$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa File: 985c170d-dbb4-389f-8f2f-9ee25de080e6.roa (raw, json) Hash identifier: 5QKA0wXWVHW1MvRWsLhFxzVKl5Nv26K8Fu9IsK6xEVw= Subject key identifier: A9:9D:CE:A1:44:5C:FE:58:4F:F4:02:0A:C6:F2:AD:4B:2C:3D:8D:C3 Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769 Certificate serial: 010D0C9F4328584EF2E77E1D7775B2F718689800 Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 21981 IP address blocks: 2604:5c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7e:1d:77:75:b2:f7:18:68:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=19b257cd-08c4-4a6d-bf2b-9027a85e50e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:f1:fe:34:c0:2b:87:20:41:38:f6:e6:92: af:75:58:3f:19:27:8f:1f:e0:91:ae:7d:88:a9:01: 99:f3:86:86:8e:17:c3:10:f0:ad:71:17:d1:13:ee: ac:b9:99:68:03:28:a3:63:b3:08:a9:29:78:0b:ba: 60:8f:ca:df:ee:a1:49:2a:54:ea:2d:ac:fd:45:f1: fb:ad:ec:97:36:63:8a:e0:ce:46:06:79:8a:6b:bb: cb:9e:cc:8b:b6:36:bd:51:e4:b2:31:55:57:46:41: 2e:3a:38:61:13:da:95:cd:7c:99:81:e4:79:a6:45: 45:ff:0c:bb:ae:80:b2:e9:fd:08:80:06:80:2c:72: b2:f6:ec:74:f3:cf:61:8a:1e:10:71:c8:1e:20:8a: 25:ce:41:09:41:de:40:80:7a:ff:d9:62:22:20:c9: ab:98:c4:7b:c0:72:ff:26:33:68:26:9f:dd:b3:ae: 8a:ae:0f:8e:9a:bb:6f:c1:43:2b:c5:e2:11:c5:ca: 6c:00:0e:0d:a0:d5:a3:89:62:fd:7e:1e:89:88:e7: 6f:b8:3c:04:1c:33:73:3d:36:25:f6:19:74:25:47: 46:cd:9e:3b:a4:42:ec:a6:8a:36:fa:00:cc:ce:f8: a2:90:d7:28:e1:5c:67:6b:cc:21:85:47:da:4c:99: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:CE:A1:44:5C:FE:58:4F:F4:02:0A:C6:F2:AD:4B:2C:3D:8D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/985c170d-dbb4-389f-8f2f-9ee25de080e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl X509v3 Authority Key Identifier: keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer sbgp-ipAddrBlock: critical IPv6: 2604:5c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2d:17:b9:16:a7:72:f2:25:3e:0e:75:c7:fc:2a:c8:02:64: 6c:0c:f8:82:40:44:cb:4e:cf:d1:fe:e9:7b:1b:e1:fd:d2:b9: 82:f7:39:0d:d9:95:55:ce:57:bb:00:05:f5:df:16:e7:03:a7: 3c:27:5d:a6:10:28:60:db:32:b9:73:9d:e3:9b:7e:7b:2c:5f: 41:24:38:a7:eb:19:d4:63:ba:05:18:c0:ce:65:fa:63:c0:38: e5:fb:68:55:93:8b:8f:36:1d:71:99:88:f2:69:cb:4b:fc:6d: 9d:60:01:d6:4b:7c:fc:b3:23:8c:25:77:fe:9e:cb:ac:f1:ed: d8:a9:44:42:0b:2b:8d:54:2b:5c:d2:3e:58:72:a0:39:b5:30: e4:dc:e5:1c:90:27:2e:8e:05:7d:db:66:e6:63:da:fc:56:66: 61:9e:6c:7f:cc:7b:25:a8:24:ff:78:36:be:cf:53:0c:23:19: c2:bc:4f:61:6a:dd:cc:a5:80:a9:b2:dd:29:e9:97:be:e1:2b: 0a:49:c9:2b:b0:85:18:9b:f2:49:d4:3c:cf:dc:cf:04:e9:e0: a5:2c:3c:35:a3:20:0f:be:ef:2c:62:62:b6:07:a1:a6:03:59: dc:84:2f:27:87:86:5c:55:76:a6:21:d5:e0:84:5d:df:7e:eb: c2:86:f1:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7y534dd3Wy9xhomAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw NzY5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MTliMjU3Y2QtMDhjNC00YTZkLWJmMmItOTAyN2E4NWU1MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3jx/jTAK4cgQTj25pKvdVg/GSePH+CRrn2I qQGZ84aGjhfDEPCtcRfRE+6suZloAyijY7MIqSl4C7pgj8rf7qFJKlTqLaz9RfH7 reyXNmOK4M5GBnmKa7vLnsyLtja9UeSyMVVXRkEuOjhhE9qVzXyZgeR5pkVF/wy7 roCy6f0IgAaALHKy9ux0889hih4QccgeIIolzkEJQd5AgHr/2WIiIMmrmMR7wHL/ JjNoJp/ds66Krg+OmrtvwUMrxeIRxcpsAA4NoNWjiWL9fh6JiOdvuDwEHDNzPTYl 9hl0JUdGzZ47pELspoo2+gDMzviikNco4Vxna8whhUfaTJnbiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKmdzqFEXP5YT/QCCsbyrUssPY3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4 YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvOTg1YzE3MGQtZGJiNC0z ODlmLThmMmYtOWVlMjVkZTA4MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3 YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3 MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1 YjVmNzA3NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWLRe5Fqdy8iU+DnXH/CrIAmRsDPiCQETLTs/R/ul7G+H90rmC9zkN 2ZVVzle7AAX13xbnA6c8J12mEChg2zK5c53jm357LF9BJDin6xnUY7oFGMDOZfpj wDjl+2hVk4uPNh1xmYjyactL/G2dYAHWS3z8syOMJXf+nsus8e3YqURCCyuNVCtc 0j5YcqA5tTDk3OUckCcujgV922bmY9r8VmZhnmx/zHslqCT/eDa+z1MMIxnCvE9h at3MpYCpst0p6Ze+4SsKSckrsIUYm/JJ1DzP3M8E6eClLDw1oyAPvu8sYmK2B6Gm A1nchC8nh4ZcVXamIdXghF3ffuvChvFD -----END CERTIFICATE-----Generated at Sun Oct 4 12:55:06 2026 by rpki-client