$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa File: f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa (raw, json) Hash identifier: RnE+agLM4yM9tNDU3plyumlIDJ7hMDAvvINMkpb+a7w= Subject key identifier: 32:1B:0C:21:0B:85:9A:29:9B:6E:D7:27:5B:01:3C:D2:47:E8:0B:C3 Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584F7A5032EB0AB09F7B97F42360 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 25635 IP address blocks: 2605:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:32:eb:0a:b0:9f:7b:97:f4:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0a642856-79cd-4359-a06a-b28914957a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:1e:9b:a3:d9:55:e4:76:e7:be:39:bc:4d: 81:66:2b:ed:06:37:b0:7b:7f:ff:60:e3:cc:1b:06: dc:20:2a:59:46:6b:6f:87:82:3d:da:92:07:aa:b6: cf:cf:99:ed:13:2d:21:d9:8c:33:4c:f0:7c:e4:d1: 35:67:96:26:7b:af:a2:96:9e:1f:e9:e5:b6:3a:a7: 75:61:29:65:da:1b:08:69:23:4e:26:89:91:c8:d9: bf:ad:e8:b0:6c:7f:62:7f:9b:b0:48:28:f3:e8:0a: 07:7f:49:0d:be:bb:7e:c3:a9:b3:fe:df:1d:a8:89: 7e:ce:28:f5:c5:c7:3b:e8:ba:bc:0c:57:93:1a:2c: c3:cb:e2:6c:bf:af:54:06:14:29:73:99:fd:9b:27: 53:cb:f1:37:09:ad:3e:5b:7f:eb:a5:ef:ed:ef:56: be:dd:9e:8c:15:6b:08:3a:00:55:94:a3:73:c4:f9: 09:70:92:69:8a:19:33:0f:a8:1b:d5:12:49:02:00: 17:31:87:75:7c:5f:61:d6:6d:35:b9:49:b2:2e:c1: e3:47:c0:83:d2:0f:a7:fa:06:2a:e5:1b:3b:30:a2: fd:10:cc:3c:bf:4a:44:11:af:45:46:8e:74:52:1c: 99:1e:2c:8f:a9:74:db:4b:8d:76:df:9d:2f:f7:e0: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:0C:21:0B:85:9A:29:9B:6E:D7:27:5B:01:3C:D2:47:E8:0B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f4:60:2a:69:74:6b:11:4d:8b:52:c1:cf:09:45:65:9d:ea: 18:c7:20:77:f8:f8:22:74:e2:06:65:9c:c9:6c:6d:1b:e8:53: 76:ca:25:ec:a3:0b:79:d3:c5:cb:b2:69:b5:39:3b:94:06:f1: 91:df:0c:b2:49:f5:c0:96:3d:84:37:0e:ee:f8:86:1f:f2:5e: 64:87:61:d5:c5:7e:c5:2d:82:a1:c4:d0:54:f3:7a:31:f1:d7: 2c:c3:60:19:b5:c3:cd:c4:68:cd:4d:c8:e1:e6:a9:f4:c3:30: 2d:59:71:21:1c:d4:20:24:fd:f7:08:f8:47:58:fc:b5:ea:c9: a8:21:c6:04:35:9b:53:99:9e:5d:44:14:1f:a1:d3:af:3b:74: 8f:35:8d:af:1d:91:87:9b:9f:56:01:02:1d:f4:36:37:86:65: cf:82:9d:73:da:4d:54:1b:fc:b9:63:b0:06:44:fa:9d:e9:7f: 08:58:67:05:91:12:d9:93:e9:30:6b:b4:17:00:9b:e9:45:fe: df:3b:cb:b5:3e:5c:65:cb:5a:5a:3d:e9:7b:2e:e8:54:a4:9b: 02:18:9b:f9:c7:36:04:c0:e1:9b:79:7e:87:57:c1:6e:3c:f0: 5e:0a:f2:7d:36:12:3a:73:49:dd:67:f5:03:73:de:88:4f:33: 4a:ea:6c:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE96UDLrCrCfe5f0I2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MGE2NDI4NTYtNzljZC00MzU5LWEwNmEtYjI4OTE0OTU3YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMem6PZVeR25745vE2BZivtBjewe3//YOPM GwbcICpZRmtvh4I92pIHqrbPz5ntEy0h2YwzTPB85NE1Z5Yme6+ilp4f6eW2Oqd1 YSll2hsIaSNOJomRyNm/reiwbH9if5uwSCjz6AoHf0kNvrt+w6mz/t8dqIl+zij1 xcc76Lq8DFeTGizDy+Jsv69UBhQpc5n9mydTy/E3Ca0+W3/rpe/t71a+3Z6MFWsI OgBVlKNzxPkJcJJpihkzD6gb1RJJAgAXMYd1fF9h1m01uUmyLsHjR8CD0g+n+gYq 5Rs7MKL9EMw8v0pEEa9FRo50UhyZHiyPqXTbS412350v9+CsqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIbDCELhZopm27XJ1sBPNJH6AvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvZjQzMzg2MWUtZWY3My0z YzVhLWEzYTUtZTdiYTU1Nzg2ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAb9GAqaXRrEU2LUsHPCUVlneoYxyB3+PgidOIGZZzJbG0b6FN2yiXs owt508XLsmm1OTuUBvGR3wyySfXAlj2ENw7u+IYf8l5kh2HVxX7FLYKhxNBU83ox 8dcsw2AZtcPNxGjNTcjh5qn0wzAtWXEhHNQgJP33CPhHWPy16smoIcYENZtTmZ5d RBQfodOvO3SPNY2vHZGHm59WAQId9DY3hmXPgp1z2k1UG/y5Y7AGRPqd6X8IWGcF kRLZk+kwa7QXAJvpRf7fO8u1Plxly1paPel7LuhUpJsCGJv5xzYEwOGbeX6HV8Fu PPBeCvJ9NhI6c0ndZ/UDc96ITzNK6mwv -----END CERTIFICATE-----Generated at Tue Oct 13 02:22:36 2026 by rpki-client