$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa File: fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa (raw, json) Hash identifier: zYlnOx/JS7+jY8ew/shl4FAlWhnEzw+DTXDhzG7oQ8M= Subject key identifier: CF:5A:FF:6A:B3:15:F3:42:8E:65:3A:93:80:91:12:2C:E1:7D:6F:6B Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584F549D650ADADC4EFDC1274140 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27299 IP address blocks: 2620:10a:8001::/48 maxlen: 48 2620:10a:8002::/48 maxlen: 48 2620:10a:8004::/48 maxlen: 48 2620:10a:8023::/48 maxlen: 48 2620:10a:80d1::/48 maxlen: 48 2620:10a:80d4::/48 maxlen: 48 2620:10a:80f1::/48 maxlen: 48 2620:10a:80f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:65:0a:da:dc:4e:fd:c1:27:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=507bda87-b461-4c71-ae85-5701b90b4340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:d9:fb:66:d5:f4:9d:22:c4:11:96:90:d4: 8b:2d:8c:41:57:57:e0:02:ec:f1:cb:55:62:72:9a: 79:85:4f:11:ca:36:2b:1b:97:b6:04:ea:d5:36:3b: a0:2a:bf:c6:aa:ba:64:6a:bb:40:0b:2c:b4:88:c3: bd:30:d0:b6:d9:d6:02:31:b7:ca:32:46:a2:ca:eb: db:65:90:64:54:f9:0e:79:e5:15:30:83:a5:8a:8f: 4c:bb:d2:f3:29:88:a8:4d:d3:3d:9f:54:aa:d9:42: ab:04:a0:61:7a:64:f5:16:a3:ef:d2:11:33:40:0a: b9:39:ef:94:fe:dc:c0:fa:c0:6b:ec:53:1e:8a:54: 36:bf:28:09:64:44:c3:85:43:43:7c:44:90:1d:ad: 8b:e7:10:30:23:85:aa:b7:ca:0f:95:88:13:78:7b: 94:2a:0f:64:eb:f7:1a:38:a5:c9:53:72:0a:3f:fe: 8a:eb:1c:81:4d:9d:63:5e:55:cd:67:0a:70:3f:63: 52:35:1b:de:35:8d:5a:48:7f:05:e8:64:99:50:b5: f8:dc:4d:22:d0:97:85:63:a5:94:98:89:5e:eb:7b: 39:1e:95:1a:ee:e1:fa:d1:33:e0:db:91:a8:f8:b0: dc:d8:f3:0f:b1:90:4a:63:82:f1:18:72:3f:99:54: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5A:FF:6A:B3:15:F3:42:8E:65:3A:93:80:91:12:2C:E1:7D:6F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:8001::-2620:10a:8002:ffff:ffff:ffff:ffff:ffff 2620:10a:8004::/48 2620:10a:8023::/48 2620:10a:80d1::/48 2620:10a:80d4::/48 2620:10a:80f1::/48 2620:10a:80f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c2:e8:3f:df:d6:36:2a:18:28:a4:35:bf:84:60:b3:d7:ba: 4d:31:16:97:11:8d:17:4c:aa:59:d2:f4:f6:75:c8:35:4b:a2: 6a:29:54:59:e7:05:b2:b1:e4:21:cf:67:ca:e3:b4:d6:d5:3d: b0:86:4e:58:d3:f3:dd:58:53:a1:07:5b:90:c3:f5:0d:d2:d5: 6f:d6:9d:2f:66:01:df:08:7c:04:c6:9a:70:04:7c:5a:48:60: bd:01:82:2d:f0:12:4f:a1:8b:b7:32:9e:89:d3:83:3b:7a:aa: c8:15:a1:e0:ba:bc:8f:64:45:57:59:64:bb:32:4c:ce:14:5d: e5:71:03:a0:d0:8e:4e:45:8f:5b:2c:d0:6b:90:5b:a1:ef:da: 0c:d7:5a:a1:5f:5a:f8:14:dd:6a:db:e7:f0:97:a3:18:5c:8c: 1e:7e:97:83:2a:17:02:79:7f:31:4c:c5:88:ee:3a:c9:56:3f: d8:40:d7:7e:e3:63:65:57:e8:ff:0b:e1:2a:d9:60:f8:ab:00: 46:eb:c1:c5:98:f8:5c:e5:e9:18:e9:6b:2e:7f:db:03:5a:b9: 87:8a:a9:e1:83:49:5c:b2:42:8f:2f:aa:9c:99:36:38:3d:0c: 0a:d5:f2:48:d2:66:f4:54:7b:2c:ab:4e:2f:bc:c5:8c:47:b7: 97:de:2d:dd -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE9UnWUK2txO/cEnQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTA3YmRhODctYjQ2MS00YzcxLWFlODUtNTcwMWI5MGI0MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssTZ+2bV9J0ixBGWkNSLLYxBV1fgAuzxy1Vi cpp5hU8RyjYrG5e2BOrVNjugKr/GqrpkartACyy0iMO9MNC22dYCMbfKMkaiyuvb ZZBkVPkOeeUVMIOlio9Mu9LzKYioTdM9n1Sq2UKrBKBhemT1FqPv0hEzQAq5Oe+U /tzA+sBr7FMeilQ2vygJZETDhUNDfESQHa2L5xAwI4Wqt8oPlYgTeHuUKg9k6/ca OKXJU3IKP/6K6xyBTZ1jXlXNZwpwP2NSNRveNY1aSH8F6GSZULX43E0i0JeFY6WU mIle63s5HpUa7uH60TPg25Go+LDc2PMPsZBKY4LxGHI/mVQxrwIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFM9a/2qzFfNCjmU6k4CREizhfW9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZmE0Nzg1NzctMTllNS0z YmI2LWI3ZDgtYTJjYmNmMjVhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAAjBKMBIDBwAmIAEK gAEDBwAmIAEKgAIDBwAmIAEKgAQDBwAmIAEKgCMDBwAmIAEKgNEDBwAmIAEKgNQD BwAmIAEKgPEDBwAmIAEKgPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB8LoP9/WNioYKKQ1v4Rgs9e6TTEW lxGNF0yqWdL09nXINUuiailUWecFsrHkIc9nyuO01tU9sIZOWNPz3VhToQdbkMP1 DdLVb9adL2YB3wh8BMaacAR8WkhgvQGCLfAST6GLtzKeidODO3qqyBWh4Lq8j2RF V1lkuzJMzhRd5XEDoNCOTkWPWyzQa5Bboe/aDNdaoV9a+BTdatvn8JejGFyMHn6X gyoXAnl/MUzFiO46yVY/2EDXfuNjZVfo/wvhKtlg+KsARuvBxZj4XOXpGOlrLn/b A1q5h4qp4YNJXLJCjy+qnJk2OD0MCtXySNJm9FR7LKtOL7zFjEe3l94t3Q== -----END CERTIFICATE-----Generated at Tue Nov 3 03:51:12 2026 by rpki-client