$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa File: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (raw, json) Hash identifier: vOoYkN8wmHg1VrFXgoSwyZQPOQrffYLX9iKrdbYCwY8= Subject key identifier: F5:72:0A:A2:BC:44:F7:A5:92:A7:FA:6A:4A:F1:B8:AC:C3:1E:9B:58 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584FAB28AA6DB4FB51234C193F40 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 62915 IP address blocks: 2607:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:aa:6d:b4:fb:51:23:4c:19:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=1fce6cf9-43f6-4c2c-b7dd-93079d8523e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:e0:f1:76:7f:fa:60:cf:84:6f:df:c7:5e: 00:30:c6:8e:64:b8:7c:8e:98:66:64:14:2a:d8:ff: 66:46:a0:98:75:a9:e2:f5:e5:87:1e:38:27:e5:96: 8a:40:b4:83:b7:00:36:e9:80:cb:f5:9e:76:99:a7: 3b:f8:f8:fc:37:02:51:98:81:58:bf:47:02:c6:5d: f1:53:1c:f6:15:78:47:b8:d6:45:0b:0a:ed:80:6f: 6f:d1:ae:8e:65:be:3e:ff:ad:ee:71:68:9b:e9:fe: 9c:cf:2d:f4:c5:c2:bf:b2:2a:2b:46:4e:85:d2:46: 7f:0c:81:0e:53:74:c5:07:06:cf:e3:6a:b2:f3:de: 18:67:cc:59:f1:72:75:3d:40:55:98:f8:8a:83:23: b3:18:ac:92:7a:8c:1f:46:dd:93:a2:52:db:46:a2: c7:f0:73:47:41:6f:57:37:df:5d:63:e0:ca:b3:62: 82:ab:d0:0a:67:64:4e:30:5b:9b:a4:47:83:80:73: 06:17:9e:0b:ef:df:b8:8b:03:f8:17:fe:af:8a:d6: 06:5f:46:1a:62:da:24:c2:d0:41:bd:67:f5:c4:51: c3:0d:16:c0:58:2d:05:92:47:21:0c:10:39:6d:a0: 8b:d0:c4:9f:c2:3e:4c:46:b7:18:4f:5e:18:d2:89: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:72:0A:A2:BC:44:F7:A5:92:A7:FA:6A:4A:F1:B8:AC:C3:1E:9B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv6: 2607:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ed:14:80:84:e4:9f:9a:42:13:12:44:55:91:4f:2a:f9:d5: a6:82:6b:0f:65:2a:d7:81:ba:1a:5c:b1:24:10:91:6f:d4:a4: 21:ea:75:5b:c5:20:55:46:9f:dd:f8:5f:60:35:35:ad:b8:e8: 05:09:40:7c:69:ca:cf:b1:2d:61:05:9a:6a:fd:ab:89:e1:cd: bd:99:6a:42:72:97:58:df:01:66:a9:ef:e3:b9:3b:4f:70:bb: 85:06:d2:6a:0a:4e:f2:53:df:b3:6e:c0:64:29:5e:bf:ca:1d: 80:9f:0e:f0:5c:91:8c:89:4f:a8:92:b7:2d:7a:e7:ac:b9:a1: 51:ac:67:4b:9b:9c:ff:fb:6b:6b:d3:9e:52:9c:3d:51:9b:59: 0a:9b:16:76:ae:a6:f4:b9:4c:76:ff:4e:a8:e7:98:f8:50:27: 88:53:17:48:b5:56:11:e6:16:81:7e:67:93:41:94:61:e8:d1: 93:7c:f4:7b:f4:db:91:1b:a0:c8:72:13:6f:78:76:9a:c6:f9: 0d:05:4d:9b:e5:e7:99:4d:87:1b:0e:b8:fa:6f:9a:d9:ed:14: 1b:dd:23:25:6c:e9:63:c9:ae:0b:21:34:ce:1a:b7:7a:06:36: ae:0d:89:6f:cc:f5:a3:22:25:65:96:56:ff:40:18:c1:1f:8b: af:f2:b3:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+rKKpttPtRI0wZP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk MWZjZTZjZjktNDNmNi00YzJjLWI3ZGQtOTMwNzlkODUyM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaPg8XZ/+mDPhG/fx14AMMaOZLh8jphmZBQq 2P9mRqCYdani9eWHHjgn5ZaKQLSDtwA26YDL9Z52mac7+Pj8NwJRmIFYv0cCxl3x Uxz2FXhHuNZFCwrtgG9v0a6OZb4+/63ucWib6f6czy30xcK/siorRk6F0kZ/DIEO U3TFBwbP42qy894YZ8xZ8XJ1PUBVmPiKgyOzGKySeowfRt2TolLbRqLH8HNHQW9X N99dY+DKs2KCq9AKZ2ROMFubpEeDgHMGF54L79+4iwP4F/6vitYGX0YaYtokwtBB vWf1xFHDDRbAWC0FkkchDBA5baCL0MSfwj5MRrcYT14Y0om+HwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPVyCqK8RPelkqf6akrxuKzDHptYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMzU0MWMzMjQtZTQzMy0z NzFiLWJlN2EtZmFhZjIyZmVhNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCr7RSAhOSfmkITEkRVkU8q+dWmgmsPZSrXgboaXLEkEJFv1KQh6nVb xSBVRp/d+F9gNTWtuOgFCUB8acrPsS1hBZpq/auJ4c29mWpCcpdY3wFmqe/juTtP cLuFBtJqCk7yU9+zbsBkKV6/yh2Anw7wXJGMiU+okrcteuesuaFRrGdLm5z/+2tr 055SnD1Rm1kKmxZ2rqb0uUx2/06o55j4UCeIUxdItVYR5haBfmeTQZRh6NGTfPR7 9NuRG6DIchNveHaaxvkNBU2b5eeZTYcbDrj6b5rZ7RQb3SMlbOljya4LITTOGrd6 BjauDYlvzPWjIiVlllb/QBjBH4uv8rOo -----END CERTIFICATE-----Generated at Sun Nov 15 18:13:05 2026 by rpki-client