$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa File: ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa (raw, json) Hash identifier: gaE9w6nAMswxlKxot8l6wfLjpxZRzESSv4oXSL2/LF4= Subject key identifier: 09:C8:2F:F3:20:FB:23:30:AB:63:AD:8A:45:29:8F:CC:94:9B:E3:71 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584F698D6F15E6C2F56A03131200 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:6f:15:e6:c2:f5:6a:03:13:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=504a2ca8-5b5e-41cd-8494-26db582c3d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:5c:4d:45:77:43:e6:82:f7:9f:69:0a:fd: c8:22:9c:c3:e4:0a:25:88:5a:44:0f:e1:03:5c:c4: 18:7e:e2:a6:e0:4b:f8:5f:8f:e7:57:67:b3:ff:85: bd:4d:9b:35:ac:87:5b:9e:f1:15:1a:93:91:8f:be: 37:51:e1:21:0d:3e:fc:6c:14:e2:20:45:28:e5:7c: 6a:aa:3f:0e:0b:d7:c7:b3:04:b3:b5:74:2e:b7:3b: 69:93:0d:cc:ee:6d:f8:d8:2f:06:8e:37:02:b0:d9: 3d:8d:a8:5a:f5:d4:1d:d5:59:bc:c3:02:3f:e5:01: ca:83:4e:7f:30:8d:0f:5f:b5:3f:da:60:29:3c:0b: 84:07:c0:75:ad:2e:70:18:ab:ae:7e:48:80:1d:48: 61:e3:28:2f:8d:e2:99:20:b0:04:8f:42:1c:8a:a8: a3:dd:12:19:de:53:6f:3d:24:4f:f9:53:de:01:86: be:2a:20:5a:7e:67:fd:23:ab:e6:ea:88:45:f6:6b: 5e:d2:1b:89:38:c1:70:50:cd:15:d1:a3:51:ad:11: f2:95:b5:64:49:de:4e:a8:a0:96:38:ce:49:d1:b4: a0:8e:e0:b7:80:08:f6:d6:f7:fe:4d:df:8d:ae:9f: a0:ff:8a:95:4d:28:8b:a8:3e:22:e1:f5:c1:53:ad: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:2F:F3:20:FB:23:30:AB:63:AD:8A:45:29:8F:CC:94:9B:E3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ec:1f:a0:b9:75:f8:69:9d:03:b9:4d:37:7a:9e:8c:7f:f4: 59:3f:ed:3b:14:20:04:43:bb:93:f3:4c:e8:ed:5b:7b:ba:a0: a4:ec:08:f0:59:a3:45:44:d6:41:4c:b0:4f:25:3a:c1:5a:2e: be:6e:11:2e:26:29:f4:1e:b0:58:50:33:dd:62:e1:0b:78:55: 76:20:6d:cc:d2:16:00:2e:2e:40:b7:ed:e6:53:3c:8a:c2:62: 57:6b:4d:e8:19:04:11:79:ce:d1:be:7e:5e:80:ac:9c:54:48: 0c:15:7b:da:8c:2b:32:b8:80:33:8a:56:78:3f:79:05:5f:d9: fe:d0:48:aa:b9:62:03:67:bc:1e:8b:35:d2:5d:9c:41:8a:39: ee:30:cd:53:c2:de:5d:54:ae:8f:7e:db:3a:97:0e:66:44:01: 52:7e:9a:98:fc:16:56:fc:8e:6d:3f:2d:2a:59:9c:f7:fc:c9: 6e:83:c4:d4:dc:31:e8:d2:4f:58:6f:f1:0e:c6:6c:85:ec:74: 85:87:7b:4d:ec:3f:f9:7a:76:77:1e:aa:1f:1e:d1:ba:25:a0: 05:05:70:92:97:2e:f9:88:5c:39:13:47:4f:a8:c9:a7:af:53: 76:60:7e:0a:b8:b1:23:76:2d:47:9f:eb:bd:1e:9b:fb:d7:e0: 1a:3e:f0:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9pjW8V5sL1agMTEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NTA0YTJjYTgtNWI1ZS00MWNkLTg0OTQtMjZkYjU4MmMzZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6BcTUV3Q+aC959pCv3IIpzD5AoliFpED+ED XMQYfuKm4Ev4X4/nV2ez/4W9TZs1rIdbnvEVGpORj743UeEhDT78bBTiIEUo5Xxq qj8OC9fHswSztXQutztpkw3M7m342C8GjjcCsNk9jaha9dQd1Vm8wwI/5QHKg05/ MI0PX7U/2mApPAuEB8B1rS5wGKuufkiAHUhh4ygvjeKZILAEj0Iciqij3RIZ3lNv PSRP+VPeAYa+KiBafmf9I6vm6ohF9mte0huJOMFwUM0V0aNRrRHylbVkSd5OqKCW OM5J0bSgjuC3gAj21vf+Td+Nrp+g/4qVTSiLqD4i4fXBU6394wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAnIL/Mg+yMwq2OtikUpj8yUm+NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvY2EzZTg5OWQtZTcyNC0z NWU4LThiNDMtY2JkYmU3YzkyZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAu+wfoLl1+GmdA7lNN3qejH/0WT/tOxQgBEO7k/NM6O1be7qgpOwI 8FmjRUTWQUywTyU6wVouvm4RLiYp9B6wWFAz3WLhC3hVdiBtzNIWAC4uQLft5lM8 isJiV2tN6BkEEXnO0b5+XoCsnFRIDBV72owrMriAM4pWeD95BV/Z/tBIqrliA2e8 Hos10l2cQYo57jDNU8LeXVSuj37bOpcOZkQBUn6amPwWVvyObT8tKlmc9/zJboPE 1Nwx6NJPWG/xDsZshex0hYd7Tew/+Xp2dx6qHx7RuiWgBQVwkpcu+YhcORNHT6jJ p69TdmB+CrixI3YtR5/rvR6b+9fgGj7wTw== -----END CERTIFICATE-----Generated at Tue Oct 6 16:00:22 2026 by rpki-client