$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43f0d894-9961-3ac1-8f5a-63478f380ef3.roa File: 43f0d894-9961-3ac1-8f5a-63478f380ef3.roa (raw, json) Hash identifier: HssISgQ2lC2TSMjrASd/Zvh/6H4xV5zyyHaxfhAaYWA= Subject key identifier: 93:C9:C5:24:F3:C2:D1:6E:7C:EB:4E:5C:BD:89:38:47:D9:04:B7:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8578692A95DE16E17019F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43f0d894-9961-3ac1-8f5a-63478f380ef3.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:a228::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:69:2a:95:de:16:e1:70:19:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=f901c5ef-8f81-4485-859b-3063bafdb929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:f5:d1:73:d7:dd:30:8c:65:7c:07:ad:f2: 29:8b:30:96:a4:1f:e3:20:45:22:73:25:e6:9b:e3: 6c:5b:13:bf:82:61:c0:25:15:a4:a6:4e:0f:2c:97: e6:4e:0b:ec:68:fd:c4:a0:2b:0d:9a:65:12:eb:c8: da:07:37:f3:46:4e:60:83:30:76:41:f0:38:b1:bf: 46:97:08:a1:a2:53:83:31:ef:51:58:13:d5:7b:62: d5:ed:be:83:ad:e5:cd:4c:2d:64:15:05:72:9c:b6: 92:2c:b9:35:ab:15:2d:81:c8:fc:35:20:d9:0b:fb: b7:56:d6:71:31:dd:19:64:f2:2a:76:04:7a:8c:a7: 16:bc:38:69:2b:50:67:09:ba:50:4c:5f:e8:ed:98: e9:24:2a:47:a8:53:97:4e:55:c9:54:17:fd:06:ce: cd:f7:2e:bd:cf:58:b6:32:fa:c4:4c:3c:07:6a:a6: de:b9:fc:87:09:c2:b3:0a:c4:39:5c:e3:88:4e:15: e0:c8:c1:bb:9d:9b:1b:51:4f:68:c1:a0:5d:b6:5e: 49:e0:8e:70:3b:32:d9:d3:49:e7:94:50:8f:04:f3: f5:1d:1d:de:94:6b:64:d0:cf:b2:e4:9a:3a:3f:92: ba:9b:26:6f:b2:ca:09:e5:27:58:16:bd:ab:a7:ef: a8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:C5:24:F3:C2:D1:6E:7C:EB:4E:5C:BD:89:38:47:D9:04:B7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43f0d894-9961-3ac1-8f5a-63478f380ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a228::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:00:cf:ee:99:76:bd:4e:44:48:b4:cd:ac:6f:70:32:df:35: 4d:0d:8c:67:a9:71:3e:8f:7e:63:e1:d8:7d:7c:31:15:d6:1b: 2d:37:06:94:50:f1:9e:37:c1:ec:b1:cc:e7:e9:22:ab:99:06: cd:07:2a:4d:01:03:52:8f:45:ee:87:12:4e:92:68:86:20:37: a9:23:73:05:22:f6:c8:e6:eb:d1:7c:8e:af:1f:72:4c:68:e4: 47:f3:c5:1d:c5:66:40:6b:dd:86:d3:a8:cd:5c:b8:20:aa:1b: bc:f2:7a:79:62:61:2d:33:e7:95:4a:74:22:0e:6f:b2:38:05: 00:ad:30:1c:8a:ea:ad:2e:c4:d2:d7:b1:22:0a:fe:78:54:ee: b3:52:36:2a:97:8b:a9:c8:22:13:2b:ba:bf:ce:db:ef:c5:c4: c1:5f:0c:ed:43:33:67:6f:bb:41:fe:f1:31:6e:10:0f:5d:43: 2b:e7:07:6e:40:ac:8e:60:c8:c4:fe:6b:53:73:03:43:63:6f: eb:1e:9f:ee:66:a2:14:7e:f5:19:a9:93:7b:59:27:87:68:d0: 72:5a:64:16:83:54:43:25:d8:f1:0b:37:60:aa:5f:ce:a9:7d: 31:5e:24:f7:d3:18:95:11:4e:70:01:31:f0:43:df:aa:12:be: 6e:2a:d0:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeGkqld4W4XAZ9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjkwMWM1ZWYtOGY4MS00NDg1LTg1OWItMzA2M2JhZmRiOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhL10XPX3TCMZXwHrfIpizCWpB/jIEUicyXm m+NsWxO/gmHAJRWkpk4PLJfmTgvsaP3EoCsNmmUS68jaBzfzRk5ggzB2QfA4sb9G lwiholODMe9RWBPVe2LV7b6DreXNTC1kFQVynLaSLLk1qxUtgcj8NSDZC/u3VtZx Md0ZZPIqdgR6jKcWvDhpK1BnCbpQTF/o7ZjpJCpHqFOXTlXJVBf9Bs7N9y69z1i2 MvrETDwHaqbeufyHCcKzCsQ5XOOIThXgyMG7nZsbUU9owaBdtl5J4I5wOzLZ00nn lFCPBPP1HR3elGtk0M+y5Jo6P5K6myZvssoJ5SdYFr2rp++oZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPJxSTzwtFufOtOXL2JOEfZBLclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNmMGQ4OTQtOTk2MS0z YWMxLThmNWEtNjM0NzhmMzgwZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIAz+6Zdr1OREi0zaxvcDLfNU0NjGepcT6PfmPh2H18MRXWGy03 BpRQ8Z43weyxzOfpIquZBs0HKk0BA1KPRe6HEk6SaIYgN6kjcwUi9sjm69F8jq8f ckxo5EfzxR3FZkBr3YbTqM1cuCCqG7zyenliYS0z55VKdCIOb7I4BQCtMByK6q0u xNLXsSIK/nhU7rNSNiqXi6nIIhMrur/O2+/FxMFfDO1DM2dvu0H+8TFuEA9dQyvn B25ArI5gyMT+a1NzA0Njb+sen+5mohR+9Rmpk3tZJ4do0HJaZBaDVEMl2PELN2Cq X86pfTFeJPfTGJURTnABMfBD36oSvm4q0CU= -----END CERTIFICATE-----Generated at Mon Oct 26 00:28:39 2026 by rpki-client