$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa File: 24de1adc-157e-3630-9c57-552f4df813e4.roa (raw, json) Hash identifier: rZdxlUo2RaHndupRRTz6Sn+71wlYSldKiYt3cpbnB9Q= Subject key identifier: 06:4D:BA:3D:19:C3:45:3D:DA:77:4F:C2:E1:D6:5E:CA:2C:4F:6B:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F89A869123940EEB2E1D36C50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 12222 IP address blocks: 2001:4878:c063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:69:12:39:40:ee:b2:e1:d3:6c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=95eec8c6-b77e-4f9f-9c46-da58f4e51d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:6a:ac:9e:89:04:3e:54:bc:dd:6c:47:38: e0:ed:e0:9f:7d:4b:43:d9:94:ca:71:03:71:0f:5e: b4:f5:2e:ca:0e:26:2a:2c:46:23:c7:27:5f:1e:ab: 96:43:83:f9:cd:8f:67:2c:43:2f:c8:ac:06:77:c7: 49:25:c6:75:ca:c1:69:aa:bc:bc:27:27:61:9a:19: cd:de:c2:e1:67:39:a6:97:7c:b5:9c:58:9b:8c:8a: c2:78:e0:8f:d3:79:b8:3a:d9:0a:a0:e3:4a:e7:bb: 3c:f4:01:f0:17:19:54:bc:41:95:6f:7a:b0:46:d7: 1c:7f:44:be:0e:dd:ed:f6:8a:b2:06:f7:ed:90:06: fb:29:b3:e6:89:a8:f9:0b:c7:25:0e:7e:28:47:32: 17:3a:d2:70:21:31:36:e4:11:14:b0:82:a0:6b:37: 6c:2a:b4:6e:c0:7e:b4:ca:df:79:71:f8:59:a1:04: 15:ae:fc:bf:33:90:76:d5:f6:04:70:2d:6a:2a:43: 48:13:41:89:62:d3:72:bd:90:46:aa:65:05:1d:c8: 49:a1:7c:09:18:70:29:bb:9f:15:7c:9c:f1:60:ca: 10:be:e4:5c:7e:80:5e:8d:43:d2:a1:f3:5a:1a:4d: d5:88:6d:e9:08:4d:70:5d:a9:28:08:ad:c4:dc:b5: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4D:BA:3D:19:C3:45:3D:DA:77:4F:C2:E1:D6:5E:CA:2C:4F:6B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24de1adc-157e-3630-9c57-552f4df813e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c063::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bd:7c:1d:b3:3f:f2:a5:9d:63:09:a8:74:ea:ae:2d:77:af: 80:01:7c:a1:c1:9f:9e:6d:2a:69:78:05:86:9a:6e:85:ad:f5: 0c:e8:c9:fc:4a:c7:64:9a:bf:da:09:b7:fe:44:c8:81:bf:8b: 99:d2:c2:30:3b:cf:bc:1e:29:76:54:a7:22:1c:af:fd:af:2e: 33:71:89:31:4a:af:61:28:4d:c1:72:34:e3:04:bc:83:0e:28: ce:16:86:50:0e:44:37:cd:07:e4:81:a9:96:07:2c:1c:4a:23: 80:51:69:e5:60:6e:ea:3e:12:c5:3c:bd:a6:10:b3:91:53:0d: eb:98:88:8d:e9:6b:c8:9b:48:a0:1b:a5:21:8e:7b:e6:77:18: 91:a4:48:50:ca:9b:e1:9e:33:84:44:9b:2d:bd:cd:d8:fc:c1: 23:5f:38:3f:5c:77:70:6a:f9:28:a1:44:60:06:c0:c4:6c:88: 96:56:af:4d:9b:de:19:06:d6:95:4a:0c:2f:24:8a:f7:27:19: 24:a6:a6:a8:d3:4a:d3:e2:e4:a0:4c:a0:7b:67:60:4a:d2:8d: 4a:aa:00:40:3c:14:7b:ca:57:35:38:07:75:b0:9b:e4:a9:15: 17:4d:48:ca:4e:6a:20:3b:5b:4f:b0:75:12:eb:66:57:0b:6f: 75:e6:a8:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+JqGkSOUDusuHTbFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OTVlZWM4YzYtYjc3ZS00ZjlmLTljNDYtZGE1OGY0ZTUxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2lqrJ6JBD5UvN1sRzjg7eCffUtD2ZTKcQNx D1609S7KDiYqLEYjxydfHquWQ4P5zY9nLEMvyKwGd8dJJcZ1ysFpqry8JydhmhnN 3sLhZzmml3y1nFibjIrCeOCP03m4OtkKoONK57s89AHwFxlUvEGVb3qwRtccf0S+ Dt3t9oqyBvftkAb7KbPmiaj5C8clDn4oRzIXOtJwITE25BEUsIKgazdsKrRuwH60 yt95cfhZoQQVrvy/M5B21fYEcC1qKkNIE0GJYtNyvZBGqmUFHchJoXwJGHApu58V fJzxYMoQvuRcfoBejUPSofNaGk3ViG3pCE1wXakoCK3E3LVubwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZNuj0Zw0U92ndPwuHWXsosT2t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkZTFhZGMtMTU3ZS0z NjMwLTljNTctNTUyZjRkZjgxM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMBj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm9fB2zP/KlnWMJqHTqri13r4ABfKHBn55tKml4BYaaboWt9Qzo yfxKx2Sav9oJt/5EyIG/i5nSwjA7z7weKXZUpyIcr/2vLjNxiTFKr2EoTcFyNOME vIMOKM4WhlAORDfNB+SBqZYHLBxKI4BRaeVgbuo+EsU8vaYQs5FTDeuYiI3pa8ib SKAbpSGOe+Z3GJGkSFDKm+GeM4REmy29zdj8wSNfOD9cd3Bq+SihRGAGwMRsiJZW r02b3hkG1pVKDC8kivcnGSSmpqjTStPi5KBMoHtnYErSjUqqAEA8FHvKVzU4B3Ww m+SpFRdNSMpOaiA7W0+wdRLrZlcLb3XmqPU= -----END CERTIFICATE-----Generated at Sat Oct 24 12:30:17 2026 by rpki-client