$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/d6d55fa9-258d-3efa-ae29-5ea8643f4457.roa File: d6d55fa9-258d-3efa-ae29-5ea8643f4457.roa (raw, json) Hash identifier: Wr6vDDDCcEOM+4Mj+zi8GotHIWESRjLyA/hZ4tMZc7o= Subject key identifier: 20:5A:29:CD:86:88:58:E1:39:80:FC:8A:0F:A9:CF:AD:30:A4:F6:66 Certificate issuer: /CN=f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2 Certificate serial: 010D0C9F4328584F6AF2BAD0A35593C3760F01C0 Authority key identifier: 57:DD:D5:BE:A2:6A:60:CE:26:47:04:1C:C6:2D:53:5F:C0:F0:D1:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/d6d55fa9-258d-3efa-ae29-5ea8643f4457.roa Signing time: Wed 07 Oct 2026 01:00:12 +0000 ROA not before: Wed 07 Oct 2026 01:00:12 +0000 ROA not after: Tue 05 Jan 2027 02:00:12 +0000 asID: 402398 IP address blocks: 2620:12:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:f2:ba:d0:a3:55:93:c3:76:0f:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2 Validity Not Before: Oct 7 01:00:12 2026 GMT Not After : Jan 5 02:00:12 2027 GMT Subject: CN=d1950f35-d21b-4cfd-8264-3f41760af115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:3a:00:cf:0a:b7:6f:43:77:44:2b:1e:32: 7a:ab:2a:cd:26:bd:b8:06:eb:0d:1a:29:61:4c:33: ca:cf:5e:69:46:a3:cd:69:9e:61:9c:c9:02:d9:9b: 38:67:53:02:9a:71:0f:34:d0:bf:0d:82:8f:0c:c5: 4b:8b:ca:f7:62:40:3f:6f:d6:9f:5f:ca:eb:55:62: 32:a2:09:75:90:c5:37:d5:e8:1d:37:39:05:1a:37: 1e:37:a2:26:ab:16:71:8f:ad:9c:05:d0:e9:2b:5f: 1a:4f:b1:23:da:c8:d7:f4:39:24:56:1e:2e:45:7e: 2e:5a:47:c2:91:09:89:c2:14:81:33:98:1c:ba:9a: 43:ac:d8:ea:75:0a:7b:24:ee:21:ee:81:6b:3f:a2: 95:6b:b9:25:c8:bf:5d:14:e1:a6:7e:bc:8a:8c:0c: d7:b5:52:2b:3e:e2:93:7a:10:1f:ac:58:f1:a9:5f: 20:bd:92:12:e5:67:ee:00:33:e0:01:6d:6e:ae:1d: e4:6b:3c:39:6a:26:a3:9e:85:ef:b0:29:66:ec:20: 8e:d0:b5:af:9f:08:bd:cd:0a:f9:70:6c:39:49:d6: c5:28:b2:ad:c1:43:13:ea:ed:2a:3e:1f:49:d3:38: fe:45:8f:68:1b:c1:52:b6:dc:8f:98:24:23:b8:34: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:29:CD:86:88:58:E1:39:80:FC:8A:0F:A9:CF:AD:30:A4:F6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/d6d55fa9-258d-3efa-ae29-5ea8643f4457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.crl X509v3 Authority Key Identifier: keyid:57:DD:D5:BE:A2:6A:60:CE:26:47:04:1C:C6:2D:53:5F:C0:F0:D1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f109d2b8-0ebd-4ac3-b1e7-e984ffe8cba2.cer sbgp-ipAddrBlock: critical IPv6: 2620:12:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4e:dc:d0:23:c5:2e:65:b6:65:89:25:3b:c8:3e:92:f9:a6: e8:a1:60:fa:98:81:4f:70:e3:38:62:58:30:98:da:1c:65:6e: ad:e6:ef:b5:ec:2b:84:c2:5b:c5:eb:6f:a2:a8:b2:5b:d0:e5: 11:eb:2c:ad:2c:82:1c:32:eb:ba:4b:bd:cc:bb:91:db:e9:10: ed:da:25:2e:d9:62:4a:19:aa:20:e3:bb:2b:15:f8:95:b5:5a: 3f:34:46:d4:c4:08:82:fa:c4:7c:11:2f:a7:b6:a3:a0:69:9a: 68:e6:79:98:3b:31:0d:b4:82:f1:44:17:1c:82:c4:1a:c0:6e: 36:ce:cd:5c:dc:08:32:93:e7:77:91:eb:62:5a:ad:31:3f:c0: 1a:8e:d4:0c:a9:eb:bd:c2:9b:03:ec:b5:e4:8e:91:d3:a4:36: 94:64:75:d6:47:f8:0a:da:34:6d:ce:50:15:a1:a7:c5:f4:87: 13:85:06:96:e0:47:4d:f1:af:9c:c8:74:78:47:36:bc:b7:ac: fe:96:66:b8:cb:fd:f3:e1:57:20:c1:07:58:3c:3c:40:0d:d3: 1c:4d:93:16:3c:92:05:79:bb:82:eb:8b:ce:1d:b1:0f:36:08: 59:82:48:27:27:7e:f2:e3:a9:90:05:9b:6c:0c:ca:1f:e0:ab: d7:6d:cc:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9q8rrQo1WTw3YPAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEwOWQyYjgtMGViZC00YWMzLWIxZTctZTk4NGZmZThj YmEyMB4XDTI2MTAwNzAxMDAxMloXDTI3MDEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDE5NTBmMzUtZDIxYi00Y2ZkLTgyNjQtM2Y0MTc2MGFmMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH06AM8Kt29Dd0QrHjJ6qyrNJr24BusNGilh TDPKz15pRqPNaZ5hnMkC2Zs4Z1MCmnEPNNC/DYKPDMVLi8r3YkA/b9afX8rrVWIy ogl1kMU31egdNzkFGjceN6ImqxZxj62cBdDpK18aT7Ej2sjX9DkkVh4uRX4uWkfC kQmJwhSBM5gcuppDrNjqdQp7JO4h7oFrP6KVa7klyL9dFOGmfryKjAzXtVIrPuKT ehAfrFjxqV8gvZIS5WfuADPgAW1urh3kazw5aiajnoXvsClm7CCO0LWvnwi9zQr5 cGw5SdbFKLKtwUMT6u0qPh9J0zj+RY9oG8FSttyPmCQjuDRt3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBaKc2GiFjhOYD8ig+pz60wpPZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMTA5 ZDJiOC0wZWJkLTRhYzMtYjFlNy1lOTg0ZmZlOGNiYTIvZDZkNTVmYTktMjU4ZC0z ZWZhLWFlMjktNWVhODY0M2Y0NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjEwOWQyYjgtMGViZC00YWMzLWIx ZTctZTk4NGZmZThjYmEyL2YxMDlkMmI4LTBlYmQtNGFjMy1iMWU3LWU5ODRmZmU4 Y2JhMi5jcmwwHwYDVR0jBBgwFoAUV93VvqJqYM4mRwQcxi1TX8Dw0Z4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mMTA5ZDJiOC0wZWJkLTRhYzMtYjFlNy1lOTg0 ZmZlOGNiYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAEuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFO3NAjxS5ltmWJJTvIPpL5puihYPqYgU9w4zhiWDCY2hxlbq3m 77XsK4TCW8Xrb6KoslvQ5RHrLK0sghwy67pLvcy7kdvpEO3aJS7ZYkoZqiDjuysV +JW1Wj80RtTECIL6xHwRL6e2o6BpmmjmeZg7MQ20gvFEFxyCxBrAbjbOzVzcCDKT 53eR62JarTE/wBqO1Ayp673CmwPsteSOkdOkNpRkddZH+AraNG3OUBWhp8X0hxOF BpbgR03xr5zIdHhHNry3rP6WZrjL/fPhVyDBB1g8PEAN0xxNkxY8kgV5u4Lri84d sQ82CFmCSCcnfvLjqZAFm2wMyh/gq9dtzLU= -----END CERTIFICATE-----Generated at Sun Nov 15 12:29:21 2026 by rpki-client