$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: g13qTCF2ipaotGOxmM7MFYASxooFZbnV3sRAPt2cGEY= Subject key identifier: 14:6A:A3:1E:E8:A9:03:39:CE:52:99:B4:99:1C:77:83:C0:4F:97:2F Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F4328584F4976CEA38807CCC1C98D6A80 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ce:a3:88:07:cc:c1:c9:8d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=44796c2e-a100-4d41-8d49-ce47818938fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:f1:74:e3:1f:e6:a5:a4:78:bc:f2:43:0f: 06:28:61:63:c9:9f:c1:72:9c:fd:03:91:ba:55:c9: 84:c1:fb:f4:da:e6:53:c7:22:f8:96:e7:7e:aa:2b: 9d:03:47:56:93:c6:d7:3a:ad:82:cb:da:ac:92:1f: 3a:9d:84:c8:42:00:ca:50:3a:5e:13:60:ef:89:30: 66:88:93:2d:e2:b0:d6:35:64:57:c4:14:21:e7:a9: d0:4f:87:83:7f:9f:8a:4f:c9:df:d9:7b:12:84:e1: 0b:1c:ca:92:5b:88:f2:2c:92:23:6c:74:f8:3f:e7: 39:5a:f7:a4:b4:34:b9:ed:5e:c8:95:64:61:e8:a2: 56:89:f4:e6:9d:95:c9:e3:6d:27:95:b0:93:30:0a: 09:c9:b1:b2:e9:50:5c:74:16:5d:41:21:43:78:8b: 98:15:8c:f9:61:8c:3e:b3:69:6f:c0:18:65:19:97: cb:2e:cb:f6:87:59:3d:26:f6:a3:5d:10:9b:13:b9: c7:20:9d:92:14:39:a1:f2:19:7c:4d:8a:39:3a:e4: 5a:84:ad:cf:b5:49:14:87:39:18:53:60:e0:33:88: 82:e7:5b:bd:7e:5c:cb:25:3b:f9:d8:75:9d:e7:ad: 2a:1b:9c:97:be:6e:3c:e5:56:54:ef:a5:c2:a0:ac: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:A3:1E:E8:A9:03:39:CE:52:99:B4:99:1C:77:83:C0:4F:97:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8d:d6:07:44:2e:2d:62:ce:d1:08:a9:1f:52:02:4a:69:1b: c7:db:80:c2:36:3a:66:53:8f:dc:fa:ab:cf:cf:c7:9d:e5:06: 06:37:c8:d6:37:30:ae:48:37:64:c4:f9:5b:ee:be:78:c4:66: d7:c2:04:c0:ce:69:2e:b4:61:0e:15:92:bf:fb:02:5a:15:d9: e3:cf:5d:42:01:48:ac:66:71:fc:11:f1:99:a0:83:94:53:c0: 14:04:b9:dc:56:da:4b:c0:8b:63:1d:9a:9e:d4:39:ec:19:a3: c6:f5:f4:15:99:f3:49:81:77:f4:08:54:7d:81:28:05:ff:4b: fe:1e:4f:25:a3:6d:2c:3c:4c:9e:38:68:ec:e5:d2:a2:41:a2: 79:a5:37:88:a4:a9:41:64:79:76:52:0f:ca:d9:13:a1:39:2d: ab:a9:8c:9b:c9:e2:77:c7:c6:ab:5b:1e:cb:89:3d:2b:fd:92: 90:85:e0:09:c1:8d:f2:ec:14:cd:c3:ae:12:16:5e:49:1d:b4: 35:31:ed:52:17:ea:3f:8c:68:5f:a1:a1:d6:4c:71:2e:f0:92: e4:c1:ca:26:3a:41:74:cf:35:98:05:bf:90:6f:f1:9a:0c:8b: 08:16:e4:e7:4b:1c:a7:07:00:d0:db:66:0e:77:fb:29:06:0e: b5:12:d8:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jds6jiAfMwcmNaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ3OTZjMmUtYTEwMC00ZDQxLThkNDktY2U0NzgxODkzOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDLxdOMf5qWkeLzyQw8GKGFjyZ/Bcpz9A5G6 VcmEwfv02uZTxyL4lud+qiudA0dWk8bXOq2Cy9qskh86nYTIQgDKUDpeE2DviTBm iJMt4rDWNWRXxBQh56nQT4eDf5+KT8nf2XsShOELHMqSW4jyLJIjbHT4P+c5Wvek tDS57V7IlWRh6KJWifTmnZXJ420nlbCTMAoJybGy6VBcdBZdQSFDeIuYFYz5YYw+ s2lvwBhlGZfLLsv2h1k9JvajXRCbE7nHIJ2SFDmh8hl8TYo5OuRahK3PtUkUhzkY U2DgM4iC51u9flzLJTv52HWd560qG5yXvm485VZU76XCoKzNdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBRqox7oqQM5zlKZtJkcd4PAT5cvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQjdYHRC4tYs7RCKkfUgJKaRvH24DCNjpmU4/c+qvPz8ed5QYGN8jW NzCuSDdkxPlb7r54xGbXwgTAzmkutGEOFZK/+wJaFdnjz11CAUisZnH8EfGZoIOU U8AUBLncVtpLwItjHZqe1DnsGaPG9fQVmfNJgXf0CFR9gSgF/0v+Hk8lo20sPEye OGjs5dKiQaJ5pTeIpKlBZHl2Ug/K2ROhOS2rqYybyeJ3x8arWx7LiT0r/ZKQheAJ wY3y7BTNw64SFl5JHbQ1Me1SF+o/jGhfoaHWTHEu8JLkwcomOkF0zzWYBb+Qb/Ga DIsIFuTnSxynBwDQ22YOd/spBg61EtgG -----END CERTIFICATE-----Generated at Sun Oct 11 08:39:49 2026 by rpki-client