$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa File: dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json) Hash identifier: 5dbhGt3wUMzPNkzIo6tPwsmcNbATnfXEa0FBG3TgeDY= Subject key identifier: DD:5B:39:08:8A:3C:93:FD:0C:F2:8B:AA:28:E3:4B:BF:E8:07:92:13 Certificate issuer: /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963 Certificate serial: 010D0C9F4328584F89A86AAB890E0044EAE5EB00 Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 33194 IP address blocks: 2620:10:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:6a:ab:89:0e:00:44:ea:e5:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=b9a864db-388b-4ec2-8305-87351cd38f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:8c:cb:55:2a:d4:28:5e:ff:ab:97:19:ff: ae:b0:d0:0d:92:65:51:5a:ec:57:e4:81:dc:36:34: 9a:6e:fe:db:84:52:40:ce:68:32:85:32:65:99:99: 37:f5:31:32:8c:76:c0:74:32:83:24:b3:d2:ac:fb: 6a:62:91:a2:5c:fa:cc:ea:4a:db:8c:e2:27:ee:95: 14:92:61:86:6f:47:a2:da:c7:1e:39:5e:d5:0b:09: 3b:e4:06:a5:e6:9c:34:df:87:36:dd:a8:0f:f3:a3: 70:45:f2:31:82:01:8d:3d:49:5b:cf:71:75:3c:c2: eb:88:5b:6e:5d:ae:56:9d:c6:90:ae:8a:75:f4:05: 62:e3:f0:08:ed:30:b4:ee:68:af:0b:d6:35:bf:c4: 5c:24:52:08:4f:86:83:88:7b:1b:63:30:e0:2f:81: 5c:29:0f:77:c5:18:ef:da:f3:c5:1a:d6:fc:71:f3: 97:1f:a6:07:4f:6a:6c:0a:ad:37:fa:a5:7c:f7:ac: 08:b1:0f:b1:d4:b1:c0:cc:ca:be:ae:60:6d:84:07: 32:46:a0:f2:cf:96:3b:b3:8c:04:c0:51:03:88:95: 56:72:2f:c9:c6:b1:99:aa:e1:9d:f2:11:50:84:6e: ca:a6:21:f1:c8:52:29:0e:93:c0:75:05:dd:ac:f4: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:39:08:8A:3C:93:FD:0C:F2:8B:AA:28:E3:4B:BF:E8:07:92:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl X509v3 Authority Key Identifier: keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer sbgp-ipAddrBlock: critical IPv6: 2620:10:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:4e:fc:5f:2f:94:ff:99:b5:3f:30:48:2e:38:29:a8:6a:f4: be:74:93:77:f8:6c:3f:d9:a8:f7:72:30:49:0a:83:17:5e:de: 52:84:35:4d:68:6e:32:85:5a:e1:d9:56:7d:f4:c3:e3:96:bf: 59:98:57:3e:07:83:6d:c0:cf:56:13:78:c7:51:0e:d8:05:fa: 85:6d:f6:7b:b5:7b:a6:a6:fd:d4:38:6f:67:3b:1f:c1:d0:86: 93:81:7c:fc:94:fc:42:e1:a6:83:84:f6:78:2a:dd:ce:29:80: c3:86:b3:9b:55:e2:ec:3c:34:14:cf:ed:c4:09:59:32:a7:55: 1e:dd:80:24:49:13:f0:79:8a:ef:1c:7c:2f:42:2d:75:28:41: da:ec:ea:5e:85:69:ad:31:b8:bb:d3:2e:82:09:78:ec:55:49: ae:77:ea:12:8c:6f:02:ac:bc:af:64:fc:ef:c2:18:25:4d:f4: 9b:c7:67:36:2f:e7:29:39:e8:13:e5:fc:35:ef:31:6a:7f:27: 52:1b:85:47:4d:1c:b2:91:e3:49:32:36:be:8e:d6:ff:c7:ad: 13:ad:7e:50:d4:70:f5:26:2d:f6:70:7e:67:1c:e4:9e:e8:74: 60:d2:66:b7:d0:37:6d:10:08:79:ba:a1:4a:f7:00:4b:73:17: 9d:18:6b:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+JqGqriQ4AROrl6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZiNDk1ZmEtYjViMi00ZDQ3LWFhYjAtYmI0NzZjYTYx OTYzMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk YjlhODY0ZGItMzg4Yi00ZWMyLTgzMDUtODczNTFjZDM4ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ+My1Uq1Che/6uXGf+usNANkmVRWuxX5IHc NjSabv7bhFJAzmgyhTJlmZk39TEyjHbAdDKDJLPSrPtqYpGiXPrM6krbjOIn7pUU kmGGb0ei2sceOV7VCwk75Aal5pw034c23agP86NwRfIxggGNPUlbz3F1PMLriFtu Xa5WncaQrop19AVi4/AI7TC07mivC9Y1v8RcJFIIT4aDiHsbYzDgL4FcKQ93xRjv 2vPFGtb8cfOXH6YHT2psCq03+qV896wIsQ+x1LHAzMq+rmBthAcyRqDyz5Y7s4wE wFEDiJVWci/JxrGZquGd8hFQhG7KpiHxyFIpDpPAdQXdrPSDIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1bOQiKPJP9DPKLqijjS7/oB5ITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0 OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3NmNhNjE5NjMvZGJhMzAxMzgtM2Q1ZS0z OGI1LTkxYTctZTg3NjcyZWEwZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmZiNDk1ZmEtYjViMi00ZDQ3LWFh YjAtYmI0NzZjYTYxOTYzLzJmYjQ5NWZhLWI1YjItNGQ0Ny1hYWIwLWJiNDc2Y2E2 MTk2My5jcmwwHwYDVR0jBBgwFoAUnCdChVjU1qp998WLkmw2naSFf5QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3 NmNhNjE5NjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAEKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANhO/F8vlP+ZtT8wSC44Kahq9L50k3f4bD/ZqPdyMEkKgxde3lKE NU1objKFWuHZVn30w+OWv1mYVz4Hg23Az1YTeMdRDtgF+oVt9nu1e6am/dQ4b2c7 H8HQhpOBfPyU/ELhpoOE9ngq3c4pgMOGs5tV4uw8NBTP7cQJWTKnVR7dgCRJE/B5 iu8cfC9CLXUoQdrs6l6Faa0xuLvTLoIJeOxVSa536hKMbwKsvK9k/O/CGCVN9JvH ZzYv5yk56BPl/DXvMWp/J1IbhUdNHLKR40kyNr6O1v/HrROtflDUcPUmLfZwfmcc 5J7odGDSZrfQN20QCHm6oUr3AEtzF50YazE= -----END CERTIFICATE-----Generated at Sun Nov 15 16:32:06 2026 by rpki-client