$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/c754eafe-9a18-302e-991f-8e58ca9e3394.roa File: c754eafe-9a18-302e-991f-8e58ca9e3394.roa (raw, json) Hash identifier: zl6SFEX3qwqJhHdMLoOsc5ns5y/q7G4DRfKCdpT/q3Q= Subject key identifier: 02:CD:6E:29:0D:C2:3B:0D:F7:47:A3:80:C7:C1:27:47:E8:1B:7D:BC Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584FADF32D502BA9357C07803D80 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/c754eafe-9a18-302e-991f-8e58ca9e3394.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 2604:1160:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:2d:50:2b:a9:35:7c:07:80:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=a2a9c0d8-d3c5-428b-8deb-ac1cbc3b777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:d0:ad:de:55:56:7d:3a:cb:23:93:f7:d1: 06:38:99:ec:ef:38:77:7b:dd:bf:65:67:7b:27:04: 1a:b8:d4:19:58:42:58:1d:43:37:3e:38:a6:f1:9e: ab:40:36:b6:d6:af:74:f6:67:a4:95:df:a5:50:3d: 41:fa:14:10:16:ed:c5:a9:c7:c2:e7:5c:f2:01:dd: fd:db:f1:90:ae:7b:61:11:a4:17:c8:d0:16:df:32: d8:b7:b2:68:e9:20:37:0f:5b:d2:3d:48:ef:4b:ca: 62:f8:6b:f3:a3:aa:ab:38:c0:28:20:73:55:2d:77: fa:1b:7c:26:be:2f:ad:d0:be:ad:dd:70:13:0c:1c: 3c:6a:3f:09:7d:a5:1f:9b:78:d0:14:ff:3d:17:e3: 43:8b:6d:ea:10:f0:0c:26:a1:b8:2b:35:44:59:5b: 52:23:48:22:be:8c:bd:c2:cb:ee:5f:8e:5b:cb:45: 4c:6d:64:01:66:71:fc:9e:ec:7b:96:17:1e:df:33: b1:7c:82:ff:a9:ed:16:8a:57:f9:57:3d:8a:c8:cb: 45:73:78:b3:87:67:ff:c4:d2:55:d0:cb:46:84:65: 84:85:9a:0e:dc:04:bd:aa:74:19:97:c4:af:5f:de: 45:a3:cb:df:23:a4:ac:37:92:73:32:f9:a8:1c:82: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:6E:29:0D:C2:3B:0D:F7:47:A3:80:C7:C1:27:47:E8:1B:7D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/c754eafe-9a18-302e-991f-8e58ca9e3394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9f:c6:9f:14:ee:8b:0d:f6:51:0a:7f:61:89:76:a6:09:f0: b0:bf:e1:02:e1:db:31:80:30:76:41:8b:fe:27:78:25:3e:8f: af:a0:88:1b:83:0e:d5:c0:e8:bf:2e:48:09:0d:23:72:ef:0a: db:ca:eb:d8:0a:56:98:af:f5:72:ac:43:69:b3:8c:e6:76:1d: be:53:0e:b7:ba:c6:7c:1d:4f:cd:e2:12:94:1e:a4:8a:17:ba: 45:7d:a9:43:ea:4b:de:0f:c6:48:2d:58:b1:46:d7:00:d5:eb: 4d:a5:aa:c6:bd:88:03:86:f9:97:9c:1a:0d:ba:eb:8c:b7:7c: 20:d3:e1:4c:70:d8:df:b7:06:54:33:f3:45:2d:23:7a:23:6d: 0e:37:1f:94:aa:a7:b9:db:de:8e:60:de:4e:48:f6:16:d3:17: aa:8a:7a:b2:23:09:f4:e2:32:94:9f:02:2e:56:cc:df:1a:ad: e8:9a:28:97:45:60:ee:4b:2a:60:0a:d9:33:7d:d6:9a:f7:96: f7:39:fb:f0:41:6b:0c:02:a4:44:a2:b6:86:ec:1b:87:14:eb: ad:cb:29:50:71:41:02:c7:8e:b7:bd:22:b3:e7:f5:a7:72:5c: 53:15:2c:f8:b4:09:39:2f:8e:cf:d6:0e:c6:42:bb:4d:be:1d: c4:b3:a0:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+t8y1QK6k1fAeAPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk YTJhOWMwZDgtZDNjNS00MjhiLThkZWItYWMxY2JjM2I3NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxLQrd5VVn06yyOT99EGOJns7zh3e92/ZWd7 JwQauNQZWEJYHUM3Pjim8Z6rQDa21q909mekld+lUD1B+hQQFu3FqcfC51zyAd39 2/GQrnthEaQXyNAW3zLYt7Jo6SA3D1vSPUjvS8pi+Gvzo6qrOMAoIHNVLXf6G3wm vi+t0L6t3XATDBw8aj8JfaUfm3jQFP89F+NDi23qEPAMJqG4KzVEWVtSI0givoy9 wsvuX45by0VMbWQBZnH8nux7lhce3zOxfIL/qe0Wilf5Vz2KyMtFc3izh2f/xNJV 0MtGhGWEhZoO3AS9qnQZl8SvX95Fo8vfI6SsN5JzMvmoHIJYBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALNbikNwjsN90ejgMfBJ0foG328MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvYzc1NGVhZmUtOWExOC0z MDJlLTk5MWYtOGU1OGNhOWUzMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOfxp8U7osN9lEKf2GJdqYJ8LC/4QLh2zGAMHZBi/4neCU+j6+g iBuDDtXA6L8uSAkNI3LvCtvK69gKVpiv9XKsQ2mzjOZ2Hb5TDre6xnwdT83iEpQe pIoXukV9qUPqS94PxkgtWLFG1wDV602lqsa9iAOG+ZecGg2664y3fCDT4Uxw2N+3 BlQz80UtI3ojbQ43H5Sqp7nb3o5g3k5I9hbTF6qKerIjCfTiMpSfAi5WzN8areia KJdFYO5LKmAK2TN91pr3lvc5+/BBawwCpESitobsG4cU663LKVBxQQLHjre9IrPn 9adyXFMVLPi0CTkvjs/WDsZCu02+HcSzoCg= -----END CERTIFICATE-----Generated at Sun Nov 15 13:05:41 2026 by rpki-client