$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa File: 11a84558-2701-3ca2-aa55-25004f14db36.roa (raw, json) Hash identifier: BCtFmRvBeIsScC/+Xb4/AE/nEHnEzOtU8icSlhy/pXA= Subject key identifier: 56:11:84:50:88:EB:B2:3A:FB:38:67:A4:65:0A:D9:07:59:E5:F1:29 Certificate issuer: /CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Certificate serial: 010D0C9F4328584FA42DF0B09BD4C61146227880 Authority key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 10352 IP address blocks: 2605:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:f0:b0:9b:d4:c6:11:46:22:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=90be764a-4502-4608-9e6f-959e04b92f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:5d:05:a7:9c:38:cd:64:35:2e:9c:a1:51: 67:b9:dd:e0:9c:8f:81:da:15:19:90:cf:84:cb:3e: f3:88:42:98:08:5e:c9:8d:01:02:0e:fc:55:2e:ff: bb:84:16:31:81:2e:88:0f:5e:d0:b7:46:90:42:2c: 00:da:d9:07:10:70:43:7f:67:40:b9:ae:48:67:3c: b2:61:91:cf:50:90:88:a7:99:62:dd:bb:b5:92:3f: 38:53:bb:56:66:4e:a8:2e:97:26:dd:0c:b9:c2:75: ec:dd:d9:dc:bb:07:a0:63:04:6e:73:c7:7b:ec:01: a3:71:9d:b1:50:92:82:0c:a6:a8:81:2a:08:a6:f6: 70:fc:2a:05:d5:c4:50:ee:f3:33:65:1e:61:f9:00: 3f:27:3a:da:91:26:38:f6:af:d5:63:e2:2d:11:02: b4:3c:b4:0f:45:82:1a:98:f3:c4:b7:19:eb:b0:88: 44:27:36:75:33:b1:29:e1:08:f1:0b:84:50:0a:03: ed:dc:30:89:dc:35:ba:5a:35:7d:60:4f:60:73:66: c0:1a:f0:1e:ca:8c:3b:4f:41:8b:e8:61:7b:a9:3e: 55:44:4e:4b:2f:76:ac:21:00:16:93:6f:49:9b:8c: 39:f8:9e:51:fd:6f:78:a1:3c:ee:58:37:bd:50:43: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:84:50:88:EB:B2:3A:FB:38:67:A4:65:0A:D9:07:59:E5:F1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/11a84558-2701-3ca2-aa55-25004f14db36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl X509v3 Authority Key Identifier: keyid:C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer sbgp-ipAddrBlock: critical IPv6: 2605:7240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c2:0d:37:ab:87:0f:11:68:7c:ce:5c:1f:42:08:8b:46:f2: 3a:7a:7d:38:b1:e2:56:e7:0b:24:06:bf:93:ff:50:59:fb:34: da:b2:6d:d0:81:ff:33:90:7d:87:ef:1d:9d:88:36:88:87:5b: 43:42:46:1f:f8:11:cc:75:97:be:69:24:e0:fa:ea:a5:6d:28: 4e:de:6d:c7:67:8f:44:6c:01:54:be:36:37:47:9c:60:3c:fb: c0:d8:a2:2d:35:26:4b:30:c5:34:fa:4a:14:f2:8c:d6:96:91: 5c:9f:fa:dd:87:45:5e:fc:48:18:27:09:ef:3c:bc:f2:47:6e: 87:4d:07:85:5d:d0:3c:d0:8f:86:99:01:e7:ad:1f:73:8a:9b: ed:31:21:f5:be:1f:79:ad:52:0f:11:8a:5b:53:8e:8c:d7:25: bf:52:e8:8f:d4:35:90:4f:e1:36:88:fd:83:9e:86:3b:f4:fb: 84:17:b0:1a:93:ca:4a:01:12:9f:66:68:e8:3a:ee:58:70:be: 66:0f:88:bd:42:bb:cd:34:7e:e9:61:c2:4c:c4:25:b9:79:1a: 7a:b7:d3:16:48:f8:e8:7e:4c:e9:b5:d3:06:91:3c:8d:20:11: 91:58:46:59:95:32:12:86:fb:f0:b2:f3:6b:cc:7b:4f:b3:4a: 47:05:89:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+kLfCwm9TGEUYieIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJlZjljMTYtMmQ0NS00ZThjLWIwMzUtNDlkMzAzMThj MTBmMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk OTBiZTc2NGEtNDUwMi00NjA4LTllNmYtOTU5ZTA0YjkyZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3pdBaecOM1kNS6coVFnud3gnI+B2hUZkM+E yz7ziEKYCF7JjQECDvxVLv+7hBYxgS6ID17Qt0aQQiwA2tkHEHBDf2dAua5IZzyy YZHPUJCIp5li3bu1kj84U7tWZk6oLpcm3Qy5wnXs3dncuwegYwRuc8d77AGjcZ2x UJKCDKaogSoIpvZw/CoF1cRQ7vMzZR5h+QA/JzrakSY49q/VY+ItEQK0PLQPRYIa mPPEtxnrsIhEJzZ1M7Ep4QjxC4RQCgPt3DCJ3DW6WjV9YE9gc2bAGvAeyow7T0GL 6GF7qT5VRE5LL3asIQAWk29Jm4w5+J5R/W94oTzuWDe9UEN/XwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFYRhFCI67I6+zhnpGUK2QdZ5fEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVm OWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMxOGMxMGYvMTFhODQ1NTgtMjcwMS0z Y2EyLWFhNTUtMjUwMDRmMTRkYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzJlZjljMTYtMmQ0NS00ZThjLWIw MzUtNDlkMzAzMThjMTBmLzcyZWY5YzE2LTJkNDUtNGU4Yy1iMDM1LTQ5ZDMwMzE4 YzEwZi5jcmwwHwYDVR0jBBgwFoAUwJQaHpV5r81TL2aPT9JfY/dqqIgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQz MDMxOGMxMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4wg03q4cPEWh8zlwfQgiLRvI6en04seJW5wskBr+T/1BZ+zTasm3Q gf8zkH2H7x2diDaIh1tDQkYf+BHMdZe+aSTg+uqlbShO3m3HZ49EbAFUvjY3R5xg PPvA2KItNSZLMMU0+koU8ozWlpFcn/rdh0Ve/EgYJwnvPLzyR26HTQeFXdA80I+G mQHnrR9zipvtMSH1vh95rVIPEYpbU46M1yW/UuiP1DWQT+E2iP2DnoY79PuEF7Aa k8pKARKfZmjoOu5YcL5mD4i9QrvNNH7pYcJMxCW5eRp6t9MWSPjofkzptdMGkTyN IBGRWEZZlTIShvvwsvNrzHtPs0pHBYkC -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:57 2026 by rpki-client