$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa File: 0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json) Hash identifier: TUAv+keUTNMbVJjqf6l1y5YU7Dsj8kleEYNcY86igTg= Subject key identifier: 41:E3:A7:D7:C9:FA:1B:4B:0A:27:48:DD:32:4E:24:6C:E2:16:BC:E7 Certificate issuer: /CN=285991ba-0db5-48fe-92ff-d202c357d86d Certificate serial: 010D0C9F4328584FCCC68FFB352DD2139A95B140 Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 31998 IP address blocks: 2605:ed40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:8f:fb:35:2d:d2:13:9a:95:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=b4827247-a193-41fd-bdbb-69b036517414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b9:a5:49:37:f3:f2:d4:f3:0e:86:70:d9:80: 01:9c:7d:5c:3c:15:65:58:34:35:a9:bb:d8:2b:3a: e1:bd:53:c9:79:ac:d9:80:99:a5:b5:dd:40:19:49: 14:3e:e0:53:1a:84:93:3a:cb:83:0f:49:2c:40:18: ac:12:4d:f1:b2:25:43:92:ac:b4:88:59:b5:43:fb: 23:2f:4d:60:eb:5d:ca:58:97:16:e1:2b:50:01:dc: 02:cd:4c:3d:5e:43:76:17:0f:09:54:05:56:42:a9: 10:90:a2:76:c7:4a:54:c6:de:b9:9e:75:6b:ba:6a: 99:59:d4:cb:58:b5:6a:83:26:34:01:eb:97:4b:14: 9f:c7:64:cc:f6:e4:da:1e:67:c1:57:93:ca:e1:9f: 21:8e:7a:5d:5f:14:26:a1:1a:bd:c4:e4:3e:af:eb: c8:0c:00:a4:66:cd:7d:64:3b:88:83:2f:a9:74:53: a3:79:01:96:05:6f:29:f0:07:71:8c:d1:db:85:8c: 68:27:20:b5:a0:07:69:76:56:7f:6d:f4:83:d4:ad: b0:3c:56:b4:f0:64:c1:bf:fa:d6:4c:d6:d6:63:67: 66:71:55:89:8a:82:df:23:2c:cb:17:b4:86:8d:58: b7:ba:ef:a0:eb:6d:04:d8:35:fb:df:72:f1:64:3d: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E3:A7:D7:C9:FA:1B:4B:0A:27:48:DD:32:4E:24:6C:E2:16:BC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl X509v3 Authority Key Identifier: keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer sbgp-ipAddrBlock: critical IPv6: 2605:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c0:b0:8f:65:c1:74:25:e0:41:e6:45:02:17:d9:23:ce:80: 46:3a:66:35:65:1e:85:cd:35:78:ef:47:f7:4b:2d:d3:ee:16: b8:96:ce:7d:15:16:43:d5:79:6f:1a:35:ab:0f:45:8e:1f:6e: ab:b5:d5:aa:05:0b:46:43:74:51:80:87:ce:04:9c:a0:00:ee: 0a:d9:11:1e:e2:d6:67:52:98:65:10:4e:47:e4:2e:65:68:d6: 52:f7:6c:83:7d:8b:ea:10:25:a9:20:05:5e:67:f2:c3:0e:c3: 4d:40:73:1d:db:5b:2a:34:c7:84:6b:7c:b3:ef:0f:43:39:30: a3:35:54:1a:1c:3e:0f:69:70:84:63:fd:59:f2:3d:97:f7:be: 9a:6c:21:17:ea:8e:0e:21:1c:68:98:9d:6f:5d:1e:b9:e0:11: c6:05:ec:ce:03:e1:30:3c:8e:85:be:2f:68:7b:f4:be:77:a9: bb:cd:96:ac:99:7d:d4:d8:e3:88:90:ab:46:7a:7f:1f:d2:98: e3:17:15:67:43:62:21:a0:f5:6e:94:89:79:d6:f7:f1:05:c5: 46:3e:b9:f5:9b:6b:50:87:9f:73:93:9d:60:b6:ab:69:71:c6: 5f:d1:7d:33:fb:d0:67:3e:81:85:db:16:9d:8d:59:83:db:3b: 4d:c0:a2:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxo/7NS3SE5qVsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTkxYmEtMGRiNS00OGZlLTkyZmYtZDIwMmMzNTdk ODZkMB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YjQ4MjcyNDctYTE5My00MWZkLWJkYmItNjliMDM2NTE3NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7mlSTfz8tTzDoZw2YABnH1cPBVlWDQ1qbvY KzrhvVPJeazZgJmltd1AGUkUPuBTGoSTOsuDD0ksQBisEk3xsiVDkqy0iFm1Q/sj L01g613KWJcW4StQAdwCzUw9XkN2Fw8JVAVWQqkQkKJ2x0pUxt65nnVrumqZWdTL WLVqgyY0AeuXSxSfx2TM9uTaHmfBV5PK4Z8hjnpdXxQmoRq9xOQ+r+vIDACkZs19 ZDuIgy+pdFOjeQGWBW8p8AdxjNHbhYxoJyC1oAdpdlZ/bfSD1K2wPFa08GTBv/rW TNbWY2dmcVWJioLfIyzLF7SGjVi3uu+g620E2DX733LxZD391QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEHjp9fJ+htLCidI3TJOJGziFrznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yODU5 OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAyYzM1N2Q4NmQvMGZmMmY2MzItOTU5Ny0z ZTgyLWE3YTktYzNkZDRlNWMwYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjg1OTkxYmEtMGRiNS00OGZlLTky ZmYtZDIwMmMzNTdkODZkLzI4NTk5MWJhLTBkYjUtNDhmZS05MmZmLWQyMDJjMzU3 ZDg2ZC5jcmwwHwYDVR0jBBgwFoAUhmmOSco8aoME1RojxGFir6wBQq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yODU5OTFiYS0wZGI1LTQ4ZmUtOTJmZi1kMjAy YzM1N2Q4NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXtQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQwLCPZcF0JeBB5kUCF9kjzoBGOmY1ZR6FzTV470f3Sy3T7ha4ls59 FRZD1XlvGjWrD0WOH26rtdWqBQtGQ3RRgIfOBJygAO4K2REe4tZnUphlEE5H5C5l aNZS92yDfYvqECWpIAVeZ/LDDsNNQHMd21sqNMeEa3yz7w9DOTCjNVQaHD4PaXCE Y/1Z8j2X976abCEX6o4OIRxomJ1vXR654BHGBezOA+EwPI6Fvi9oe/S+d6m7zZas mX3U2OOIkKtGen8f0pjjFxVnQ2IhoPVulIl51vfxBcVGPrn1m2tQh59zk51gtqtp ccZf0X0z+9BnPoGF2xadjVmD2ztNwKJa -----END CERTIFICATE-----Generated at Sun Nov 15 22:34:14 2026 by rpki-client