c:09:7a:61:4c:fc:d2:18:a6:85:c8:5f:99:ea:75:79:b0:c2: d9:89:83:fc:e4:87:f2:33:6f:0f:08:7f:d7:67:04:9a:86:b3: 38:5b:15:37:1f:95:d9:a8:7d:c3:b7:8e:5a:33:6a:c5:78:a4: 15:51:d4:b2:a4:ee:bd:3a:c6:bf:19:76:b5:97:da:15:b0:c6: 35:65:3f:9d:cd:65:25:c3:1a:e4:8e:91:1e:09:80:7a:d7:82: 30:9c:1b:c0:af:49:1e:ac:f8:bd:da:80:cd:35:e9:0c:e5:54: c9:01:f4:ff:b8:13:be:34:b9:34:d0:ec:f2:ce:18:02:e1:3a: 95:0f:dc:29:6a:b6:ee:36:c8:b3:36:0e:c9:8f:3a:43:f4:6c: 81:76:67:4e:8a:37:90:ec:e4:b5:e0:b4:65:0d:66:a4:b1:b9: c4:0e:c8:4f:5d:d2:a6:38:d9:5a:1d:a1:ac:8f:f3:61:f9:67: cb:45:67:ec:af:df:00:02:3e:6e:7e:f7:99:74:8a:1a:6b:29: 70:b0:e8:c9:2a:15:61:5c:22:a0:b4:c5:b3:bf:c0:c6:41:d0: 79:1f:67:38:0e:55:e9:1b:64:ef:7a:f3:93:38:60:94:74:42: 4e:53:4e:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji/mJVpkjlLH6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZjZGMzZTAtMjg1OC00ZThhLWEzYmMtZDY2ZTg0Mzc4ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMRY9fKrt6gApf5OJuVI+6/SxScTk9jOiJzY /cLnAaJuyXwY7EgJ4n3WFM6KGTalfdBA/9YEqqXtm7h7ozrVPpoVHTdI1R7lgs+u h3R3thXIynOK2AthbhUYi4RWJ7thDI+OVHIhirrHxnN/nkiqZ6zRCE3JBgP1SaFG jBZa7dOw/lopAQCPx/5a8JKaeE1L7qxxzCfEXFNkqpFPfQyIxxLHrAd3yPPPyeyF RBMPXEyEyv4cUcNMmsnW3csg5yhYjl4UhKhN0eUG4RAybKxltkIZrrmq4K6kl84e ehS7a/7J6yrCynz6pEYmOKE8SNl72/2ruOzeP0OpJXnEUQ5OIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVUqtVVIGLT57OOyKWd+JWDtaH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZGFkYjhiOTEtYWU5YS0z ZTRjLTlhOGMtMDZmYWVkZTZjNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9UNSBEBdrmp4Uf3qPwMMlRuUwJemFM/NIYpoXIX5nqdXmwwtmJ g/zkh/Izbw8If9dnBJqGszhbFTcfldmofcO3jlozasV4pBVR1LKk7r06xr8ZdrWX 2hWwxjVlP53NZSXDGuSOkR4JgHrXgjCcG8CvSR6s+L3agM016QzlVMkB9P+4E740 uTTQ7PLOGALhOpUP3Clqtu42yLM2DsmPOkP0bIF2Z06KN5Ds5LXgtGUNZqSxucQO yE9d0qY42VodoayP82H5Z8tFZ+yv3wACPm5+95l0ihprKXCw6MkqFWFcIqC0xbO/ wMZB0HkfZzgOVekbZO9685M4YJR0Qk5TTlQ= -----END CERTIFICATE-----Generated at Sun Oct 25 09:07:15 2026 by rpki-client