$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa File: dc4a5d58-3571-3549-b66e-bc9038a5a256.roa (raw, json) Hash identifier: AIsCPyBp3tDCOuUXFy67Ue6ZFx6BdVFIdTBrALgApiY= Subject key identifier: D5:C9:79:FC:67:78:41:EA:A7:28:0B:53:BE:BF:4C:0E:8E:12:1B:54 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584F49755CA57B9285EF917DD000 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6122 IP address blocks: 2610:130::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:5c:a5:7b:92:85:ef:91:7d:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7719a0a1-c0b7-4d65-b4ee-e7636b95fc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:ec:48:f8:f4:c3:cb:d7:47:b2:39:32:0b: 05:58:e2:03:47:1d:ec:ab:0f:e9:2c:7d:60:ac:3d: 76:2b:79:73:b6:4c:d8:eb:68:1b:f7:63:47:00:cf: b9:95:ac:4c:50:32:fa:5a:74:f1:d9:28:07:a9:fe: 9b:f1:f7:51:5b:16:ea:18:26:9d:85:d7:81:9f:fe: 4c:1d:81:b4:9e:21:62:ab:c2:9b:b4:90:98:72:4c: 36:53:47:7f:ab:a5:b8:27:1c:6a:50:4c:13:7b:1f: 03:59:bc:59:70:b6:c2:9c:ef:8b:44:b5:a0:32:cd: 22:e5:44:f6:14:88:1b:1b:1a:a6:58:42:66:2e:09: a9:79:0b:6e:f7:25:27:97:31:8a:9b:9b:2d:3f:88: 3b:39:16:4f:4c:7a:68:8b:71:15:e5:db:5c:61:28: 44:55:93:51:70:a3:91:0b:b6:87:8f:7d:76:5e:7c: d3:fe:31:4c:7b:7f:3c:43:14:51:8f:c8:e1:0e:50: 4a:90:11:8a:e0:b7:2d:a8:29:11:57:fd:31:1c:18: 56:21:df:f4:7d:ab:e5:69:61:a2:be:2b:59:4e:62: 2d:2d:40:6b:6a:0f:c1:52:f3:c7:22:7e:c6:01:a1: 62:1c:60:b3:69:5d:49:ea:0a:fc:31:ec:b1:30:7a: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C9:79:FC:67:78:41:EA:A7:28:0B:53:BE:BF:4C:0E:8E:12:1B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv6: 2610:130::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:80:04:8d:42:47:aa:99:f1:3e:bd:ed:31:82:40:b3:b0:ee: c0:46:b6:b8:46:64:71:6d:72:24:2d:81:f1:d5:d2:e7:71:4b: 21:4b:cc:2d:29:48:12:2f:20:70:62:76:2a:ae:81:d8:99:60: fe:b1:f1:f5:aa:5e:4d:44:12:99:d6:1f:25:84:e9:2e:50:a5: 4d:be:01:f1:6e:d2:e7:5b:c4:70:81:2b:10:59:2b:07:ec:0b: 97:b0:f3:3f:d3:56:72:96:7e:c3:8e:2a:60:0c:62:64:70:17: 17:e0:a1:d3:22:77:28:2f:5d:47:3c:14:2c:bd:1d:c0:5b:6f: b6:31:89:d7:dc:04:eb:94:03:7c:1d:29:10:0c:41:52:0c:72: 5a:88:bb:45:d3:97:35:02:e8:10:87:ff:c9:20:58:71:4b:a6: 39:69:af:6a:7a:00:6e:4d:98:24:4d:16:b5:bf:ad:ad:69:12: 60:7c:4a:9b:d5:96:09:af:a1:ad:97:b9:5d:bd:8c:bc:71:9d: 2c:21:aa:e1:a7:21:79:c4:c2:6e:4f:66:0c:a6:f9:dd:c6:a6: b6:c4:15:35:76:11:19:2b:0a:c8:c1:57:ce:83:0c:7f:be:4c: e3:ea:25:c3:02:5c:2d:a4:dd:5d:5c:cf:dc:0f:fe:22:33:7d: e2:c1:6d:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdVyle5KF75F90AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzcxOWEwYTEtYzBiNy00ZDY1LWI0ZWUtZTc2MzZiOTVmYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyLsSPj0w8vXR7I5MgsFWOIDRx3sqw/pLH1g rD12K3lztkzY62gb92NHAM+5laxMUDL6WnTx2SgHqf6b8fdRWxbqGCadhdeBn/5M HYG0niFiq8KbtJCYckw2U0d/q6W4JxxqUEwTex8DWbxZcLbCnO+LRLWgMs0i5UT2 FIgbGxqmWEJmLgmpeQtu9yUnlzGKm5stP4g7ORZPTHpoi3EV5dtcYShEVZNRcKOR C7aHj312XnzT/jFMe388QxRRj8jhDlBKkBGK4LctqCkRV/0xHBhWId/0favlaWGi vitZTmItLUBrag/BUvPHIn7GAaFiHGCzaV1J6gr8MeyxMHrI1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNXJefxneEHqpygLU76/TA6OEhtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvZGM0YTVkNTgtMzU3MS0z NTQ5LWI2NmUtYmM5MDM4YTVhMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC9gASNQkeqmfE+ve0xgkCzsO7ARra4RmRxbXIkLYHx1dLncUshS8wt KUgSLyBwYnYqroHYmWD+sfH1ql5NRBKZ1h8lhOkuUKVNvgHxbtLnW8RwgSsQWSsH 7AuXsPM/01Zyln7DjipgDGJkcBcX4KHTIncoL11HPBQsvR3AW2+2MYnX3ATrlAN8 HSkQDEFSDHJaiLtF05c1AugQh//JIFhxS6Y5aa9qegBuTZgkTRa1v62taRJgfEqb 1ZYJr6Gtl7ldvYy8cZ0sIarhpyF5xMJuT2YMpvndxqa2xBU1dhEZKwrIwVfOgwx/ vkzj6iXDAlwtpN1dXM/cD/4iM33iwW3e -----END CERTIFICATE-----Generated at Tue Sep 29 20:03:24 2026 by rpki-client