$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa File: 066a94a9-f717-34f2-8c42-142f5b062fb2.roa (raw, json) Hash identifier: 6UGKgGjEDce82/M1KGCMduSvTKMntqGKalPtZ6cXSaE= Subject key identifier: 75:5C:DA:C0:18:51:7D:FF:B1:E7:D3:DF:52:DB:30:C3:6B:B8:89:2E Certificate issuer: /CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Certificate serial: 010D0C9F4328584F58CD6440BDD2ED9478291840 Authority key identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 20273 IP address blocks: 2604:23a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:64:40:bd:d2:ed:94:78:29:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=f45e715a-2e83-4d84-ae58-d43c20f22001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:c2:6f:07:5e:f8:55:57:6a:34:50:bf:b6: f9:de:ba:28:39:e8:f0:9a:49:c0:5a:d4:93:24:93: 24:19:95:ae:60:07:7f:95:66:eb:80:fa:ad:c0:ab: 8f:e1:c9:d2:bd:3a:4d:a5:1b:a4:ea:dd:35:f2:69: 07:68:26:e7:e1:99:e5:52:42:84:41:85:72:75:dd: 5b:c7:49:51:35:07:12:fb:f0:e2:1b:14:fb:83:46: 0e:b9:4d:5e:13:02:68:da:09:6a:42:8b:b2:f5:de: 6f:6a:06:d5:19:84:72:a6:eb:ab:6e:b6:4b:43:5b: fe:3c:0f:aa:3d:a4:63:c2:4d:f8:70:4c:81:a2:d2: d2:e8:04:87:8d:9c:6d:91:ac:f6:84:cc:52:27:fe: 90:96:a3:17:f8:5f:27:30:21:5e:8d:90:5d:f7:b6: 71:ba:55:ac:f9:a0:95:b4:5e:29:1c:47:28:68:55: 22:4d:cf:cf:e4:5d:8b:ff:9b:e2:fe:dd:bb:38:d6: 98:ad:3d:24:a2:02:eb:f2:0e:7e:af:21:b0:54:4b: e8:a1:1b:a9:df:13:0e:de:68:bb:4e:8d:3d:30:0a: 85:1c:cf:b1:fd:e5:ed:8f:5d:e5:3d:5b:57:fa:f5: 9b:b8:0b:b3:09:21:d3:73:59:da:48:9c:55:12:a2: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5C:DA:C0:18:51:7D:FF:B1:E7:D3:DF:52:DB:30:C3:6B:B8:89:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl X509v3 Authority Key Identifier: keyid:83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer sbgp-ipAddrBlock: critical IPv6: 2604:23a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:69:95:b4:94:2e:02:0f:c9:d2:a9:a0:81:25:1b:82:f9:09: 73:bd:03:e1:e5:e0:a1:bb:27:aa:99:62:d5:05:22:2c:5b:0b: e2:af:f7:10:37:e8:3f:51:b1:5f:03:fb:4c:32:9c:62:03:16: 6b:71:e2:bf:4a:7a:e8:f7:96:c2:92:5e:43:48:41:c0:06:7e: 9d:5d:95:fa:ed:61:e6:09:bc:99:0e:a2:da:0f:6c:12:63:9e: 37:e9:d5:a6:27:11:ae:73:15:2b:ff:4d:09:ff:59:60:05:b7: f5:9b:82:e7:ea:79:3e:c4:21:06:b9:d4:47:76:57:d7:b5:15: 1b:84:0f:95:86:8c:ad:7f:b3:f2:bf:36:8b:99:a6:19:ad:30: 3c:f7:7c:38:08:68:4a:0d:e2:9f:d8:b9:f4:76:bc:ea:98:71: c5:d4:32:70:f6:02:f0:7e:46:1a:8b:66:ec:8b:e7:ea:12:4a: 57:d4:07:0e:be:2f:5a:67:e8:86:fb:f4:50:83:54:e4:4f:e4: 0a:9e:ae:56:e5:d6:6b:e2:96:f2:9e:67:3f:1e:5f:11:72:2f: 65:36:df:77:c1:f7:0f:f6:96:7a:03:0a:39:fb:c1:0e:9c:f1: f7:1c:84:91:da:a6:d2:16:1f:57:0d:2a:d9:92:34:af:6f:a4: a6:93:66:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9YzWRAvdLtlHgpGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRhZTMxZjYtNzYwYy00ZmFlLWJhYWMtMDVmZDIyZjc0 MzJkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZjQ1ZTcxNWEtMmU4My00ZDg0LWFlNTgtZDQzYzIwZjIyMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJTCbwde+FVXajRQv7b53rooOejwmknAWtST JJMkGZWuYAd/lWbrgPqtwKuP4cnSvTpNpRuk6t018mkHaCbn4ZnlUkKEQYVydd1b x0lRNQcS+/DiGxT7g0YOuU1eEwJo2glqQouy9d5vagbVGYRypuurbrZLQ1v+PA+q PaRjwk34cEyBotLS6ASHjZxtkaz2hMxSJ/6QlqMX+F8nMCFejZBd97ZxulWs+aCV tF4pHEcoaFUiTc/P5F2L/5vi/t27ONaYrT0kogLr8g5+ryGwVEvooRup3xMO3mi7 To09MAqFHM+x/eXtj13lPVtX+vWbuAuzCSHTc1naSJxVEqICAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHVc2sAYUX3/sefT31LbMMNruIkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFl MzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJmNzQzMmQvMDY2YTk0YTktZjcxNy0z NGYyLThjNDItMTQyZjViMDYyZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRhZTMxZjYtNzYwYy00ZmFlLWJh YWMtMDVmZDIyZjc0MzJkL2E0YWUzMWY2LTc2MGMtNGZhZS1iYWFjLTA1ZmQyMmY3 NDMyZC5jcmwwHwYDVR0jBBgwFoAUg0daTkuejTQC/DCQSpP8/dFqXGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZk MjJmNzQzMmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQjoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPaZW0lC4CD8nSqaCBJRuC+QlzvQPh5eChuyeqmWLVBSIsWwvir/cQ N+g/UbFfA/tMMpxiAxZrceK/Snro95bCkl5DSEHABn6dXZX67WHmCbyZDqLaD2wS Y5436dWmJxGucxUr/00J/1lgBbf1m4Ln6nk+xCEGudRHdlfXtRUbhA+Vhoytf7Py vzaLmaYZrTA893w4CGhKDeKf2Ln0drzqmHHF1DJw9gLwfkYai2bsi+fqEkpX1AcO vi9aZ+iG+/RQg1TkT+QKnq5W5dZr4pbynmc/Hl8Rci9lNt93wfcP9pZ6Awo5+8EO nPH3HISR2qbSFh9XDSrZkjSvb6Smk2Zd -----END CERTIFICATE-----Generated at Tue Oct 13 08:12:34 2026 by rpki-client