$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/db0f46aa-d1ca-3517-bb60-d2db684c3af7.roa File: db0f46aa-d1ca-3517-bb60-d2db684c3af7.roa (raw, json) Hash identifier: 2zkBw3ovXdxIMDiC4jU43lbuzQiTU9Zi1dY+OUDvkp4= Subject key identifier: 78:F3:48:4A:E5:A4:8D:7A:1B:60:D5:0E:AF:46:13:1E:79:EE:5B:8E Certificate issuer: /CN=e928f0e9-de53-4e4f-9c6d-1fef379ad6d7 Certificate serial: 010D0C9F4328584F7352D4EF0CA18FEC66BD6E80 Authority key identifier: 13:84:B4:BC:3C:37:EF:47:BF:53:17:BD:01:47:47:7F:6A:64:FC:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/db0f46aa-d1ca-3517-bb60-d2db684c3af7.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 13687 IP address blocks: 2604:ea40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:d4:ef:0c:a1:8f:ec:66:bd:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e928f0e9-de53-4e4f-9c6d-1fef379ad6d7 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=aa974532-bfe2-4136-aa94-ef5657e3f8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:bb:28:1e:ac:b6:b2:11:50:76:7e:06:35: 86:be:43:a1:12:5c:88:6b:79:cb:c7:ca:65:6d:68: b2:10:f0:47:f8:8d:19:92:b1:c0:f9:11:9b:ff:63: f9:bc:f4:6b:73:e2:d1:42:b1:4a:aa:16:6b:53:dd: 99:58:b5:ba:ce:ed:6e:76:21:da:12:d3:26:be:8a: 45:ea:05:c2:bf:48:89:0a:cb:13:e4:2c:8e:ce:16: 51:ec:db:c5:72:eb:dd:be:a7:b0:43:28:b7:83:78: 2c:0d:0e:af:88:a3:96:ca:5a:db:dd:45:bb:5c:2c: 9f:64:1b:c3:6f:b7:c6:f8:d6:ce:96:c2:52:2c:f5: 62:68:c4:a8:97:e2:25:2d:fe:e4:46:86:e1:2a:7a: 74:42:0a:bd:98:c3:b3:9f:2f:2f:43:f2:a9:2d:7b: 38:bb:4f:df:69:5f:22:e6:d8:41:e8:c5:72:1d:07: cf:93:bb:e2:c4:31:1c:5c:78:e0:f4:c0:22:81:68: 85:e9:fb:2f:89:ba:7a:5e:d9:cd:8e:39:76:e7:48: 28:bd:46:23:00:cc:08:f3:c7:e1:38:39:fe:c2:33: 6a:5d:0f:a7:8f:a5:f5:71:51:33:f3:32:d2:23:de: dd:95:e3:cf:ae:93:e1:37:d2:3e:b2:ca:bb:62:90: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F3:48:4A:E5:A4:8D:7A:1B:60:D5:0E:AF:46:13:1E:79:EE:5B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/db0f46aa-d1ca-3517-bb60-d2db684c3af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.crl X509v3 Authority Key Identifier: keyid:13:84:B4:BC:3C:37:EF:47:BF:53:17:BD:01:47:47:7F:6A:64:FC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e928f0e9-de53-4e4f-9c6d-1fef379ad6d7.cer sbgp-ipAddrBlock: critical IPv6: 2604:ea40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9a:7a:6d:33:8e:21:7b:4b:7f:3e:8a:09:32:5d:3d:7a:fe: af:e1:ac:73:8b:78:82:f1:9f:e5:48:25:7a:fc:54:37:e6:38: c7:fc:80:4d:c5:bb:13:8a:78:c1:38:91:b6:bb:44:2f:b2:04: 8a:36:4e:ec:bf:41:46:c0:81:4d:18:aa:92:07:e8:40:b2:2d: d0:d4:61:28:38:00:50:ff:fc:ff:6d:ad:c0:55:e1:44:ee:9a: f0:97:d0:22:d8:90:a0:d9:da:7f:4d:18:cc:ec:f6:86:cc:51: 76:8c:7c:ec:a1:f0:63:82:50:2a:da:0e:4e:e9:8f:3c:bf:e5: 32:c2:04:f8:81:34:0d:92:c4:b5:84:c9:6e:74:00:71:68:16: 60:a0:d5:07:48:39:d2:b4:0c:38:42:58:bb:ba:95:be:85:c6: cc:3e:36:c4:33:eb:59:6d:b8:27:40:be:e8:8f:0a:6b:19:95: d1:3a:32:88:4e:0c:eb:09:b2:79:36:4b:84:fb:9f:c8:7d:89: 83:bf:6b:8e:42:c6:03:c8:05:ee:92:29:9c:fa:f8:ae:45:38: ee:84:c9:5b:84:f1:ad:1e:93:50:8a:1b:64:54:04:54:1d:c9: ad:52:52:1a:d3:12:50:83:98:db:d1:00:97:11:b1:3f:92:2b: ee:cd:39:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9zUtTvDKGP7Ga9boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkyOGYwZTktZGU1My00ZTRmLTljNmQtMWZlZjM3OWFk NmQ3MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk YWE5NzQ1MzItYmZlMi00MTM2LWFhOTQtZWY1NjU3ZTNmOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl67KB6strIRUHZ+BjWGvkOhElyIa3nLx8pl bWiyEPBH+I0ZkrHA+RGb/2P5vPRrc+LRQrFKqhZrU92ZWLW6zu1udiHaEtMmvopF 6gXCv0iJCssT5CyOzhZR7NvFcuvdvqewQyi3g3gsDQ6viKOWylrb3UW7XCyfZBvD b7fG+NbOlsJSLPViaMSol+IlLf7kRobhKnp0Qgq9mMOzny8vQ/KpLXs4u0/faV8i 5thB6MVyHQfPk7vixDEcXHjg9MAigWiF6fsvibp6XtnNjjl250govUYjAMwI88fh ODn+wjNqXQ+nj6X1cVEz8zLSI97dlePPrpPhN9I+ssq7YpBWHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHjzSErlpI16G2DVDq9GEx557luOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lOTI4 ZjBlOS1kZTUzLTRlNGYtOWM2ZC0xZmVmMzc5YWQ2ZDcvZGIwZjQ2YWEtZDFjYS0z NTE3LWJiNjAtZDJkYjY4NGMzYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTkyOGYwZTktZGU1My00ZTRmLTlj NmQtMWZlZjM3OWFkNmQ3L2U5MjhmMGU5LWRlNTMtNGU0Zi05YzZkLTFmZWYzNzlh ZDZkNy5jcmwwHwYDVR0jBBgwFoAUE4S0vDw370e/Uxe9AUdHf2pk/PMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lOTI4ZjBlOS1kZTUzLTRlNGYtOWM2ZC0xZmVm Mzc5YWQ2ZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTqQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDmnptM44he0t/PooJMl09ev6v4axzi3iC8Z/lSCV6/FQ35jjH/IBN xbsTinjBOJG2u0QvsgSKNk7sv0FGwIFNGKqSB+hAsi3Q1GEoOABQ//z/ba3AVeFE 7prwl9Ai2JCg2dp/TRjM7PaGzFF2jHzsofBjglAq2g5O6Y88v+UywgT4gTQNksS1 hMludABxaBZgoNUHSDnStAw4Qli7upW+hcbMPjbEM+tZbbgnQL7ojwprGZXROjKI TgzrCbJ5NkuE+5/IfYmDv2uOQsYDyAXukimc+viuRTjuhMlbhPGtHpNQihtkVARU HcmtUlIa0xJQg5jb0QCXEbE/kivuzTm4 -----END CERTIFICATE-----Generated at Fri Oct 16 04:03:21 2026 by rpki-client