$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/ca22be92-75f6-31e6-bdd8-7f71d47aea41.roa File: ca22be92-75f6-31e6-bdd8-7f71d47aea41.roa (raw, json) Hash identifier: XdziVUVGA8UlMVfhujhBJbCFrZg4mLkIBwvHjgnWKmY= Subject key identifier: 05:90:F6:1F:73:1F:7C:88:C0:1A:0D:B6:65:1C:8C:8E:84:68:AA:BB Certificate issuer: /CN=8d51925e-a23b-408e-92ac-aab0dd904541 Certificate serial: 010D0C9F4328584F93B2DE0C13D3826E791F6CB0 Authority key identifier: 8F:54:EA:C7:14:87:D2:28:68:31:C3:88:6E:1F:4F:21:CA:81:C8:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/ca22be92-75f6-31e6-bdd8-7f71d47aea41.roa Signing time: Wed 21 Oct 2026 15:19:40 +0000 ROA not before: Wed 21 Oct 2026 15:19:40 +0000 ROA not after: Tue 19 Jan 2027 16:19:40 +0000 asID: 21873 IP address blocks: 2604:8680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/8d51925e-a23b-408e-92ac-aab0dd904541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/8d51925e-a23b-408e-92ac-aab0dd904541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:b2:de:0c:13:d3:82:6e:79:1f:6c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d51925e-a23b-408e-92ac-aab0dd904541 Validity Not Before: Oct 21 15:19:40 2026 GMT Not After : Jan 19 16:19:40 2027 GMT Subject: CN=1e25d1fb-0f28-44b3-95a9-3e1133ad56f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:aa:b9:0d:e5:90:9c:b1:23:63:08:1a:65: fa:2b:1b:a8:11:5a:0d:2f:ad:cd:22:ed:2e:fb:92: aa:fe:9e:b7:0a:23:1e:92:c4:4d:09:66:d9:64:e6: 11:16:3a:5b:a5:dc:01:8f:ce:61:7d:50:d5:b1:3c: 61:f7:a6:cf:3b:cd:90:53:aa:25:9c:fe:57:c2:15: bf:78:2e:c3:3a:ee:4c:aa:bc:91:27:c1:44:25:70: 02:c1:d2:d2:1d:4f:fa:1a:cb:79:05:ab:da:e1:7f: 33:97:85:7d:eb:22:68:a4:12:08:10:cf:95:ec:42: 67:0c:a2:78:3d:29:aa:ed:44:f3:b4:4a:da:ea:9c: 10:de:9b:a4:e8:e7:7a:09:02:fd:d5:3a:ee:66:46: f9:25:cf:a6:f4:ee:27:86:67:ca:35:b1:0b:ee:7f: ae:30:ca:65:88:94:c2:33:6b:09:78:1a:c1:89:c6: ef:2e:39:6e:2e:46:dd:a6:65:31:7c:1a:23:48:6b: 2f:25:f6:82:ea:1f:f9:74:c5:40:ab:c5:56:3c:9a: 4a:84:61:ab:b2:d4:52:ef:72:ad:bb:b0:c7:67:7e: 8b:aa:6a:ea:9b:63:1b:75:c1:59:e7:64:ec:6b:76: ce:d5:8e:b4:4d:af:28:00:15:0e:2f:fa:1b:86:34: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:F6:1F:73:1F:7C:88:C0:1A:0D:B6:65:1C:8C:8E:84:68:AA:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/ca22be92-75f6-31e6-bdd8-7f71d47aea41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541/8d51925e-a23b-408e-92ac-aab0dd904541.crl X509v3 Authority Key Identifier: keyid:8F:54:EA:C7:14:87:D2:28:68:31:C3:88:6E:1F:4F:21:CA:81:C8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8d51925e-a23b-408e-92ac-aab0dd904541.cer sbgp-ipAddrBlock: critical IPv6: 2604:8680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:82:65:f7:2f:7f:57:01:0e:c7:ce:2b:1c:64:6f:a1:a7:fa: 21:ba:7e:71:39:ae:3d:37:d1:d5:0f:ad:6a:de:61:12:dc:37: 52:39:23:e7:7c:0e:6b:b4:61:ea:cd:81:75:33:c3:4e:96:3a: 69:8a:7f:1c:ff:93:37:f4:29:ce:5d:76:49:ff:22:7b:c7:73: 20:1f:db:bc:68:52:9d:11:90:0d:a9:a1:85:95:23:1e:b1:28: 69:1f:ea:fd:3a:00:a8:3a:b9:1c:e0:5b:51:e6:a0:ec:c9:ee: 33:d1:c4:be:9d:36:bd:b9:a3:27:26:73:09:94:c8:c8:db:89: 18:ef:5d:84:cb:ce:bc:9d:fb:99:b8:9a:5b:ee:17:15:ad:b5: 76:00:8d:66:87:6d:a5:bb:9c:de:30:21:5e:af:e1:18:23:b4: eb:ee:a1:b7:6c:61:fb:93:59:09:03:30:aa:f9:d6:d3:a4:47: 11:05:7d:e0:0a:1f:66:39:4c:a8:0d:39:e7:7b:9c:cc:34:63: 1e:69:48:15:9d:2d:04:8b:03:c2:19:4b:fb:cf:59:6f:a4:d7: 6e:e2:0f:80:a1:5c:60:51:ae:e8:f3:76:44:1b:7c:69:b1:e1: c6:57:c8:aa:38:f1:1c:51:43:aa:75:7a:ae:35:e3:22:9e:ab: 42:a3:6a:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+Tst4ME9OCbnkfbLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1MTkyNWUtYTIzYi00MDhlLTkyYWMtYWFiMGRkOTA0 NTQxMB4XDTI2MTAyMTE1MTk0MFoXDTI3MDExOTE2MTk0MFowLzEtMCsGA1UEAxMk MWUyNWQxZmItMGYyOC00NGIzLTk1YTktM2UxMTMzYWQ1NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFSquQ3lkJyxI2MIGmX6KxuoEVoNL63NIu0u +5Kq/p63CiMeksRNCWbZZOYRFjpbpdwBj85hfVDVsTxh96bPO82QU6olnP5XwhW/ eC7DOu5MqryRJ8FEJXACwdLSHU/6Gst5Bava4X8zl4V96yJopBIIEM+V7EJnDKJ4 PSmq7UTztEra6pwQ3puk6Od6CQL91TruZkb5Jc+m9O4nhmfKNbEL7n+uMMpliJTC M2sJeBrBicbvLjluLkbdpmUxfBojSGsvJfaC6h/5dMVAq8VWPJpKhGGrstRS73Kt u7DHZ36Lqmrqm2MbdcFZ52Tsa3bO1Y60Ta8oABUOL/obhjSfmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAWQ9h9zH3yIwBoNtmUcjI6EaKq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZDUx OTI1ZS1hMjNiLTQwOGUtOTJhYy1hYWIwZGQ5MDQ1NDEvY2EyMmJlOTItNzVmNi0z MWU2LWJkZDgtN2Y3MWQ0N2FlYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGQ1MTkyNWUtYTIzYi00MDhlLTky YWMtYWFiMGRkOTA0NTQxLzhkNTE5MjVlLWEyM2ItNDA4ZS05MmFjLWFhYjBkZDkw NDU0MS5jcmwwHwYDVR0jBBgwFoAUj1TqxxSH0ihoMcOIbh9PIcqByFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZDUxOTI1ZS1hMjNiLTQwOGUtOTJhYy1hYWIw ZGQ5MDQ1NDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSGgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzgmX3L39XAQ7HziscZG+hp/ohun5xOa49N9HVD61q3mES3DdSOSPn fA5rtGHqzYF1M8NOljppin8c/5M39CnOXXZJ/yJ7x3MgH9u8aFKdEZANqaGFlSMe sShpH+r9OgCoOrkc4FtR5qDsye4z0cS+nTa9uaMnJnMJlMjI24kY712Ey868nfuZ uJpb7hcVrbV2AI1mh22lu5zeMCFer+EYI7Tr7qG3bGH7k1kJAzCq+dbTpEcRBX3g Ch9mOUyoDTnne5zMNGMeaUgVnS0EiwPCGUv7z1lvpNdu4g+AoVxgUa7o83ZEG3xp seHGV8iqOPEcUUOqdXquNeMinqtCo2oD -----END CERTIFICATE-----Generated at Sat Oct 24 18:52:03 2026 by rpki-client