$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa File: 85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json) Hash identifier: pcz8eaNQW0qisBm4p5lT7sW3XRBWU+pnbInieqcFpPQ= Subject key identifier: 33:87:A8:71:D4:6F:2A:46:EA:7C:07:C1:6E:41:E3:A7:7B:B5:12:87 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584F63F80F68728591F645C819F8 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 6653 IP address blocks: 2604:280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0f:68:72:85:91:f6:45:c8:19:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=32a17c56-10a2-466a-92da-7489b8955131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:9b:a4:7a:14:cc:63:3c:a6:b2:55:37:b6: 6f:dd:2e:66:42:7d:d1:04:8c:c2:79:2e:f3:29:6d: f0:16:e5:ff:11:dc:74:8a:ab:bc:9f:a2:8f:06:59: 33:d6:4c:7b:e0:ed:9d:85:ef:20:07:e3:fd:d3:1c: ab:4b:7b:8c:5c:2a:46:41:2a:f5:23:7d:b8:b4:c9: cd:7e:04:39:27:dd:ec:48:21:1d:33:c6:6b:29:35: f6:fc:be:bd:1f:2a:9c:13:98:e3:4f:a0:ae:d7:35: b4:60:aa:2d:6f:2d:51:ee:f2:f1:79:82:06:1d:14: 43:35:ea:38:63:ed:7f:a8:92:4c:51:85:04:fa:a7: f7:2e:0f:23:f0:e5:7c:5f:fc:b1:a9:30:24:1b:ad: 3a:6d:1e:d9:dc:9d:86:6a:85:fc:77:e3:10:44:0d: 16:6a:90:46:98:5e:07:90:6b:fb:b3:97:df:dd:9a: d7:13:8e:ef:f9:a9:74:73:73:9b:c7:4f:6d:6c:1b: 18:cc:0e:84:69:05:78:60:59:e9:5f:10:26:61:37: 86:0b:de:4f:8d:a8:c8:75:cd:e5:26:de:83:5b:02: 3a:23:52:ab:92:13:36:09:35:bb:a5:a6:90:e3:6b: 0a:ce:39:05:05:d6:52:d6:3c:7d:ee:e4:7d:01:0a: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:87:A8:71:D4:6F:2A:46:EA:7C:07:C1:6E:41:E3:A7:7B:B5:12:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv6: 2604:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:85:00:48:15:c7:9c:88:44:2f:24:06:50:a1:cf:0e:b6:7e: 72:10:e6:03:b6:6b:9f:70:6b:1b:32:fe:a1:68:f7:f9:02:79: a5:89:af:2d:40:56:3d:11:cb:b8:6d:d1:ed:0d:27:e4:85:66: 9c:f9:71:b7:3d:45:8d:2c:11:c8:25:c7:bd:65:2e:61:4d:fb: 59:82:13:9d:98:b7:91:f1:3c:ea:7d:f2:b2:ab:54:e6:a6:c5: 37:65:63:c8:67:c5:26:34:b9:cd:35:3c:cd:b1:10:99:7c:c1: 3a:eb:45:e6:9a:16:7b:5d:78:5d:a8:3d:c2:2b:a6:52:b4:9e: 49:15:50:72:e1:42:10:cf:78:9e:05:fa:0a:a2:75:5a:ca:c1: ed:d5:80:86:6a:24:fa:7e:71:52:e4:1b:a6:27:f5:9b:30:96: b5:1b:33:e8:08:c2:8b:3b:9b:57:bc:24:ba:83:e6:5c:c7:b4: 3a:e7:84:0b:ac:81:9a:05:4c:d6:c2:ef:e3:f6:8e:be:72:55: 7f:9e:e8:26:d0:35:43:e4:4b:48:ee:9c:7a:fc:52:73:fa:19: c5:b0:43:ac:2a:fb:e9:7f:58:e9:e2:82:bd:ca:46:9b:2a:c3: 5d:15:3a:31:84:27:6c:18:bb:ff:01:70:03:2f:f1:6b:48:93: 15:0d:5d:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+A9ocoWR9kXIGfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzJhMTdjNTYtMTBhMi00NjZhLTkyZGEtNzQ4OWI4OTU1MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHCbpHoUzGM8prJVN7Zv3S5mQn3RBIzCeS7z KW3wFuX/Edx0iqu8n6KPBlkz1kx74O2dhe8gB+P90xyrS3uMXCpGQSr1I324tMnN fgQ5J93sSCEdM8ZrKTX2/L69HyqcE5jjT6Cu1zW0YKotby1R7vLxeYIGHRRDNeo4 Y+1/qJJMUYUE+qf3Lg8j8OV8X/yxqTAkG606bR7Z3J2GaoX8d+MQRA0WapBGmF4H kGv7s5ff3ZrXE47v+al0c3Obx09tbBsYzA6EaQV4YFnpXxAmYTeGC95PjajIdc3l Jt6DWwI6I1KrkhM2CTW7paaQ42sKzjkFBdZS1jx97uR9AQpM5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDOHqHHUbypG6nwHwW5B46d7tRKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvODViYmEyMmEtMzFkNy0z Mjc3LTlkMjMtM2YyNTNlN2Q0MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyhQBIFceciEQvJAZQoc8Otn5yEOYDtmufcGsbMv6haPf5Anmlia8t QFY9Ecu4bdHtDSfkhWac+XG3PUWNLBHIJce9ZS5hTftZghOdmLeR8TzqffKyq1Tm psU3ZWPIZ8UmNLnNNTzNsRCZfME660XmmhZ7XXhdqD3CK6ZStJ5JFVBy4UIQz3ie BfoKonVaysHt1YCGaiT6fnFS5BumJ/WbMJa1GzPoCMKLO5tXvCS6g+Zcx7Q654QL rIGaBUzWwu/j9o6+clV/nugm0DVD5EtI7px6/FJz+hnFsEOsKvvpf1jp4oK9ykab KsNdFToxhCdsGLv/AXADL/FrSJMVDV21 -----END CERTIFICATE-----Generated at Tue Oct 6 11:33:27 2026 by rpki-client