$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ca586604-242b-3aad-ab95-449fad54ec84.roa File: ca586604-242b-3aad-ab95-449fad54ec84.roa (raw, json) Hash identifier: VsaBKR1Z1zf2U5UOC97njLis/zYsNWC58DDR3+flKas= Subject key identifier: FA:6E:EC:84:DD:04:68:17:11:AB:31:D4:D2:10:FB:AD:14:4D:CA:03 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584F66C2C9072B7C4344D4410900 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ca586604-242b-3aad-ab95-449fad54ec84.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 33343 IP address blocks: 2610:20:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c9:07:2b:7c:43:44:d4:41:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=a1efdc41-d394-451d-b3ad-9be3b7ef14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:12:b4:29:00:c4:a1:61:a0:12:13:6a:9b: 98:5f:63:fe:7c:7e:94:67:74:07:55:2d:e9:85:33: 33:cf:29:c8:2b:7c:d6:37:4c:c0:da:0c:5c:b5:f3: 64:0a:ee:a7:37:29:3f:27:62:fc:f0:7c:ec:4b:75: d7:71:38:0d:8f:9a:a4:b4:5e:e8:ec:8c:db:b6:7a: 1a:ec:3e:d0:2a:3a:a9:b5:54:cf:bd:8b:ef:e3:85: 44:7e:ad:3b:4c:4e:85:d7:0c:eb:e6:b9:7b:21:47: 74:47:01:18:05:c0:ca:24:e8:c6:54:77:59:52:2e: 88:bb:5f:9b:a6:c7:ac:f2:7d:6e:17:46:84:52:21: a4:4f:70:b2:b2:80:62:74:cf:24:8d:5a:c9:35:10: 71:c0:14:6c:7b:ed:f1:9d:c3:6b:53:c0:26:3c:92: bb:ae:85:a0:6a:36:a9:4d:18:f8:51:2a:82:be:cb: e0:d0:10:7e:6d:7f:b3:73:e8:a3:6d:cb:c7:1d:ec: bf:dd:dd:ef:27:99:e5:72:b8:82:a8:6d:4f:b8:95: 70:3c:dc:3d:41:17:83:95:6e:fe:2e:51:b4:a0:82: 42:60:b9:a8:91:60:9f:d1:4a:d2:3f:7d:fb:06:0d: 75:5f:3d:e1:95:b8:ef:e8:1c:20:18:f3:50:67:49: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6E:EC:84:DD:04:68:17:11:AB:31:D4:D2:10:FB:AD:14:4D:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ca586604-242b-3aad-ab95-449fad54ec84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:37:c5:31:82:54:ee:58:db:33:27:45:b5:77:71:ef:83:d8: a0:8c:c5:d1:6f:34:a9:40:5f:76:fb:4a:b4:b7:cd:93:c3:54: 43:e0:35:b5:0d:3c:a1:c5:e6:91:b0:96:54:8e:08:03:b9:dd: 93:b8:1e:08:05:94:66:5d:99:11:d9:ef:d2:b7:21:14:7a:c3: 04:94:05:39:0c:99:ad:db:05:46:19:5c:46:b5:2d:48:07:c3: b7:c5:ec:f5:f3:84:dd:07:76:b3:09:3a:33:e5:bf:d8:64:56: 1b:16:c5:23:80:a4:e0:ce:11:97:02:c0:d6:04:49:21:aa:12: c4:d5:8b:0f:ae:b5:fd:25:22:f4:b8:40:bf:30:8b:0e:3d:2d: bc:89:53:db:17:aa:b9:42:f4:a8:c3:bc:58:4c:df:db:6a:70: aa:d9:19:73:9d:aa:72:12:23:58:ca:6e:fd:9d:ec:1b:da:e3: d1:5a:44:0b:a5:c0:e8:a5:b8:ed:58:c8:0f:7b:20:10:5f:45: 94:fa:c2:6e:1a:9c:12:6b:bc:13:1b:dd:6c:70:dd:0f:7e:f1: 30:91:d9:df:d9:75:21:b8:d7:52:13:db:21:3a:07:66:81:c2: 91:2e:56:b9:72:b4:9c:f9:2f:5f:99:be:48:2e:d6:89:7a:86: 3c:04:1c:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9mwskHK3xDRNRBCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk YTFlZmRjNDEtZDM5NC00NTFkLWIzYWQtOWJlM2I3ZWYxNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDQStCkAxKFhoBITapuYX2P+fH6UZ3QHVS3p hTMzzynIK3zWN0zA2gxctfNkCu6nNyk/J2L88HzsS3XXcTgNj5qktF7o7Izbtnoa 7D7QKjqptVTPvYvv44VEfq07TE6F1wzr5rl7IUd0RwEYBcDKJOjGVHdZUi6Iu1+b pses8n1uF0aEUiGkT3CysoBidM8kjVrJNRBxwBRse+3xncNrU8AmPJK7roWgajap TRj4USqCvsvg0BB+bX+zc+ijbcvHHey/3d3vJ5nlcriCqG1PuJVwPNw9QReDlW7+ LlG0oIJCYLmokWCf0UrSP337Bg11Xz3hlbjv6BwgGPNQZ0kuqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpu7ITdBGgXEasx1NIQ+60UTcoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvY2E1ODY2MDQtMjQyYi0z YWFkLWFiOTUtNDQ5ZmFkNTRlYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEg3xTGCVO5Y2zMnRbV3ce+D2KCMxdFvNKlAX3b7SrS3zZPDVEPg NbUNPKHF5pGwllSOCAO53ZO4HggFlGZdmRHZ79K3IRR6wwSUBTkMma3bBUYZXEa1 LUgHw7fF7PXzhN0HdrMJOjPlv9hkVhsWxSOApODOEZcCwNYESSGqEsTViw+utf0l IvS4QL8wiw49LbyJU9sXqrlC9KjDvFhM39tqcKrZGXOdqnISI1jKbv2d7Bva49Fa RAulwOiluO1YyA97IBBfRZT6wm4anBJrvBMb3Wxw3Q9+8TCR2d/ZdSG411IT2yE6 B2aBwpEuVrlytJz5L1+Zvkgu1ol6hjwEHMs= -----END CERTIFICATE-----Generated at Sat Oct 10 02:59:02 2026 by rpki-client