$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa File: dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa (raw, json) Hash identifier: pmyvoybB07O2HImwZZtynJ2ClAXt3P4fWZLFsIz8M9s= Subject key identifier: 74:94:11:3F:02:FE:6A:AE:BA:BE:CD:26:74:4E:7E:C2:6E:65:2B:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F82ADA118942A05854AA48DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 12222 IP address blocks: 2001:4878:2356::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:a1:18:94:2a:05:85:4a:a4:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=8c430c22-1709-4051-93f0-44fc9b24eac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:46:4c:01:41:59:63:15:78:54:54:18:72: 98:d3:4f:49:55:3d:11:ab:e2:2e:08:98:b3:7d:c1: 14:d2:56:92:a9:84:bf:12:de:53:9e:1f:d2:f2:63: aa:15:0f:dc:35:64:b4:a6:53:6c:1e:15:bf:01:68: 00:0b:9c:b2:46:87:dc:4b:55:36:f8:85:e5:55:1f: e9:d5:9b:6a:9c:91:5a:cb:4e:58:19:db:dc:2b:f5: af:c6:e9:12:3e:f8:18:65:16:c0:a9:a5:b7:a0:44: 1f:27:e8:1f:2f:b5:82:ba:74:b7:fd:38:2c:72:eb: 98:ec:55:a0:3e:3c:14:dc:8d:91:9e:29:22:89:d1: f6:78:eb:a4:ba:62:24:53:d6:c2:0b:fa:55:0b:5c: 46:bc:4a:13:73:c8:c9:ca:16:52:26:3b:29:a2:cf: d8:08:51:9f:22:32:25:f7:27:34:04:42:5d:7c:bb: 69:d3:1a:87:58:65:fc:da:ad:bd:df:eb:29:71:19: b4:82:b4:1a:c8:d6:0d:3b:c1:86:b6:af:90:06:5d: b9:fb:19:c7:35:e9:bb:7c:e7:d7:38:b3:47:63:1d: e0:92:c4:a5:a5:69:3b:79:e3:59:cf:a3:64:8e:a2: 99:cf:10:11:24:b7:64:71:d4:bc:de:43:4d:04:bf: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:11:3F:02:FE:6A:AE:BA:BE:CD:26:74:4E:7E:C2:6E:65:2B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5ac422-1b81-34e2-aae2-ba087b4b4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2356::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9e:df:82:de:3c:be:06:74:33:b0:0c:42:bf:48:43:53:5c: 44:5a:fd:d4:35:37:3d:d1:e1:04:8e:b8:94:03:08:1d:02:0a: 0f:55:11:25:e7:df:31:e4:0c:0b:2f:0b:0a:45:e5:ec:65:68: 2d:92:2f:d5:b7:61:81:6a:0c:6e:6d:b3:25:9f:70:72:7a:ce: 6c:4b:53:65:8c:eb:17:4a:f3:04:8e:e4:5d:c7:1c:f4:64:f9: 27:2b:02:3e:77:35:a8:65:03:75:1c:9e:f0:66:92:82:2f:f0: 5e:95:86:ca:38:fb:54:2a:34:21:4c:5e:c6:bf:db:83:3f:f1: 62:84:d5:e4:86:b2:fb:27:6e:1d:5c:fe:4e:a7:c2:2f:49:5e: b9:76:61:10:6a:a7:df:06:f1:37:a0:37:0d:c3:5e:62:6c:88: e8:32:5c:f6:97:57:3d:f3:e0:8a:66:5f:fd:1b:59:f3:b7:84: 55:ed:25:26:d0:4d:c9:2c:86:0b:d7:ed:c3:b8:45:c6:be:82: 50:96:ea:d2:0a:c2:f1:46:33:e3:d6:02:9a:7c:63:25:da:36: 20:ca:a6:b3:83:19:88:29:2c:3f:0a:3e:cb:3a:b6:05:b3:2d: e3:f7:71:45:d1:26:88:80:be:c3:59:de:be:15:f1:c9:5c:dc: 30:3c:13:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CraEYlCoFhUqkjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk OGM0MzBjMjItMTcwOS00MDUxLTkzZjAtNDRmYzliMjRlYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAFGTAFBWWMVeFRUGHKY009JVT0Rq+IuCJiz fcEU0laSqYS/Et5Tnh/S8mOqFQ/cNWS0plNsHhW/AWgAC5yyRofcS1U2+IXlVR/p 1ZtqnJFay05YGdvcK/WvxukSPvgYZRbAqaW3oEQfJ+gfL7WCunS3/TgscuuY7FWg PjwU3I2RnikiidH2eOukumIkU9bCC/pVC1xGvEoTc8jJyhZSJjspos/YCFGfIjIl 9yc0BEJdfLtp0xqHWGX82q293+spcRm0grQayNYNO8GGtq+QBl25+xnHNem7fOfX OLNHYx3gksSlpWk7eeNZz6NkjqKZzxARJLdkcdS83kNNBL8wZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHSUET8C/mquur7NJnROfsJuZSvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ1YWM0MjItMWI4MS0z NGUyLWFhZTItYmEwODdiNGI0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCNW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAue34LePL4GdDOwDEK/SENTXERa/dQ1Nz3R4QSOuJQDCB0CCg9V ESXn3zHkDAsvCwpF5exlaC2SL9W3YYFqDG5tsyWfcHJ6zmxLU2WM6xdK8wSO5F3H HPRk+ScrAj53NahlA3UcnvBmkoIv8F6Vhso4+1QqNCFMXsa/24M/8WKE1eSGsvsn bh1c/k6nwi9JXrl2YRBqp98G8TegNw3DXmJsiOgyXPaXVz3z4IpmX/0bWfO3hFXt JSbQTckshgvX7cO4Rca+glCW6tIKwvFGM+PWApp8YyXaNiDKprODGYgpLD8KPss6 tgWzLeP3cUXRJoiAvsNZ3r4V8clc3DA8E2Q= -----END CERTIFICATE-----Generated at Fri Oct 23 11:26:44 2026 by rpki-client