$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa File: 287b076d-3e21-3f90-9ba9-8db660a003c0.roa (raw, json) Hash identifier: r0JXQBCiB/n5euXtXuy9O4HExRNX9mymA8fI32BwwGo= Subject key identifier: D2:26:C7:FA:A4:D6:00:C0:DC:B2:DC:4F:8B:41:04:CC:9D:1C:A9:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F89A86809284E80B52631B0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 12222 IP address blocks: 2001:4878:a322::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:68:09:28:4e:80:b5:26:31:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=cbe88ebb-1325-4ccd-a63d-cb1001aa10ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:38:f4:d7:a6:02:60:4c:50:0e:d3:1d:6e:22: da:c2:9e:dd:5d:99:6e:ca:99:5c:06:85:31:8c:2f: 3e:fc:ff:ea:47:d3:0d:50:5a:e7:13:3d:c4:2f:98: f3:fd:f5:69:0c:cf:f4:bb:dc:51:56:61:48:b3:07: 19:84:9d:8f:80:55:38:f0:17:85:ac:d9:cb:61:d5: 46:7c:e2:ad:c4:ad:f4:ee:5c:0c:90:b9:1b:8c:e3: d4:3b:bf:b7:c6:dc:f2:b7:c3:db:53:ef:5c:3b:74: 92:a6:1d:43:55:a8:21:4a:84:28:ca:e4:d3:8b:88: fc:15:91:20:df:fa:c7:bf:1a:8f:8d:9d:66:7d:d1: 50:36:ad:b7:b9:3c:e1:db:64:2f:ec:e2:d9:ef:65: ec:0f:62:2e:af:16:5a:4e:dd:4e:12:04:39:30:56: 33:c1:fa:41:d0:68:83:d9:3d:fe:af:c2:4f:e9:d0: 9f:d5:88:46:67:94:50:ce:fc:c0:c9:0b:24:f3:16: d5:c9:a7:f7:da:81:e6:80:14:3b:bf:e0:72:10:a9: 8f:c8:26:4d:69:93:ce:c6:35:96:d9:95:12:9d:68: 0d:92:e7:26:17:fe:90:75:c2:a6:27:3e:20:10:d0: fd:ed:39:19:e4:df:a9:3f:14:ef:a7:69:9d:70:34: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:C7:FA:A4:D6:00:C0:DC:B2:DC:4F:8B:41:04:CC:9D:1C:A9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a322::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7c:40:b5:16:08:67:33:8c:d9:72:50:b9:40:3e:02:ec:41: dc:49:11:38:e9:be:ab:ba:8c:ff:fd:51:f1:52:d7:21:61:2a: b3:3b:4f:82:ec:1d:47:78:fd:87:0e:52:f6:13:54:9d:21:01: 13:dc:4c:aa:eb:56:2f:32:f2:22:e9:35:f5:ea:92:88:c9:f8: a7:f6:68:60:20:3d:fd:a4:a5:72:19:08:58:61:98:0f:e1:63: 9a:81:c8:7f:f5:9f:35:db:d7:f2:4b:d0:d1:53:8a:df:2a:78: 55:06:b7:b6:05:51:06:57:76:de:8a:41:2a:ad:9b:e0:1b:e4: 05:62:c3:6c:64:26:64:30:6a:5e:e1:b8:be:fa:48:ac:f2:f4: 4b:29:29:4d:dd:e2:ba:32:bd:14:b6:e2:15:01:9a:55:ec:15: 45:ba:b0:90:b0:7d:56:94:a4:b9:4b:a4:aa:87:49:9b:d7:08: 7a:5b:35:38:55:50:65:de:83:24:50:ef:d3:86:cf:42:6f:b9: 3d:5a:65:81:30:55:dc:c5:59:51:da:1b:a5:92:79:26:c2:24: d5:f9:1e:ba:ab:5e:49:8e:46:f7:88:3c:15:a9:be:a8:f2:ef: b8:6e:cf:be:e0:0a:94:0f:24:86:a7:be:e7:ef:3e:13:12:0d: 09:3c:7c:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+JqGgJKE6AtSYxsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk Y2JlODhlYmItMTMyNS00Y2NkLWE2M2QtY2IxMDAxYWExMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tj016YCYExQDtMdbiLawp7dXZluyplcBoUx jC8+/P/qR9MNUFrnEz3EL5jz/fVpDM/0u9xRVmFIswcZhJ2PgFU48BeFrNnLYdVG fOKtxK307lwMkLkbjOPUO7+3xtzyt8PbU+9cO3SSph1DVaghSoQoyuTTi4j8FZEg 3/rHvxqPjZ1mfdFQNq23uTzh22Qv7OLZ72XsD2IurxZaTt1OEgQ5MFYzwfpB0GiD 2T3+r8JP6dCf1YhGZ5RQzvzAyQsk8xbVyaf32oHmgBQ7v+ByEKmPyCZNaZPOxjWW 2ZUSnWgNkucmF/6QdcKmJz4gEND97TkZ5N+pPxTvp2mdcDTODQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNImx/qk1gDA3LLcT4tBBMydHKkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg3YjA3NmQtM2UyMS0z ZjkwLTliYTktOGRiNjYwYTAwM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKMi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp8QLUWCGczjNlyULlAPgLsQdxJETjpvqu6jP/9UfFS1yFhKrM7 T4LsHUd4/YcOUvYTVJ0hARPcTKrrVi8y8iLpNfXqkojJ+Kf2aGAgPf2kpXIZCFhh mA/hY5qByH/1nzXb1/JL0NFTit8qeFUGt7YFUQZXdt6KQSqtm+Ab5AViw2xkJmQw al7huL76SKzy9EspKU3d4royvRS24hUBmlXsFUW6sJCwfVaUpLlLpKqHSZvXCHpb NThVUGXegyRQ79OGz0JvuT1aZYEwVdzFWVHaG6WSeSbCJNX5HrqrXkmORveIPBWp vqjy77huz77gCpQPJIanvufvPhMSDQk8fKs= -----END CERTIFICATE-----Generated at Sun Oct 25 09:22:09 2026 by rpki-client