$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f275f42-28e7-3da8-a9d0-7ec517005551.roa File: 7f275f42-28e7-3da8-a9d0-7ec517005551.roa (raw, json) Hash identifier: dPkKGek8ZgzdWYU94714BFYz/IRszxUQ8JuxDNmNjj0= Subject key identifier: 57:50:89:22:1E:8D:27:4C:04:F2:B7:06:9F:17:A0:23:8F:12:65:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F82ADA7C9A3051119FE8C7B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f275f42-28e7-3da8-a9d0-7ec517005551.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 12222 IP address blocks: 2001:4878:4062::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:a7:c9:a3:05:11:19:fe:8c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=199a0cad-3f33-4e5d-936a-75a7dc666ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:03:32:37:f8:70:5e:4c:4c:df:b8:88:3e: f3:42:4b:3a:6f:81:33:da:24:a6:f4:d3:a6:cc:be: 7f:40:d2:20:54:c1:60:40:df:42:be:b6:ab:83:42: d7:d6:24:79:5b:1e:89:3a:f0:f3:13:84:21:ef:56: 17:fb:b4:11:a9:5a:94:cc:6e:37:2a:42:13:5e:de: 47:59:fe:a3:6a:63:da:b6:ea:4c:ca:ec:ab:f3:aa: ad:93:b9:f6:ce:e0:df:37:6d:82:5a:0c:e5:20:26: d3:ea:b5:94:7d:b4:cd:0f:a9:b6:f8:99:27:48:f3: 5f:d4:97:b4:cc:57:ba:7d:45:e7:bd:f1:5b:99:1c: 85:31:ff:19:7d:1d:20:e3:44:56:56:a6:ac:f7:63: 76:17:37:75:d4:48:93:05:1b:d6:c6:a1:27:63:83: 0c:ec:65:36:d1:f8:91:02:fd:8f:e3:fa:86:5c:5d: e4:57:e0:f0:1c:94:0d:01:a2:54:ee:26:df:9f:ad: c4:55:bd:d8:0d:45:d0:e8:2e:ed:1a:fc:69:eb:b4: 87:0f:02:14:08:c8:11:d0:e7:f6:3c:a6:60:a2:db: 3b:62:01:56:4e:a4:75:91:90:f9:da:55:6b:ad:5f: 46:29:51:46:42:bf:d4:56:32:f8:84:a4:ab:93:1e: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:50:89:22:1E:8D:27:4C:04:F2:B7:06:9F:17:A0:23:8F:12:65:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f275f42-28e7-3da8-a9d0-7ec517005551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4062::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f2:39:d4:51:c3:df:45:e5:ef:d8:cb:23:d3:a1:73:39:c6: de:fc:77:76:00:e5:ac:d7:76:70:df:56:86:c8:05:be:63:1b: 5a:42:10:9c:eb:4e:16:41:66:10:b4:42:bc:f9:ff:d0:bd:0d: 2d:de:65:dc:fb:98:2d:aa:5a:88:1a:33:47:cb:50:b2:0c:6b: 55:fa:ff:2c:74:99:82:c4:25:45:aa:73:6c:8d:81:c7:63:8c: 0e:93:b5:6b:c5:0f:85:89:c4:b8:bb:ef:4f:a0:41:8b:49:47: b2:e6:be:7e:78:84:37:4c:17:14:9a:8c:1f:11:09:6c:e7:13: c7:cb:88:69:19:92:da:07:e9:9c:0d:95:17:9d:c0:b2:8e:60: 4f:5c:df:f6:10:e3:94:b6:b2:e9:9f:5b:04:8b:1b:f4:cc:bd: 37:91:aa:ae:c1:f8:fa:21:fc:be:ce:6e:c0:4f:6b:c0:2a:09: cf:35:de:0b:69:82:5e:16:c6:b7:52:8a:74:16:94:bb:20:7f: 62:a5:14:3e:b2:6b:f7:df:82:9a:9c:b1:0d:d5:40:84:38:f7: 43:28:c8:4d:92:ca:82:03:bd:5b:94:31:41:27:3f:44:10:b6: 58:b1:2b:57:06:c3:72:93:ad:a3:0d:94:b1:fd:39:6a:84:c9: 55:43:15:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CrafJowURGf6Me4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MTk5YTBjYWQtM2YzMy00ZTVkLTkzNmEtNzVhN2RjNjY2ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkcDMjf4cF5MTN+4iD7zQks6b4Ez2iSm9NOm zL5/QNIgVMFgQN9Cvrarg0LX1iR5Wx6JOvDzE4Qh71YX+7QRqVqUzG43KkITXt5H Wf6jamPatupMyuyr86qtk7n2zuDfN22CWgzlICbT6rWUfbTND6m2+JknSPNf1Je0 zFe6fUXnvfFbmRyFMf8ZfR0g40RWVqas92N2Fzd11EiTBRvWxqEnY4MM7GU20fiR Av2P4/qGXF3kV+DwHJQNAaJU7ibfn63EVb3YDUXQ6C7tGvxp67SHDwIUCMgR0Of2 PKZgots7YgFWTqR1kZD52lVrrV9GKVFGQr/UVjL4hKSrkx62hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdQiSIejSdMBPK3Bp8XoCOPEmVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2YyNzVmNDItMjhlNy0z ZGE4LWE5ZDAtN2VjNTE3MDA1NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEBi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTyOdRRw99F5e/YyyPToXM5xt78d3YA5azXdnDfVobIBb5jG1pC EJzrThZBZhC0Qrz5/9C9DS3eZdz7mC2qWogaM0fLULIMa1X6/yx0mYLEJUWqc2yN gcdjjA6TtWvFD4WJxLi770+gQYtJR7Lmvn54hDdMFxSajB8RCWznE8fLiGkZktoH 6ZwNlRedwLKOYE9c3/YQ45S2sumfWwSLG/TMvTeRqq7B+Poh/L7ObsBPa8AqCc81 3gtpgl4WxrdSinQWlLsgf2KlFD6ya/ffgpqcsQ3VQIQ490MoyE2SyoIDvVuUMUEn P0QQtlixK1cGw3KTraMNlLH9OWqEyVVDFSM= -----END CERTIFICATE-----Generated at Sun Oct 25 01:53:39 2026 by rpki-client