$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa File: 8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (raw, json) Hash identifier: KWhOMugoTKOsQLHziHa/8REEhWi0J1cYomy4QrCNxDs= Subject key identifier: 1C:74:0B:3E:A4:C5:6C:E3:BF:90:4A:47:D2:17:FE:D9:F1:05:02:37 Certificate issuer: /CN=331beef2-1596-4a21-8613-1e84adac3bfc Certificate serial: 010D0C9F4328584F7A50241154C5660A10D0A700 Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3359 IP address blocks: 2620:101:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:24:11:54:c5:66:0a:10:d0:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0c07e129-4aa6-4c6e-b264-36527bbdfd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:f0:cf:23:61:c7:67:f0:10:27:c9:b0:13: d0:f0:97:44:24:b7:fa:0d:6e:ed:bf:26:ad:3d:45: 9f:b3:86:e6:5f:9c:a9:f2:3a:d7:7d:c8:9a:98:05: d5:70:fb:42:14:c3:98:fe:d3:49:5c:a8:6f:31:8d: 62:d4:db:67:8a:fa:c6:aa:59:e0:1c:b2:ce:ab:b2: 62:54:39:40:34:b7:da:4f:1a:76:e8:fe:db:45:de: cd:ea:43:cb:89:31:22:e0:48:0e:7a:33:14:76:17: fe:cc:9a:b5:eb:e4:f1:f9:1d:5d:a4:f9:e4:93:8b: a9:54:b1:e2:d3:a0:5b:45:6c:a4:89:0f:f2:d2:ed: 73:f5:a2:b5:cc:06:8d:98:6f:85:50:c2:47:bb:11: 1f:5b:6c:c7:e8:bd:21:fe:72:ec:43:84:be:8d:a9: 28:31:a2:d5:60:ae:38:82:30:e6:33:44:ee:a9:f0: 0f:d6:24:9a:46:f7:d1:74:b9:35:4e:6d:53:0c:f9: f0:c5:23:08:da:d5:6e:de:2d:6f:51:1e:1a:4b:84: ca:c4:6c:42:b3:63:c1:7d:4e:ca:c4:7b:73:69:ec: cb:89:2e:93:1e:2e:4b:12:d4:a7:1a:41:25:ce:25: eb:b1:50:35:a7:41:6d:bb:ee:91:ef:ba:67:6e:ee: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:0B:3E:A4:C5:6C:E3:BF:90:4A:47:D2:17:FE:D9:F1:05:02:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl X509v3 Authority Key Identifier: keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c9:4f:cb:9b:7f:df:36:89:d7:4a:f6:b4:f9:18:2e:32:a5: 93:30:5d:c2:e8:04:d8:15:d9:33:4c:8d:cc:b8:92:2e:39:f0: e0:67:65:e7:6b:5c:60:c7:a8:66:56:f9:77:0a:66:ff:ee:54: c3:55:b9:31:c2:6e:b9:4c:46:53:6b:d7:4a:f5:3e:cc:1f:59: 64:af:b3:ef:d9:0d:31:8a:89:65:c1:79:28:a4:10:28:fd:fd: e8:8f:4e:aa:08:d4:88:e7:48:d2:4a:9a:fd:5b:b8:e2:99:41: f1:d8:98:b9:2c:00:70:35:42:3d:41:e7:f7:68:fa:e4:2f:5c: 8f:0d:f2:2a:80:02:b5:8b:7e:56:ed:4e:48:61:45:c1:ac:98: 7a:5b:b7:f0:41:33:c1:c9:67:47:4f:29:10:1f:fa:ba:62:72: 96:45:3b:e0:9d:cf:c3:58:e4:bb:2e:97:6d:18:d4:29:b9:27: a6:28:93:1f:f5:ca:38:57:4b:4f:cd:38:b2:48:7d:8a:91:ce: 7e:f7:77:34:83:c4:a5:3c:cb:46:6f:6e:12:48:e2:9f:3d:3d: d6:6f:ed:25:9c:18:38:42:96:4a:04:67:e6:15:6d:5c:fe:5c: 5c:fc:e6:82:0a:6e:96:ec:c8:ab:d6:aa:02:2d:d5:80:75:ef: 8b:45:6c:0f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE96UCQRVMVmChDQpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMxYmVlZjItMTU5Ni00YTIxLTg2MTMtMWU4NGFkYWMz YmZjMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MGMwN2UxMjktNGFhNi00YzZlLWIyNjQtMzY1MjdiYmRmZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLzwzyNhx2fwECfJsBPQ8JdEJLf6DW7tvyat PUWfs4bmX5yp8jrXfciamAXVcPtCFMOY/tNJXKhvMY1i1NtnivrGqlngHLLOq7Ji VDlANLfaTxp26P7bRd7N6kPLiTEi4EgOejMUdhf+zJq16+Tx+R1dpPnkk4upVLHi 06BbRWykiQ/y0u1z9aK1zAaNmG+FUMJHuxEfW2zH6L0h/nLsQ4S+jakoMaLVYK44 gjDmM0TuqfAP1iSaRvfRdLk1Tm1TDPnwxSMI2tVu3i1vUR4aS4TKxGxCs2PBfU7K xHtzaezLiS6THi5LEtSnGkElziXrsVA1p0Ftu+6R77pnbu4JZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBx0Cz6kxWzjv5BKR9IX/tnxBQI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFi ZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0YWRhYzNiZmMvOGEzZDRhYWMtN2FkZC0z NDRkLWE1NDItYTk2ZjkwNWY3Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzMxYmVlZjItMTU5Ni00YTIxLTg2 MTMtMWU4NGFkYWMzYmZjLzMzMWJlZWYyLTE1OTYtNGEyMS04NjEzLTFlODRhZGFj M2JmYy5jcmwwHwYDVR0jBBgwFoAUO+Ro/9pz+cLk1Xujm9IVthNokZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFiZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0 YWRhYzNiZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABAcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjclPy5t/3zaJ10r2tPkYLjKlkzBdwugE2BXZM0yNzLiSLjnw4Gdl 52tcYMeoZlb5dwpm/+5Uw1W5McJuuUxGU2vXSvU+zB9ZZK+z79kNMYqJZcF5KKQQ KP396I9OqgjUiOdI0kqa/Vu44plB8diYuSwAcDVCPUHn92j65C9cjw3yKoACtYt+ Vu1OSGFFwayYelu38EEzwclnR08pEB/6umJylkU74J3Pw1jkuy6XbRjUKbknpiiT H/XKOFdLT804skh9ipHOfvd3NIPEpTzLRm9uEkjinz091m/tJZwYOEKWSgRn5hVt XP5cXPzmggpuluzIq9aqAi3VgHXvi0VsDw== -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:00 2026 by rpki-client