$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa File: 27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa (raw, json) Hash identifier: 0eE/h/1WL+RwnY6Vx0KPi3eYr6EJNmZdXc4qs89S5JU= Subject key identifier: 65:E0:A6:DA:0A:C1:C7:49:AB:C9:DC:62:AA:D6:83:A1:7C:F5:65:6C Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584F4973E8B653696E85155FC380 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19381 IP address blocks: 2605:c400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e8:b6:53:69:6e:85:15:5f:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e728f779-3d05-48a2-ae08-f9c83968bacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:e0:15:ad:38:b5:0f:aa:e8:39:90:60:49: 36:f1:94:e5:0e:3a:4e:f0:41:70:ad:7c:21:ec:3c: 71:2f:93:a5:01:d4:6d:e6:c7:b4:03:3f:ab:68:38: b0:94:fa:77:ce:dd:23:07:80:97:94:a2:b3:c3:1d: ce:5f:cb:2c:18:93:df:77:64:61:2f:18:25:d1:c8: a5:12:57:4d:f3:78:bc:57:ba:53:f9:a4:e0:82:11: 17:4d:aa:53:e0:00:c5:f5:2c:e1:fa:10:de:7a:e8: 0a:75:c9:b3:21:b0:86:b3:c7:7d:1f:56:f7:be:84: e1:03:c1:e1:da:c2:0a:9e:c6:01:fb:ce:48:79:37: 29:27:42:93:f2:e9:01:57:a1:06:a7:da:d5:79:00: 2a:4c:3c:8a:bb:41:be:98:6f:5f:53:82:56:ca:43: 06:de:d3:fd:b7:18:7f:d0:fd:3f:90:c9:be:4e:6e: 4c:99:f2:2f:80:0a:4c:ff:5a:40:2a:b4:03:af:14: 70:e9:76:4f:79:7b:c3:07:2c:63:ee:95:3c:e0:d3: 45:3c:04:47:cf:68:44:55:c3:ee:89:56:27:bb:a7: 6d:aa:bb:b0:87:e7:1d:f3:62:48:eb:c8:56:09:10: d0:aa:fb:87:45:f4:56:4b:12:8f:dd:e5:0f:f1:96: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:A6:DA:0A:C1:C7:49:AB:C9:DC:62:AA:D6:83:A1:7C:F5:65:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv6: 2605:c400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:ab:91:70:be:88:80:07:31:9c:24:ed:c7:9d:30:25:cd: 1c:35:1c:27:69:c4:46:86:a4:b8:56:2b:55:bd:10:6f:ac:05: 75:5f:1f:65:0b:05:80:20:76:04:10:11:b8:b1:75:b8:6e:39: c6:1b:35:1b:de:27:f4:99:49:ea:fc:18:db:c5:1a:9a:ca:83: d0:a7:3e:12:5c:43:6e:b8:ae:7e:85:2a:8f:c5:83:38:a0:50: cd:05:42:35:bf:8e:69:7d:97:41:94:2a:73:57:a1:e4:49:f8: fb:07:13:14:50:6b:51:d8:dd:3e:a5:6e:50:c3:c5:d9:86:c1: 72:0a:9e:c7:59:eb:26:0c:54:4a:24:66:aa:8c:fe:5d:f9:14: 9d:41:10:db:d0:aa:3e:d6:08:a9:16:70:ab:9a:b4:7d:8e:8e: b0:f0:f2:64:6b:93:66:10:23:ea:09:7a:08:7c:80:68:4f:30: 5f:ca:3c:5c:33:7c:7e:e5:0c:ef:f8:36:15:39:28:2e:dc:22: e2:fc:cf:f4:3a:c0:96:bf:95:6f:e4:b7:d3:e6:33:2f:14:aa: 41:aa:56:08:98:a1:44:51:7f:22:1d:04:e6:25:c5:64:1b:be: 99:0e:a0:f6:11:2a:5f:a8:4d:03:4d:03:75:bd:81:37:0b:f2: d0:ed:57:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc+i2U2luhRVfw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTcyOGY3NzktM2QwNS00OGEyLWFlMDgtZjljODM5NjhiYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNLgFa04tQ+q6DmQYEk28ZTlDjpO8EFwrXwh 7DxxL5OlAdRt5se0Az+raDiwlPp3zt0jB4CXlKKzwx3OX8ssGJPfd2RhLxgl0cil EldN83i8V7pT+aTgghEXTapT4ADF9Szh+hDeeugKdcmzIbCGs8d9H1b3voThA8Hh 2sIKnsYB+85IeTcpJ0KT8ukBV6EGp9rVeQAqTDyKu0G+mG9fU4JWykMG3tP9txh/ 0P0/kMm+Tm5MmfIvgApM/1pAKrQDrxRw6XZPeXvDByxj7pU84NNFPARHz2hEVcPu iVYnu6dtqruwh+cd82JI68hWCRDQqvuHRfRWSxKP3eUP8ZbYywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXgptoKwcdJq8ncYqrWg6F89WVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvMjdlNGJiZmMtNjAxMS0z ZjlhLTg0OTgtOWVjOWU3ZDk1ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCG5KuRcL6IgAcxnCTtx50wJc0cNRwnacRGhqS4VitVvRBvrAV1Xx9l CwWAIHYEEBG4sXW4bjnGGzUb3if0mUnq/BjbxRqayoPQpz4SXENuuK5+hSqPxYM4 oFDNBUI1v45pfZdBlCpzV6HkSfj7BxMUUGtR2N0+pW5Qw8XZhsFyCp7HWesmDFRK JGaqjP5d+RSdQRDb0Ko+1gipFnCrmrR9jo6w8PJka5NmECPqCXoIfIBoTzBfyjxc M3x+5Qzv+DYVOSgu3CLi/M/0OsCWv5Vv5LfT5jMvFKpBqlYImKFEUX8iHQTmJcVk G76ZDqD2ESpfqE0DTQN1vYE3C/LQ7Vf0 -----END CERTIFICATE-----Generated at Sun Sep 27 16:22:10 2026 by rpki-client