$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa File: f871407c-c2bc-3d6c-8715-048a48274b19.roa (raw, json) Hash identifier: HTUx6RHJHJ7Fs/HiFt1vWH4ilsfKqzKLqnh8uvvWiYE= Subject key identifier: 8F:03:7B:31:9E:7B:DE:02:F6:06:92:F8:C3:84:42:63:B6:62:6C:63 Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Certificate serial: 010D0C9F4328584F655D7DC7FB87C49E62A1BB80 Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 21693 IP address blocks: 2620:18b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7d:c7:fb:87:c4:9e:62:a1:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=4136cfaa-b4e0-46e7-9d2f-9d58d9a83f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:89:29:ce:fa:57:2a:28:c6:b2:84:a2:63:85: fa:0d:6f:d9:0e:3e:c1:69:a7:5f:86:3d:c4:50:cf: 2a:82:c4:d2:fb:d9:14:db:8d:8f:ad:11:5f:04:ba: a9:5b:fe:81:fb:e4:57:cb:a9:46:8e:b1:f3:8f:50: 13:05:e7:35:b4:ac:bf:89:04:3f:f2:47:28:dc:16: a9:61:d9:a5:b6:37:97:d2:75:bd:bc:51:54:90:9c: c6:f7:f0:89:6e:90:69:9f:af:fc:44:d0:f7:54:66: 51:9a:e8:ea:b6:e0:a1:7b:2e:cf:b0:1f:bf:b9:f4: ce:a8:7f:09:2f:00:4a:75:57:ba:c2:ee:d6:35:66: d5:6a:4c:e3:4d:64:64:86:ad:d4:b3:62:2e:37:0c: 3a:58:94:a1:2c:5e:25:c9:33:c5:bf:99:5a:64:64: 8b:c3:d2:0b:4a:0a:e8:ee:83:e3:31:ef:8a:e5:e1: d3:96:5b:cf:b4:ee:4a:27:98:fd:b1:80:99:6b:e4: d8:a0:04:a2:52:83:20:71:29:80:b5:17:b8:53:56: db:36:8f:c3:ff:63:71:0d:24:7f:42:c5:6b:7f:39: 10:5c:bc:5c:f9:d8:93:68:7e:68:82:43:0a:82:71: 24:71:69:62:17:f6:94:18:03:e4:84:d1:91:ec:4d: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:03:7B:31:9E:7B:DE:02:F6:06:92:F8:C3:84:42:63:B6:62:6C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl X509v3 Authority Key Identifier: keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer sbgp-ipAddrBlock: critical IPv6: 2620:18b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e7:42:15:64:0f:b8:7e:75:95:b9:3a:11:2d:c8:ed:ad:40: f1:ac:36:4e:2d:84:6c:38:08:d8:2b:fe:43:0d:4d:73:9c:64: 86:0b:48:be:5a:c6:71:20:57:f8:ac:6d:8a:28:da:ad:37:81: 3b:5f:56:fb:bc:a2:9c:2e:55:83:31:1c:f7:5c:e2:31:35:91: de:c6:7d:5a:86:44:5d:58:63:4e:32:c6:02:a9:cc:58:ab:1a: e0:cf:e6:3f:d2:a0:47:7f:0f:89:87:d3:0d:53:98:20:a9:3c: 18:3b:e0:e8:8e:a3:52:2b:b9:b4:ba:3c:bf:47:88:ff:b6:84: 4b:71:c9:1e:bf:af:75:78:5e:a4:73:76:88:33:86:ad:ba:05: c8:07:de:5d:68:5f:f9:cb:2b:37:22:56:95:6b:33:bd:54:6c: 8c:b6:dd:80:c3:22:87:a3:96:6e:fd:ab:70:99:20:e7:40:e7: e2:2e:8a:ab:88:b8:05:ea:d0:4f:e2:74:75:47:26:9b:f3:17: 57:3d:d6:ff:1d:12:71:7e:83:bf:c0:83:0b:f0:6a:56:f7:13: fc:41:cb:e6:65:55:21:92:67:36:92:cd:ca:d1:c4:5a:10:2a: 76:8f:cc:9d:f8:a7:b3:16:a1:ca:5a:82:75:e5:4a:0e:3d:3d: e2:32:2d:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9lXX3H+4fEnmKhu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVk MTE5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDEzNmNmYWEtYjRlMC00NmU3LTlkMmYtOWQ1OGQ5YTgzZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7okpzvpXKijGsoSiY4X6DW/ZDj7Baadfhj3E UM8qgsTS+9kU242PrRFfBLqpW/6B++RXy6lGjrHzj1ATBec1tKy/iQQ/8kco3Bap YdmltjeX0nW9vFFUkJzG9/CJbpBpn6/8RND3VGZRmujqtuChey7PsB+/ufTOqH8J LwBKdVe6wu7WNWbVakzjTWRkhq3Us2IuNww6WJShLF4lyTPFv5laZGSLw9ILSgro 7oPjMe+K5eHTllvPtO5KJ5j9sYCZa+TYoASiUoMgcSmAtRe4U1bbNo/D/2NxDSR/ QsVrfzkQXLxc+diTaH5ogkMKgnEkcWliF/aUGAPkhNGR7E07EwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI8DezGee94C9gaS+MOEQmO2YmxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMjll MzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvZjg3MTQwN2MtYzJiYy0z ZDZjLTg3MTUtMDQ4YTQ4Mjc0YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTI5ZTM2NzQtYWNjNi00ODU4LWIw ZjEtN2EyZGFhYWVkMTE5L2EyOWUzNjc0LWFjYzYtNDg1OC1iMGYxLTdhMmRhYWFl ZDExOS5jcmwwHwYDVR0jBBgwFoAUml1tM1p2OnrYfTyiJ/n5DI1sO48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJk YWFhZWQxMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABizBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA550IVZA+4fnWVuToRLcjtrUDxrDZOLYRsOAjYK/5DDU1znGSGC0i+ WsZxIFf4rG2KKNqtN4E7X1b7vKKcLlWDMRz3XOIxNZHexn1ahkRdWGNOMsYCqcxY qxrgz+Y/0qBHfw+Jh9MNU5ggqTwYO+DojqNSK7m0ujy/R4j/toRLcckev691eF6k c3aIM4atugXIB95daF/5yys3IlaVazO9VGyMtt2AwyKHo5Zu/atwmSDnQOfiLoqr iLgF6tBP4nR1Ryab8xdXPdb/HRJxfoO/wIML8GpW9xP8QcvmZVUhkmc2ks3K0cRa ECp2j8yd+KezFqHKWoJ15UoOPT3iMi3X -----END CERTIFICATE-----Generated at Sun Nov 1 19:40:58 2026 by rpki-client