$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa File: 404125c1-db53-3460-abc1-3e2005096ff7.roa (raw, json) Hash identifier: r7QOdZ2VTDIg00HPJLL3rMy9BufrSK6uLunXQVaL8ME= Subject key identifier: 65:40:AB:A9:91:FF:93:9F:A0:72:0B:7A:51:76:41:83:A2:37:A2:40 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584F698D99B17EFBA9EF5D160280 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:99:b1:7e:fb:a9:ef:5d:16:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=4ae06c7e-24a9-487f-926f-c4e82b806c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:2c:37:58:10:52:63:97:15:e6:a5:c3:10: 6d:1a:43:ca:35:b4:6f:cd:59:2d:17:c2:a5:f8:90: 91:eb:67:22:88:8d:90:52:fe:92:44:82:6d:12:55: 18:40:fa:a8:4a:df:fb:20:dc:ef:90:9a:02:c7:a9: 8f:4b:d6:f7:1e:ee:f8:72:30:6b:b7:8c:86:bc:a6: dd:5a:2c:30:e1:66:b7:b7:54:d0:22:89:dd:3c:84: e7:40:0b:b8:75:5e:35:66:d8:bd:7a:75:e5:6a:bb: af:c1:6c:b1:0b:96:db:e8:d4:05:7f:1d:09:35:44: 2e:07:79:01:cb:c1:0a:a1:c6:96:7f:84:62:10:a3: aa:3e:2f:a5:6a:0a:8d:a3:48:8e:65:32:7e:ed:c0: 91:69:ae:33:12:95:e6:64:d9:c2:ce:74:35:5a:60: 98:21:73:ad:29:49:6c:20:a8:b2:b4:b7:ac:c0:4c: 29:6d:6c:0c:db:1b:b7:21:51:da:f8:71:ff:db:d2: b3:f4:95:2e:ee:91:12:c7:25:0c:1c:da:dc:ff:14: d8:b0:79:fa:7b:2b:2d:1b:52:18:62:93:aa:be:4f: 9d:77:26:89:fe:a6:2d:a1:f5:f5:1c:56:df:82:16: 13:80:31:b6:05:44:9e:5c:af:ab:c4:8f:34:33:53: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:40:AB:A9:91:FF:93:9F:A0:72:0B:7A:51:76:41:83:A2:37:A2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2c:d8:bf:04:dd:25:f8:45:68:a5:24:4f:4e:b2:fe:b4:bd: a6:3f:fa:80:69:68:b0:ea:bd:f5:e5:ed:a9:79:70:89:18:90: 4d:ea:1a:66:de:9c:b7:84:11:07:99:52:ff:b3:b9:e2:dc:1f: 18:18:b6:f7:9d:9e:55:62:46:ab:46:c5:d3:c5:75:76:cd:b4: a9:5c:43:6d:fb:ef:bf:7f:38:09:0b:1b:00:f9:56:5a:fc:d3: c0:41:64:57:86:1c:39:7e:41:4e:9a:27:58:93:e5:98:f2:d5: 8d:34:16:b8:2f:2d:32:c6:d3:93:11:0f:4e:23:34:82:be:c4: 6d:53:2f:7e:bc:91:c9:42:b3:6d:4c:7f:a8:61:44:cb:b4:7c: 67:d6:b7:e3:25:dc:29:9d:61:c3:c5:1f:eb:8d:f8:56:fb:d3: 8a:a2:1a:9c:19:d6:ef:4e:6e:cf:e2:16:1f:1e:45:00:bb:c3: 8f:2d:5c:ae:2f:78:81:9d:9a:be:df:7b:d3:17:99:9f:15:c0: 10:07:89:2f:8f:31:1e:0b:d6:d1:fe:a2:da:ae:03:8d:4f:3f: b4:f1:d9:bd:9c:9c:9e:68:71:ea:83:a1:03:86:f8:ea:19:83: 11:c4:69:b0:c1:35:fd:0c:6f:61:5c:cf:88:31:23:4e:d3:76: 34:4d:40:11 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9pjZmxfvup710WAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NGFlMDZjN2UtMjRhOS00ODdmLTkyNmYtYzRlODJiODA2Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VAsN1gQUmOXFealwxBtGkPKNbRvzVktF8Kl +JCR62ciiI2QUv6SRIJtElUYQPqoSt/7INzvkJoCx6mPS9b3Hu74cjBrt4yGvKbd Wiww4Wa3t1TQIondPITnQAu4dV41Zti9enXlaruvwWyxC5bb6NQFfx0JNUQuB3kB y8EKocaWf4RiEKOqPi+lagqNo0iOZTJ+7cCRaa4zEpXmZNnCznQ1WmCYIXOtKUls IKiytLeswEwpbWwM2xu3IVHa+HH/29Kz9JUu7pESxyUMHNrc/xTYsHn6eystG1IY YpOqvk+ddyaJ/qYtofX1HFbfghYTgDG2BUSeXK+rxI80M1PjMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGVAq6mR/5OfoHILelF2QYOiN6JAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvNDA0MTI1YzEtZGI1My0z NDYwLWFiYzEtM2UyMDA1MDk2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkSzYvwTdJfhFaKUkT06y/rS9pj/6gGlosOq99eXtqXlwiRiQTeoa Zt6ct4QRB5lS/7O54twfGBi2952eVWJGq0bF08V1ds20qVxDbfvvv384CQsbAPlW WvzTwEFkV4YcOX5BTponWJPlmPLVjTQWuC8tMsbTkxEPTiM0gr7EbVMvfryRyUKz bUx/qGFEy7R8Z9a34yXcKZ1hw8Uf6434VvvTiqIanBnW705uz+IWHx5FALvDjy1c ri94gZ2avt970xeZnxXAEAeJL48xHgvW0f6i2q4DjU8/tPHZvZycnmhx6oOhA4b4 6hmDEcRpsME1/QxvYVzPiDEjTtN2NE1AEQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:46:16 2026 by rpki-client