$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa File: 642a84f4-9e19-32bc-aa05-85491a4b490c.roa (raw, json) Hash identifier: U+763Laezuy23R7uZ0KMogb4SoupXnbdRxpRGhSnQI8= Subject key identifier: 6C:59:80:C1:64:A7:B5:AE:60:14:C4:D3:B0:99:0B:1C:84:4E:87:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F82ADA016920D169F37012700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 12222 IP address blocks: 2001:4878:324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:a0:16:92:0d:16:9f:37:01:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=37abb5fe-04f1-4cc8-9ae8-7eb23d9bd44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:5c:9c:af:f2:c8:11:e2:f4:6a:0a:2d:24: ef:e9:82:ec:83:48:65:e9:53:a0:48:4e:91:ca:04: 01:04:9a:be:63:d5:9a:47:68:b2:7c:d4:96:cb:0e: 40:d4:c1:32:62:b4:1e:79:3d:da:ae:f5:a0:30:b6: 9d:57:4b:8c:8c:64:16:1a:94:ed:1c:7f:15:04:5c: f7:a4:4f:57:49:76:a1:a3:fa:41:c1:fb:66:7f:b9: 73:51:21:40:cb:c4:9b:96:8e:ba:95:43:52:14:79: 60:40:77:4b:1a:7c:b8:bc:dc:d6:2f:a0:25:d2:b5: 4e:81:80:5c:55:c7:aa:8c:73:cd:f2:89:ad:5b:08: 47:6c:9d:fe:7b:ac:5b:be:74:cf:4b:34:1e:8c:45: c0:8e:70:b0:53:bd:ca:b6:3c:5f:85:04:5d:45:c7: 78:85:0f:bb:a5:3c:3d:ec:e2:e5:96:81:01:77:f7: d6:60:9e:5b:3d:92:c3:80:c8:d6:e5:6a:7e:21:29: d6:fa:be:77:1e:59:8d:25:24:73:2c:9f:c6:62:f8: 71:d8:de:db:99:68:73:e1:7b:6f:d1:b0:ad:11:06: 5a:c8:f2:51:08:f4:43:d7:b6:cc:49:72:fc:eb:fc: 7c:ad:52:7b:c9:9a:0e:dc:2e:c8:47:8b:8b:b8:5e: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:80:C1:64:A7:B5:AE:60:14:C4:D3:B0:99:0B:1C:84:4E:87:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/642a84f4-9e19-32bc-aa05-85491a4b490c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:86:d4:57:6a:86:a8:b9:c3:44:b3:8b:f0:ef:5c:b1:9f:e9: 49:87:fd:f6:c1:0a:e3:e2:e6:f5:cc:95:04:d8:33:eb:e7:a6: 26:89:4a:c0:19:98:44:2e:e5:77:d0:a2:cc:3a:36:40:74:9d: a1:ca:d6:16:47:90:75:2f:69:b4:1d:18:6a:49:51:e6:83:27: 31:7a:2f:93:09:d4:86:0a:ac:ad:92:b4:0f:4d:0f:af:d8:b7: 5c:b5:9e:4f:ce:5d:46:7c:14:f9:f1:f8:4c:5a:ae:98:73:f0: d9:7d:ea:7a:04:af:75:fe:35:1f:b8:62:ca:0d:ed:8d:d5:72: 6d:b0:99:cd:06:ce:10:99:56:89:25:d2:12:ea:10:0e:a7:ae: 2c:25:30:e3:f4:ef:fb:47:74:cf:e0:64:c1:87:b2:85:8a:9c: 83:76:4b:5d:63:e3:af:f7:b7:d3:d0:47:56:fe:ca:aa:19:25: e6:c3:fe:e6:6b:ca:30:b4:5d:a4:6e:dd:bc:4a:c2:6e:ed:40: 89:53:a1:c6:df:7f:8b:4f:f0:54:88:eb:b7:a2:76:64:e7:03: 42:5e:a6:04:6a:45:cb:38:cf:b2:00:d9:01:fd:8e:e7:5a:11: 5b:94:f6:85:2d:89:86:a4:01:b6:b7:b2:28:07:14:34:a2:73: 57:1e:a0:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CraAWkg0WnzcBJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MzdhYmI1ZmUtMDRmMS00Y2M4LTlhZTgtN2ViMjNkOWJkNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIlcnK/yyBHi9GoKLSTv6YLsg0hl6VOgSE6R ygQBBJq+Y9WaR2iyfNSWyw5A1MEyYrQeeT3arvWgMLadV0uMjGQWGpTtHH8VBFz3 pE9XSXaho/pBwftmf7lzUSFAy8Sblo66lUNSFHlgQHdLGny4vNzWL6Al0rVOgYBc VceqjHPN8omtWwhHbJ3+e6xbvnTPSzQejEXAjnCwU73KtjxfhQRdRcd4hQ+7pTw9 7OLlloEBd/fWYJ5bPZLDgMjW5Wp+ISnW+r53HlmNJSRzLJ/GYvhx2N7bmWhz4Xtv 0bCtEQZayPJRCPRD17bMSXL86/x8rVJ7yZoO3C7IR4uLuF69PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxZgMFkp7WuYBTE07CZCxyEToceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQyYTg0ZjQtOWUxOS0z MmJjLWFhMDUtODU0OTFhNGI0OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSG1Fdqhqi5w0Szi/DvXLGf6UmH/fbBCuPi5vXMlQTYM+vnpiaJ SsAZmEQu5XfQosw6NkB0naHK1hZHkHUvabQdGGpJUeaDJzF6L5MJ1IYKrK2StA9N D6/Yt1y1nk/OXUZ8FPnx+Exarphz8Nl96noEr3X+NR+4YsoN7Y3Vcm2wmc0GzhCZ Vokl0hLqEA6nriwlMOP07/tHdM/gZMGHsoWKnIN2S11j46/3t9PQR1b+yqoZJebD /uZryjC0XaRu3bxKwm7tQIlTocbff4tP8FSI67eidmTnA0JepgRqRcs4z7IA2QH9 judaEVuU9oUtiYakAba3sigHFDSic1ceoFw= -----END CERTIFICATE-----Generated at Sun Oct 25 21:57:30 2026 by rpki-client