$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa File: 14225c85-02d7-3302-b9fc-e26bf7888e33.roa (raw, json) Hash identifier: ahQYDGaeM/rTfQYFIoDs59/f6PtnO0xTad00deo9Sbw= Subject key identifier: 4D:10:A7:E2:5E:19:8A:64:6F:DD:2C:44:DE:EB:CA:0E:47:2B:F4:A2 Certificate issuer: /CN=8def8532-8491-4ca2-9370-4768f22df42b Certificate serial: 010D0C9F4328584F4C3D50AF835DE473432D3080 Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 36305 IP address blocks: 2604:e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:50:af:83:5d:e4:73:43:2d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=db22a0e3-06a4-4db3-a9ab-af7067bc74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:29:1b:76:9f:ff:57:df:7c:0f:a7:d6:01: db:55:02:95:db:7b:0d:ef:d6:e2:1b:dc:ba:56:f5: 5d:82:1d:80:3e:91:c2:a3:57:cf:06:7f:a4:12:49: 9e:75:b9:47:cc:3a:28:6b:23:7a:3c:52:7d:9c:47: 04:91:78:72:fb:52:1c:0c:58:c6:7e:ac:5f:89:da: ab:2c:fc:69:3c:e1:5f:8c:63:e9:87:bd:81:e9:d5: 00:cb:8e:e9:26:d6:94:18:43:89:c6:9e:f0:26:9e: bc:61:a5:b3:e1:6f:3a:b3:3e:a2:18:31:cd:1b:d8: 9a:d5:74:92:a1:43:3f:d5:52:f8:55:cc:03:c0:16: 4a:7d:be:25:f4:5b:7c:c6:0d:a3:de:9c:44:26:51: 1e:14:08:7d:45:c6:24:d5:ec:b2:35:0b:bf:cb:28: 8f:e5:52:6f:3e:77:41:26:9f:37:60:42:44:1c:ff: 6c:66:af:2b:12:4f:eb:23:6a:b0:04:19:1d:13:e4: f0:2f:a3:7d:47:e0:b9:62:94:e0:0e:09:70:4a:77: 2a:9a:36:cb:42:3d:ea:70:69:67:54:bb:77:4f:7f: b6:fc:44:96:ad:e5:cf:3a:fc:60:d5:c6:9b:31:4b: ee:d5:fd:cd:55:13:5d:5a:90:8c:95:2c:8c:92:fd: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:A7:E2:5E:19:8A:64:6F:DD:2C:44:DE:EB:CA:0E:47:2B:F4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl X509v3 Authority Key Identifier: keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer sbgp-ipAddrBlock: critical IPv6: 2604:e20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:26:80:bf:c0:96:41:e8:a0:08:26:ca:dd:a1:d7:26:bc:1d: 88:e1:51:2a:3f:41:1b:a1:3f:0c:ab:e9:d4:3e:78:7a:c3:0c: 1f:f0:1e:1e:10:04:a5:a1:ff:6a:c8:ad:ef:f8:3d:d4:fb:a5: 15:51:77:1d:37:aa:67:ea:11:d5:97:18:d3:34:9b:37:0d:69: 99:28:47:bd:14:07:08:d9:38:94:37:b1:d6:5c:5e:b5:53:8b: e8:bd:a0:68:23:45:ea:82:fa:c6:9a:a1:9c:6f:46:5e:01:7c: d7:d2:a7:c0:00:ca:07:ca:ae:9b:6a:56:a8:34:a5:2b:ac:d2: e6:36:3d:4c:9c:ec:ee:42:af:57:bc:dd:71:9d:51:cc:e5:17: cd:14:c9:fd:31:e8:e2:e2:20:c1:c1:48:d0:d8:21:0a:fb:18: f3:c2:ee:ea:ce:61:19:eb:e9:06:44:a5:66:22:fc:7b:40:c2: 71:df:b4:81:93:5d:74:11:fd:cc:6d:59:91:60:1f:a4:2a:76: 2e:e2:0e:21:54:b8:ff:6b:3b:02:13:d2:35:3b:cb:51:67:f9: 51:44:55:e5:f7:5e:dc:f9:26:45:7d:67:14:73:17:ec:78:2f: e7:44:27:9d:f4:9e:cc:25:20:40:a0:07:db:50:ab:6e:ab:2e: 8d:00:cf:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9MPVCvg13kc0MtMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlZjg1MzItODQ5MS00Y2EyLTkzNzAtNDc2OGYyMmRm NDJiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGIyMmEwZTMtMDZhNC00ZGIzLWE5YWItYWY3MDY3YmM3NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkgpG3af/1fffA+n1gHbVQKV23sN79biG9y6 VvVdgh2APpHCo1fPBn+kEkmedblHzDooayN6PFJ9nEcEkXhy+1IcDFjGfqxfidqr LPxpPOFfjGPph72B6dUAy47pJtaUGEOJxp7wJp68YaWz4W86sz6iGDHNG9ia1XSS oUM/1VL4VcwDwBZKfb4l9Ft8xg2j3pxEJlEeFAh9RcYk1eyyNQu/yyiP5VJvPndB Jp83YEJEHP9sZq8rEk/rI2qwBBkdE+TwL6N9R+C5YpTgDglwSncqmjbLQj3qcGln VLt3T3+2/ESWreXPOvxg1cabMUvu1f3NVRNdWpCMlSyMkv0QZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE0Qp+JeGYpkb90sRN7ryg5HK/SiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVm ODUzMi04NDkxLTRjYTItOTM3MC00NzY4ZjIyZGY0MmIvMTQyMjVjODUtMDJkNy0z MzAyLWI5ZmMtZTI2YmY3ODg4ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGRlZjg1MzItODQ5MS00Y2EyLTkz NzAtNDc2OGYyMmRmNDJiLzhkZWY4NTMyLTg0OTEtNGNhMi05MzcwLTQ3NjhmMjJk ZjQyYi5jcmwwHwYDVR0jBBgwFoAUeK5vSwlNKsXflVqqpMA614oxgw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVmODUzMi04NDkxLTRjYTItOTM3MC00NzY4 ZjIyZGY0MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQOIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhJoC/wJZB6KAIJsrdodcmvB2I4VEqP0EboT8Mq+nUPnh6wwwf8B4e EASlof9qyK3v+D3U+6UVUXcdN6pn6hHVlxjTNJs3DWmZKEe9FAcI2TiUN7HWXF61 U4vovaBoI0XqgvrGmqGcb0ZeAXzX0qfAAMoHyq6balaoNKUrrNLmNj1MnOzuQq9X vN1xnVHM5RfNFMn9Meji4iDBwUjQ2CEK+xjzwu7qzmEZ6+kGRKVmIvx7QMJx37SB k110Ef3MbVmRYB+kKnYu4g4hVLj/azsCE9I1O8tRZ/lRRFXl917c+SZFfWcUcxfs eC/nRCed9J7MJSBAoAfbUKtuqy6NAM9j -----END CERTIFICATE-----Generated at Mon Oct 5 23:45:11 2026 by rpki-client