$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: kZo41zXvsP+e+cQdNYM+aM/LO1e0yedGKkCz1WH7S+s= Subject key identifier: 7A:37:3A:A9:4E:D1:D1:F4:12:18:7B:96:6C:0A:09:13:96:E7:B5:FC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD0F69F57B3F3C97ECD25C580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Thu 12 Nov 2026 14:00:13 +0000 ROA not before: Thu 12 Nov 2026 14:00:13 +0000 ROA not after: Wed 10 Feb 2027 14:00:13 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d0:f6:9f:57:b3:f3:c9:7e:cd:25:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 12 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2027 GMT Subject: CN=00143566-c6e0-4a59-ac63-1169f344018e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:0c:1d:68:04:c7:50:b2:8f:7a:8a:75:45: 32:ae:51:b2:fd:96:25:7f:fe:6b:e0:67:3f:9d:4b: aa:e9:34:d4:9d:b1:b3:b6:62:f8:ef:bd:00:57:eb: c4:1e:ab:3e:f6:dc:1c:7e:11:f7:c6:22:31:e9:50: 1a:89:a1:20:bb:5e:1a:fd:78:83:94:59:0e:d3:a3: ea:bc:eb:10:3c:14:45:3d:1e:cf:da:ee:65:f9:73: 0a:9e:df:26:b7:63:cb:28:da:b9:78:9d:57:f4:bd: 67:d6:b9:46:ab:9b:d3:0c:84:c8:b7:ba:c3:1c:4f: c9:a0:1f:74:a1:47:68:15:79:30:e9:6b:a5:de:2f: 36:a1:c9:5f:7c:a2:bf:5e:54:9c:d6:e3:67:74:26: 9f:ac:80:68:39:a9:81:97:24:3a:a1:1f:ab:00:03: 1b:03:52:3c:f9:8b:95:2d:0f:de:e1:16:f0:2a:f8: 71:be:b5:bd:39:74:57:fd:98:f0:38:24:84:5f:e7: be:a1:78:2f:4b:79:d3:f1:5a:14:a2:04:a2:d4:f5: 2a:80:a2:f1:ae:49:fa:ab:01:2c:f6:3a:8c:c7:11: 77:04:6c:42:7d:3e:ce:e8:28:93:f1:79:6e:a7:87: 56:fc:06:4e:68:34:57:b1:cb:bd:5a:5e:a8:df:57: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:3A:A9:4E:D1:D1:F4:12:18:7B:96:6C:0A:09:13:96:E7:B5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e2:36:93:16:24:af:bc:53:52:5a:e4:a8:3a:bc:ab:aa:65: 69:fc:dd:f7:b9:ea:b1:1c:90:5f:c0:7a:fb:66:dd:96:8d:18: 27:cf:b1:d0:b2:d7:7e:4c:69:33:c4:ac:ce:d9:23:54:d8:eb: 21:39:82:41:21:6f:b8:d4:03:54:49:9e:78:59:33:58:36:cf: e5:2b:5f:a7:9f:1b:52:8b:c7:80:a1:38:86:e5:c5:17:94:63: 19:9e:a9:c9:9a:df:9f:05:db:e6:f4:d8:18:64:cb:eb:42:3b: b8:51:52:5b:b6:31:ed:79:f7:ce:3d:12:7c:34:b0:08:5c:4c: 94:32:ad:9b:78:1b:d2:bf:34:44:af:61:9a:33:a5:f4:59:f7: f8:71:ef:60:43:0b:16:ba:d3:7d:0d:2f:91:cf:0f:7d:7c:fb: e7:4e:a9:8b:99:12:b0:1a:70:a3:97:68:81:70:72:02:90:0c: d8:7b:7c:fd:7f:e1:8d:34:78:15:61:b3:f6:86:7e:0b:99:f1: 9e:2b:73:f0:40:8b:d6:fa:19:38:f6:46:77:5f:96:54:fb:60: 95:da:27:59:6c:72:ba:19:30:e2:0d:e8:51:c9:e7:b5:8e:3a: 82:9e:7f:b0:63:01:52:54:f4:2c:bb:9d:8a:a7:41:7d:a2:0e: 81:e1:66:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Q9p9Xs/PJfs0lxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMjE0MDAxM1oXDTI3MDIxMDE0MDAxM1owLzEtMCsGA1UEAxMk MDAxNDM1NjYtYzZlMC00YTU5LWFjNjMtMTE2OWYzNDQwMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfcMHWgEx1Cyj3qKdUUyrlGy/ZYlf/5r4Gc/ nUuq6TTUnbGztmL4770AV+vEHqs+9twcfhH3xiIx6VAaiaEgu14a/XiDlFkO06Pq vOsQPBRFPR7P2u5l+XMKnt8mt2PLKNq5eJ1X9L1n1rlGq5vTDITIt7rDHE/JoB90 oUdoFXkw6Wul3i82oclffKK/XlSc1uNndCafrIBoOamBlyQ6oR+rAAMbA1I8+YuV LQ/e4RbwKvhxvrW9OXRX/ZjwOCSEX+e+oXgvS3nT8VoUogSi1PUqgKLxrkn6qwEs 9jqMxxF3BGxCfT7O6CiT8Xlup4dW/AZOaDRXscu9Wl6o31fOLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHo3OqlO0dH0Ehh7lmwKCROW57X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBU4jaTFiSvvFNSWuSoOryrqmVp/N33ueqxHJBfwHr7Zt2WjRgnz7HQ std+TGkzxKzO2SNU2OshOYJBIW+41ANUSZ54WTNYNs/lK1+nnxtSi8eAoTiG5cUX lGMZnqnJmt+fBdvm9NgYZMvrQju4UVJbtjHteffOPRJ8NLAIXEyUMq2beBvSvzRE r2GaM6X0Wff4ce9gQwsWutN9DS+Rzw99fPvnTqmLmRKwGnCjl2iBcHICkAzYe3z9 f+GNNHgVYbP2hn4LmfGeK3PwQIvW+hk49kZ3X5ZU+2CV2idZbHK6GTDiDehRyee1 jjqCnn+wYwFSVPQsu52Kp0F9og6B4WbJ -----END CERTIFICATE-----Generated at Sun Nov 15 17:09:10 2026 by rpki-client