$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/334b2aac-bc1b-3b02-a391-af02b5f0394f.roa File: 334b2aac-bc1b-3b02-a391-af02b5f0394f.roa (raw, json) Hash identifier: PXVSZuKZpyntV9tiRzapdwGJV6pes7dSxhT+hXX766s= Subject key identifier: 82:A9:9D:4E:0C:DF:5D:97:99:E3:74:B3:C7:FE:45:74:25:46:86:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F85786907567EF5DF67D51780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/334b2aac-bc1b-3b02-a391-af02b5f0394f.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:a204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:69:07:56:7e:f5:df:67:d5:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=da1a5084-8fe9-4d78-a0b1-e3259d077eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:16:c8:95:96:36:7f:37:f8:a5:ef:ae:4a: 9c:87:62:4d:89:90:d8:36:a3:0e:55:68:10:ba:2d: b0:59:9a:4c:c1:1c:1e:e4:f5:15:90:a6:38:c0:31: 6e:50:77:a5:0b:ec:31:f5:74:ae:a3:c0:70:ef:bc: 5b:a4:a2:fa:7e:ee:b1:b7:6e:95:19:f0:67:42:70: 3b:68:fd:c5:36:8b:b7:6f:58:b7:65:c2:8a:8c:20: 61:07:c6:9b:c4:66:3a:40:2e:32:3f:97:f6:57:79: 77:1f:03:a3:4e:48:39:73:d7:22:1e:3b:cf:fc:7b: 2d:90:e9:97:65:b9:65:82:00:ee:be:47:60:c8:23: 16:d8:ce:88:0d:2d:c5:a6:a7:40:30:40:a0:1f:dd: 93:0d:fa:8b:d5:e0:9e:89:87:68:8d:1c:07:75:c2: 16:cf:74:df:9f:97:47:e9:b1:1a:74:1c:2a:4b:81: df:78:db:cd:40:bc:d4:6b:aa:76:de:7d:cd:91:83: c7:57:65:d9:50:ed:76:f5:9a:93:ae:a3:b6:4d:13: 00:ac:b0:c7:10:42:50:88:87:b3:62:d6:16:bb:56: 16:21:fc:e6:5d:1c:8e:ab:7e:aa:f9:44:7e:17:60: 24:fa:a9:bd:55:bf:5a:7c:ff:30:c3:8a:b4:72:a7: e8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:9D:4E:0C:DF:5D:97:99:E3:74:B3:C7:FE:45:74:25:46:86:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/334b2aac-bc1b-3b02-a391-af02b5f0394f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a204::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:49:6a:0e:8b:1b:c7:58:44:a5:93:e1:67:cb:79:7e:2e: 92:20:4f:4f:6d:6e:94:4c:e6:e3:2e:d7:ca:de:03:a8:8d:9c: f9:40:cf:21:f9:1f:c9:d5:e6:c9:d0:9c:e5:ae:b1:90:a7:0a: 59:cd:c8:54:d3:d3:02:91:9d:f2:28:18:e7:75:63:a5:ce:54: f1:04:84:88:19:39:a6:43:60:03:a1:9f:16:98:65:a1:90:3a: 00:87:2c:8e:e9:5e:99:c9:5b:70:4c:85:33:ea:fc:42:cd:93: 43:97:be:7a:66:9e:c2:bc:83:b0:3c:dc:91:7e:6f:1e:58:a7: 5e:0d:0b:5b:1f:60:3a:d2:25:eb:b7:f1:d9:38:2b:db:d8:e0: b4:92:ef:99:b3:53:ce:b2:f4:11:03:d4:58:24:c4:64:b8:7f: c3:7f:dc:b0:f0:52:d3:e8:ed:19:b9:df:39:ac:66:34:09:22: 08:d0:85:8d:a0:90:aa:b6:f5:23:80:f1:f8:b1:8b:46:ba:53: aa:58:19:53:b9:5d:59:13:df:d3:9b:89:69:bb:24:3b:7b:e2: 2a:5e:13:44:5d:68:90:8b:89:1a:66:c9:ee:e1:ff:23:3f:7a: dc:45:68:bd:64:8d:2a:7c:e5:63:94:2d:4f:e6:68:5e:25:e9: 3d:49:92:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeGkHVn7132fVF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGExYTUwODQtOGZlOS00ZDc4LWEwYjEtZTMyNTlkMDc3ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2voWyJWWNn83+KXvrkqch2JNiZDYNqMOVWgQ ui2wWZpMwRwe5PUVkKY4wDFuUHelC+wx9XSuo8Bw77xbpKL6fu6xt26VGfBnQnA7 aP3FNou3b1i3ZcKKjCBhB8abxGY6QC4yP5f2V3l3HwOjTkg5c9ciHjvP/HstkOmX ZbllggDuvkdgyCMW2M6IDS3FpqdAMECgH92TDfqL1eCeiYdojRwHdcIWz3Tfn5dH 6bEadBwqS4HfeNvNQLzUa6p23n3NkYPHV2XZUO129ZqTrqO2TRMArLDHEEJQiIez YtYWu1YWIfzmXRyOq36q+UR+F2Ak+qm9Vb9afP8ww4q0cqfolwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIKpnU4M312XmeN0s8f+RXQlRoZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM0YjJhYWMtYmMxYi0z YjAyLWEzOTEtYWYwMmI1ZjAzOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKIE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChOSWoOixvHWESlk+Fny3l+LpIgT09tbpRM5uMu18reA6iNnPlA zyH5H8nV5snQnOWusZCnClnNyFTT0wKRnfIoGOd1Y6XOVPEEhIgZOaZDYAOhnxaY ZaGQOgCHLI7pXpnJW3BMhTPq/ELNk0OXvnpmnsK8g7A83JF+bx5Yp14NC1sfYDrS Jeu38dk4K9vY4LSS75mzU86y9BED1FgkxGS4f8N/3LDwUtPo7Rm53zmsZjQJIgjQ hY2gkKq29SOA8fixi0a6U6pYGVO5XVkT39ObiWm7JDt74ipeE0RdaJCLiRpmye7h /yM/etxFaL1kjSp85WOULU/maF4l6T1Jkqg= -----END CERTIFICATE-----Generated at Wed Oct 21 17:07:56 2026 by rpki-client