$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa File: d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa (raw, json) Hash identifier: 3xrjic06E+Tc+XY5V3rTsX6Uxe5RLPx5Hpmr0Y3rFEs= Subject key identifier: 3A:90:61:60:F4:12:06:62:8F:5A:FD:3B:2C:9D:4D:F4:E3:52:32:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F85786892C6F1C86BC725A980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:8324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:68:92:c6:f1:c8:6b:c7:25:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b83e5dbc-fb24-4ff5-9e00-89673e430ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:a1:43:79:42:e9:43:55:a7:37:97:49:dc: 5e:de:5e:f1:7d:f7:10:3c:ba:c7:0a:27:28:cd:99: 01:fb:dc:10:2a:ed:79:a5:be:ea:bc:88:36:cb:cc: 73:80:2e:a9:c9:53:94:8c:a8:f0:c7:c0:63:80:8f: ec:43:c4:0e:85:72:75:43:f3:4d:b6:92:76:5d:57: 09:7e:92:23:72:ee:72:cc:ad:5e:7c:e9:33:84:1e: 46:b4:84:52:30:6e:9d:ce:d8:7b:37:e7:18:67:6a: 81:a3:ac:a5:3d:7a:87:00:ea:b3:52:de:05:4b:a3: 60:79:5e:78:f1:84:c5:b9:77:b1:cc:58:5f:34:e1: 98:3e:3f:2d:3b:eb:98:6a:2e:42:c7:53:5d:db:8d: ed:5d:37:aa:cf:35:74:08:1b:40:1c:b7:0f:46:3e: bc:1c:4d:42:df:05:a6:70:61:28:90:1d:07:2a:55: 37:c4:08:ba:14:0d:1c:66:6a:ed:e2:94:a0:f2:30: 1a:d8:64:20:39:f2:13:bb:a0:8f:c7:37:ce:3b:e7: 5e:de:0e:2b:88:03:82:7f:4f:f7:bd:65:55:dd:77: c3:d3:d9:0b:57:5b:7f:c7:75:c0:0d:19:ee:9f:8c: 5d:3b:01:b4:bb:50:7d:21:74:cb:82:e3:27:51:49: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:61:60:F4:12:06:62:8F:5A:FD:3B:2C:9D:4D:F4:E3:52:32:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2f:00:f6:e9:0f:1c:34:bf:c9:4b:64:c6:8b:32:c9:7c:74: e3:7b:f5:a9:94:24:1f:08:f7:0c:e2:71:78:70:d5:5a:39:3a: 1d:fa:4f:e2:82:a0:a8:25:ba:0b:a0:23:1f:f8:40:92:bd:00: 2f:4b:40:66:25:8e:26:23:fb:35:db:b3:fd:34:3d:c3:9b:0f: af:2f:50:1b:bf:49:74:02:5b:d6:44:5c:ce:38:f6:0d:68:34: df:84:da:53:01:c4:7c:25:80:3f:f9:e0:18:be:a5:4c:2b:bd: 97:98:0c:10:42:68:53:4d:ee:3d:e3:27:5f:c4:70:c9:9c:a9: 25:85:2c:58:7f:3e:4d:21:be:a5:a4:ba:7f:e0:7a:db:c0:63: e3:06:e2:0d:74:a5:89:50:95:fc:e1:97:e9:05:96:eb:0f:cb: fc:90:6e:f0:c0:6a:6b:1e:7e:20:4a:ec:13:4f:2e:94:e1:54: 81:70:e9:0f:e6:1c:ad:d2:c2:7b:23:f8:e6:02:a6:23:ec:e2: c1:d3:c4:2c:b2:f4:32:4e:07:8f:64:bb:58:e5:d0:b3:2a:48: e7:e8:3b:d5:dc:01:98:3d:a1:1d:23:ad:46:ac:4d:b5:8e:e3: 9a:82:1b:41:4f:12:37:e0:b7:ec:d2:f2:e8:c8:8f:23:a3:d9: fe:3c:74:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeGiSxvHIa8clqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YjgzZTVkYmMtZmIyNC00ZmY1LTllMDAtODk2NzNlNDMwZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/2hQ3lC6UNVpzeXSdxe3l7xffcQPLrHCico zZkB+9wQKu15pb7qvIg2y8xzgC6pyVOUjKjwx8BjgI/sQ8QOhXJ1Q/NNtpJ2XVcJ fpIjcu5yzK1efOkzhB5GtIRSMG6dzth7N+cYZ2qBo6ylPXqHAOqzUt4FS6NgeV54 8YTFuXexzFhfNOGYPj8tO+uYai5Cx1Nd243tXTeqzzV0CBtAHLcPRj68HE1C3wWm cGEokB0HKlU3xAi6FA0cZmrt4pSg8jAa2GQgOfITu6CPxzfOO+de3g4riAOCf0/3 vWVV3XfD09kLV1t/x3XADRnun4xdOwG0u1B9IXTLguMnUUlaMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqQYWD0EgZij1r9OyydTfTjUjL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBjZTY1ZTgtODFhNy0z NjhkLTk3OGQtOTQwN2NiZmZjYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsvAPbpDxw0v8lLZMaLMsl8dON79amUJB8I9wzicXhw1Vo5Oh36 T+KCoKglugugIx/4QJK9AC9LQGYljiYj+zXbs/00PcObD68vUBu/SXQCW9ZEXM44 9g1oNN+E2lMBxHwlgD/54Bi+pUwrvZeYDBBCaFNN7j3jJ1/EcMmcqSWFLFh/Pk0h vqWkun/getvAY+MG4g10pYlQlfzhl+kFlusPy/yQbvDAamsefiBK7BNPLpThVIFw 6Q/mHK3Swnsj+OYCpiPs4sHTxCyy9DJOB49ku1jl0LMqSOfoO9XcAZg9oR0jrUas TbWO45qCG0FPEjfgt+zS8ujIjyOj2f48dOA= -----END CERTIFICATE-----Generated at Mon Oct 26 05:16:06 2026 by rpki-client