$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/c7bda1bc-036f-370d-8fc3-5a890298f8e3.roa File: c7bda1bc-036f-370d-8fc3-5a890298f8e3.roa (raw, json) Hash identifier: oUecAWZeiIOhJ8VabrXPhRUFtJ3kmOCkSV2njRSBkJc= Subject key identifier: E8:CB:1C:B9:C2:C0:49:DF:6C:30:83:B7:B6:23:56:58:E3:BC:87:46 Certificate issuer: /CN=a4bcdcde-0df9-4f5c-a110-23c7b368baf9 Certificate serial: 010D0C9F4328584FAA2429EA4D4334C093B0C240 Authority key identifier: 9F:CF:E8:CE:D7:19:AE:AE:14:34:E8:35:A0:9D:17:8E:EB:F9:68:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/c7bda1bc-036f-370d-8fc3-5a890298f8e3.roa Signing time: Thu 29 Oct 2026 16:15:44 +0000 ROA not before: Thu 29 Oct 2026 16:15:44 +0000 ROA not after: Wed 27 Jan 2027 17:15:44 +0000 asID: 22990 IP address blocks: 2620:89:8000::/48 maxlen: 48 2620:123:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:24:29:ea:4d:43:34:c0:93:b0:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcdcde-0df9-4f5c-a110-23c7b368baf9 Validity Not Before: Oct 29 16:15:44 2026 GMT Not After : Jan 27 17:15:44 2027 GMT Subject: CN=20aa9ac7-f2cf-4b93-972d-d4709b377b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:a9:f2:e8:92:61:e2:d4:c8:07:8d:79:a5: fa:b7:f9:ce:8a:01:5b:9c:52:6d:8d:2e:f1:21:fd: 4c:7d:44:4c:fc:51:de:50:92:96:40:46:f7:d2:be: ab:92:56:1b:6b:33:bb:60:51:fc:6f:eb:bd:fc:72: ab:b5:53:b6:d1:b0:5e:24:61:95:7d:6f:0f:bb:4f: 86:44:fa:ed:89:4e:1b:fe:86:16:f3:d5:b6:c5:eb: 8a:d1:9a:a6:37:5c:0c:ee:b6:a0:b1:35:6e:7c:b9: d2:33:36:37:18:86:38:e3:6a:cb:f6:97:08:ed:44: e8:8d:22:c1:af:14:ea:42:6f:64:83:c0:73:ba:a6: 2f:80:b7:a2:9e:c1:b9:92:14:6d:39:86:49:39:dd: 68:65:1f:53:d5:44:54:7c:ea:c4:85:7f:63:bf:01: 9c:39:88:e7:93:d5:39:56:b8:97:92:7e:8a:18:92: ac:fc:4a:96:44:60:7d:15:e8:3b:84:22:2d:6f:7a: 39:46:29:ec:a7:6c:cf:d0:ff:78:a3:d8:8f:65:d2: 5b:60:94:8f:b8:d4:0e:7e:53:3f:d5:c8:24:1b:97: a9:e6:6b:34:b8:7d:4a:53:7c:66:74:a5:10:25:f9: 62:c3:d0:9a:16:66:90:00:3d:01:b0:4d:28:69:f1: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CB:1C:B9:C2:C0:49:DF:6C:30:83:B7:B6:23:56:58:E3:BC:87:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/c7bda1bc-036f-370d-8fc3-5a890298f8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.crl X509v3 Authority Key Identifier: keyid:9F:CF:E8:CE:D7:19:AE:AE:14:34:E8:35:A0:9D:17:8E:EB:F9:68:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a4bcdcde-0df9-4f5c-a110-23c7b368baf9.cer sbgp-ipAddrBlock: critical IPv6: 2620:89:8000::/48 2620:123:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:16:16:ef:22:eb:a4:c2:bd:83:76:3d:c9:a1:02:19:ce:a8: 52:a0:54:6e:e9:c4:e6:11:52:a0:64:9a:38:8e:e7:b2:15:07: 18:f6:91:a6:41:1f:04:ab:f2:7e:77:cf:2f:c3:9f:70:94:05: 60:64:4d:4f:91:2e:64:bb:69:b4:06:6a:4a:76:3e:a6:44:bd: 49:b7:5c:6f:7f:27:05:e2:a0:11:91:f8:53:a3:7f:77:8b:8d: 1f:1d:9d:64:95:8c:a8:73:ca:73:9b:89:ef:b7:5a:8c:8f:ab: 0a:00:d9:41:54:ee:a2:4c:69:4e:fa:fe:88:69:04:e0:38:49: f4:e3:e9:4a:07:20:eb:f2:c1:57:34:af:38:ba:d1:00:a2:6f: 27:53:47:be:b5:dc:66:61:0c:ef:b9:1a:68:30:3d:fc:17:5f: 6e:0c:99:32:f8:49:ab:2d:4a:1e:8d:4d:be:05:2e:b7:01:93: a8:ee:48:a8:ad:fa:6d:14:9d:72:4f:c0:1d:d7:7c:b1:c5:03: 1b:65:74:25:2e:b3:cb:44:21:5e:bb:61:2b:3e:78:29:19:26: c6:11:bf:9f:c0:32:f4:d7:f1:d1:e6:09:d8:49:f4:e8:f8:a8: e4:9c:f8:e5:c9:a5:cb:3a:2f:84:d0:2e:c3:55:70:81:7e:af: bd:20:14:4b -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE+qJCnqTUM0wJOwwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiY2RjZGUtMGRmOS00ZjVjLWExMTAtMjNjN2IzNjhi YWY5MB4XDTI2MTAyOTE2MTU0NFoXDTI3MDEyNzE3MTU0NFowLzEtMCsGA1UEAxMk MjBhYTlhYzctZjJjZi00YjkzLTk3MmQtZDQ3MDliMzc3YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv2p8uiSYeLUyAeNeaX6t/nOigFbnFJtjS7x If1MfURM/FHeUJKWQEb30r6rklYbazO7YFH8b+u9/HKrtVO20bBeJGGVfW8Pu0+G RPrtiU4b/oYW89W2xeuK0ZqmN1wM7ragsTVufLnSMzY3GIY442rL9pcI7UTojSLB rxTqQm9kg8BzuqYvgLeinsG5khRtOYZJOd1oZR9T1URUfOrEhX9jvwGcOYjnk9U5 VriXkn6KGJKs/EqWRGB9Feg7hCItb3o5Rinsp2zP0P94o9iPZdJbYJSPuNQOflM/ 1cgkG5ep5ms0uH1KU3xmdKUQJfliw9CaFmaQAD0BsE0oafFa/wIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFOjLHLnCwEnfbDCDt7YjVljjvIdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNGJj ZGNkZS0wZGY5LTRmNWMtYTExMC0yM2M3YjM2OGJhZjkvYzdiZGExYmMtMDM2Zi0z NzBkLThmYzMtNWE4OTAyOThmOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYTRiY2RjZGUtMGRmOS00ZjVjLWEx MTAtMjNjN2IzNjhiYWY5L2E0YmNkY2RlLTBkZjktNGY1Yy1hMTEwLTIzYzdiMzY4 YmFmOS5jcmwwHwYDVR0jBBgwFoAUn8/oztcZrq4UNOg1oJ0Xjuv5aKMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9hNGJjZGNkZS0wZGY5LTRmNWMtYTExMC0yM2M3 YjM2OGJhZjkuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAJiAAiYAA AwYAJiABI0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAyRYW7yLrpMK9g3Y9yaECGc6oUqBUbunE5hFSoGSa OI7nshUHGPaRpkEfBKvyfnfPL8OfcJQFYGRNT5EuZLtptAZqSnY+pkS9Sbdcb38n BeKgEZH4U6N/d4uNHx2dZJWMqHPKc5uJ77dajI+rCgDZQVTuokxpTvr+iGkE4DhJ 9OPpSgcg6/LBVzSvOLrRAKJvJ1NHvrXcZmEM77kaaDA9/BdfbgyZMvhJqy1KHo1N vgUutwGTqO5IqK36bRSdck/AHdd8scUDG2V0JS6zy0QhXrthKz54KRkmxhG/n8Ay 9Nfx0eYJ2En06Pio5Jz45cmlyzovhNAuw1VwgX6vvSAUSw== -----END CERTIFICATE-----Generated at Mon Nov 2 07:09:35 2026 by rpki-client