$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/deea5588-febe-3c19-8e2b-a4aa7e86a25e.roa File: deea5588-febe-3c19-8e2b-a4aa7e86a25e.roa (raw, json) Hash identifier: rqzMSJubFGs6uUbvoamdMozPsOAWn5xeXx5jvw44oLQ= Subject key identifier: D7:DB:42:6B:52:A9:A2:CF:D9:00:12:04:D2:52:2C:18:A5:32:A2:97 Certificate issuer: /CN=a495e8d0-e97c-49f0-896a-05c583672b7d Certificate serial: 010D0C9F4328584FAA62C514BC162FEDB710EC00 Authority key identifier: 23:EA:41:D1:47:99:A8:C7:8C:26:1C:8A:99:55:4B:AB:C8:B8:9B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/deea5588-febe-3c19-8e2b-a4aa7e86a25e.roa Signing time: Thu 29 Oct 2026 18:21:53 +0000 ROA not before: Thu 29 Oct 2026 18:21:53 +0000 ROA not after: Wed 27 Jan 2027 19:21:53 +0000 asID: 54456 IP address blocks: 2607:1b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/a495e8d0-e97c-49f0-896a-05c583672b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/a495e8d0-e97c-49f0-896a-05c583672b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:62:c5:14:bc:16:2f:ed:b7:10:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a495e8d0-e97c-49f0-896a-05c583672b7d Validity Not Before: Oct 29 18:21:53 2026 GMT Not After : Jan 27 19:21:53 2027 GMT Subject: CN=6e2a9183-5aa5-4093-ab1d-87ac3e3912af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:e1:d7:10:5d:e3:21:32:63:96:d7:2d:46: 0f:a1:ea:07:75:2d:ac:fe:be:00:b1:92:d7:66:f8: cc:d2:26:75:42:ff:1b:55:27:3a:33:56:9c:ab:18: 28:15:7f:d4:dd:41:b2:8b:4b:5d:36:fb:90:4f:5a: a0:75:0b:60:cb:50:a2:ff:a3:81:cb:a9:5e:99:4e: 7f:2a:6c:06:ca:b6:37:79:ab:fe:ff:fb:d8:e4:ab: 0c:28:25:5c:b9:2b:6a:19:99:4d:a6:0b:de:f9:98: 80:0c:7d:82:64:7f:a7:a3:7b:a7:b3:9c:d7:31:c2: de:0f:bd:5c:79:49:6a:6d:4d:90:e2:d2:34:1a:a4: e3:65:9e:ff:4d:9e:0a:29:ef:89:e7:7e:68:c4:da: bd:de:eb:e4:0e:28:dc:86:79:51:98:ab:e0:96:2b: 52:bc:39:8f:a5:a7:77:c6:cd:37:34:a2:8f:bf:51: f7:d2:81:ce:8f:a3:8e:23:ed:94:d8:00:53:04:73: 9e:48:1d:b6:97:47:be:5b:32:a6:a3:19:dd:3b:32: 70:c5:6f:f6:9c:52:6c:3c:cf:3c:cc:11:b5:94:69: 9a:a5:96:11:ba:e1:b4:38:1a:b2:92:31:3a:eb:96: 14:66:e1:d1:ad:a1:b9:66:4e:7f:09:83:b4:c4:09: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:42:6B:52:A9:A2:CF:D9:00:12:04:D2:52:2C:18:A5:32:A2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/deea5588-febe-3c19-8e2b-a4aa7e86a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d/a495e8d0-e97c-49f0-896a-05c583672b7d.crl X509v3 Authority Key Identifier: keyid:23:EA:41:D1:47:99:A8:C7:8C:26:1C:8A:99:55:4B:AB:C8:B8:9B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a495e8d0-e97c-49f0-896a-05c583672b7d.cer sbgp-ipAddrBlock: critical IPv6: 2607:1b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2e:ee:4c:4b:9d:6d:55:de:e6:69:62:23:c2:18:6d:b4:0b: 75:3e:ad:23:49:d7:d0:1d:b5:fc:70:25:f7:31:13:11:e7:b9: cd:f5:5a:f3:81:c2:ef:f0:83:46:9d:61:0e:64:2f:ab:09:f3: fb:e4:df:df:07:56:00:af:2e:48:e6:0e:5e:a4:72:d8:7c:7f: 81:ea:36:42:c3:38:79:ba:e4:ab:76:09:ec:f6:2f:61:68:05: cf:02:ec:a1:7a:7b:f6:aa:6b:38:77:76:50:6d:3c:ad:e8:97: 50:f0:85:00:3f:25:1f:26:83:c0:47:49:15:e3:16:1b:94:de: 2a:16:48:f8:fc:73:8e:b0:be:86:d1:64:2e:aa:9d:14:ce:23: 29:ee:f9:74:a6:cc:94:28:1d:3d:f0:59:c0:fb:1a:0f:0a:f5: db:96:54:30:86:46:00:38:74:ab:4a:56:d9:3e:f0:8d:7e:c4: 60:89:40:5b:f1:6b:8b:17:db:a9:02:30:86:44:52:fe:fa:0a: a1:8e:c0:19:d4:1b:97:d7:98:b7:f9:61:d5:e9:31:00:fd:ee: 5a:98:f1:9f:9d:73:1c:01:e8:05:86:42:28:77:1c:51:a4:01: 1b:c7:04:45:3e:c0:8b:c9:4a:d9:78:75:21:39:b8:01:c3:da: 4f:d9:cb:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+qYsUUvBYv7bcQ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ5NWU4ZDAtZTk3Yy00OWYwLTg5NmEtMDVjNTgzNjcy YjdkMB4XDTI2MTAyOTE4MjE1M1oXDTI3MDEyNzE5MjE1M1owLzEtMCsGA1UEAxMk NmUyYTkxODMtNWFhNS00MDkzLWFiMWQtODdhYzNlMzkxMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI7h1xBd4yEyY5bXLUYPoeoHdS2s/r4AsZLX ZvjM0iZ1Qv8bVSc6M1acqxgoFX/U3UGyi0tdNvuQT1qgdQtgy1Ci/6OBy6lemU5/ KmwGyrY3eav+//vY5KsMKCVcuStqGZlNpgve+ZiADH2CZH+no3uns5zXMcLeD71c eUlqbU2Q4tI0GqTjZZ7/TZ4KKe+J535oxNq93uvkDijchnlRmKvglitSvDmPpad3 xs03NKKPv1H30oHOj6OOI+2U2ABTBHOeSB22l0e+WzKmoxndOzJwxW/2nFJsPM88 zBG1lGmapZYRuuG0OBqykjE665YUZuHRraG5Zk5/CYO0xAlU6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNfbQmtSqaLP2QASBNJSLBilMqKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNDk1 ZThkMC1lOTdjLTQ5ZjAtODk2YS0wNWM1ODM2NzJiN2QvZGVlYTU1ODgtZmViZS0z YzE5LThlMmItYTRhYTdlODZhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYTQ5NWU4ZDAtZTk3Yy00OWYwLTg5 NmEtMDVjNTgzNjcyYjdkL2E0OTVlOGQwLWU5N2MtNDlmMC04OTZhLTA1YzU4MzY3 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUI+pB0UeZqMeMJhyKmVVLq8i4m78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9hNDk1ZThkMC1lOTdjLTQ5ZjAtODk2YS0wNWM1 ODM2NzJiN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8Lu5MS51tVd7maWIjwhhttAt1Pq0jSdfQHbX8cCX3MRMR57nN9Vrz gcLv8INGnWEOZC+rCfP75N/fB1YAry5I5g5epHLYfH+B6jZCwzh5uuSrdgns9i9h aAXPAuyhenv2qms4d3ZQbTyt6JdQ8IUAPyUfJoPAR0kV4xYblN4qFkj4/HOOsL6G 0WQuqp0UziMp7vl0psyUKB098FnA+xoPCvXbllQwhkYAOHSrSlbZPvCNfsRgiUBb 8WuLF9upAjCGRFL++gqhjsAZ1BuX15i3+WHV6TEA/e5amPGfnXMcAegFhkIodxxR pAEbxwRFPsCLyUrZeHUhObgBw9pP2ct1 -----END CERTIFICATE-----Generated at Wed Nov 4 16:19:57 2026 by rpki-client