$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa File: d848c8af-0652-3114-8455-08a34c4dfef3.roa (raw, json) Hash identifier: BSrYlr2nvJ5kwEdeSCWVznVskCqvU2g5D2jsShALUOg= Subject key identifier: C5:CD:6E:6F:57:20:8F:3D:B7:40:0E:2F:66:D2:78:CD:80:00:24:89 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584FA2C875B92F6A6F950C1A1FC0 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 14618 IP address blocks: 2604:1f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:75:b9:2f:6a:6f:95:0c:1a:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=90d5f4bc-f0d5-4885-a4b9-e262776e7641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:07:e8:98:6b:49:de:b7:16:44:e2:2e:b4: 62:25:00:10:ff:71:10:c4:63:be:4d:db:be:17:2b: bf:3f:3f:52:dc:c6:71:42:c4:b1:97:2e:dd:99:c6: 02:6b:66:e3:3c:6b:bd:7d:72:5b:0c:3b:7f:51:69: b5:c0:15:f1:a0:fb:ad:88:90:43:3f:c0:8e:65:c4: 83:2b:4e:e4:53:b1:3f:4e:93:8f:64:d8:24:d3:9b: 50:7c:d6:55:1b:ac:98:ef:08:04:60:7a:73:de:e6: f2:3e:f1:b0:31:50:ef:68:a6:1a:3f:2f:dc:e9:dc: 82:22:9f:35:70:a9:3c:6a:e7:88:47:10:16:14:f7: 59:36:6e:4b:63:e4:ed:f6:01:82:2d:1b:02:ad:81: 0f:7a:eb:17:dd:81:7f:dd:08:33:ba:0d:d3:74:a0: 47:8f:dc:e6:d9:4a:35:d3:17:07:77:1d:46:0e:f4: be:02:ab:cd:5f:4b:56:ce:e7:9d:f0:77:c7:b5:25: 29:28:16:35:f7:43:50:d6:60:09:f6:16:94:a5:dd: f2:a1:b9:8c:36:36:c8:79:ce:83:fe:36:13:0e:cb: a5:71:d4:61:d4:93:db:57:8d:33:05:ce:2c:de:de: 5c:82:7e:23:8d:2c:8f:21:71:2c:02:bb:56:9c:67: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CD:6E:6F:57:20:8F:3D:B7:40:0E:2F:66:D2:78:CD:80:00:24:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/d848c8af-0652-3114-8455-08a34c4dfef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5b:ad:1e:2e:88:29:b5:a7:ee:5d:16:eb:23:c9:79:a3:06: 25:9c:3e:c7:69:68:28:63:59:56:74:ff:c7:13:06:9f:fc:da: e6:6e:29:d6:8a:f4:91:90:44:09:c4:9a:8e:ab:70:5d:10:9c: 06:a2:b8:60:35:f0:d1:d8:96:00:df:d5:96:c8:50:c2:d9:f2: a5:45:3b:8e:98:d8:a2:d7:29:36:b6:2c:0c:b1:2a:ca:fb:68: 95:f7:d0:ee:df:00:c3:ee:39:7d:a5:b1:f4:c5:b1:d4:c9:5b: 0f:47:8f:cd:67:13:f6:37:28:5f:c1:a7:81:55:94:dd:71:e8: c6:c3:24:42:71:86:b9:01:7a:b3:fb:e0:9a:17:bb:ca:e2:36: 48:d7:a3:fd:80:0a:35:3d:85:3a:5e:bd:42:0f:3e:21:5e:19: 13:98:6e:62:1a:e5:ae:2a:7d:61:a2:f5:3a:b9:a2:46:9d:69: 0d:92:71:16:2f:91:bf:1c:3d:ce:f6:c6:cc:17:54:c9:ef:b9: 98:76:d6:a5:aa:b7:f0:30:a3:dd:34:99:0f:05:d1:13:d9:5e: fc:f4:8d:2a:ac:15:c1:6b:47:1c:36:71:bf:6a:ad:df:6c:98: 0a:02:89:79:71:96:b1:a8:29:ba:b6:1e:d5:99:0e:39:56:2f: b8:93:a4:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+iyHW5L2pvlQwaH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk OTBkNWY0YmMtZjBkNS00ODg1LWE0YjktZTI2Mjc3NmU3NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzQH6JhrSd63FkTiLrRiJQAQ/3EQxGO+Tdu+ Fyu/Pz9S3MZxQsSxly7dmcYCa2bjPGu9fXJbDDt/UWm1wBXxoPutiJBDP8COZcSD K07kU7E/TpOPZNgk05tQfNZVG6yY7wgEYHpz3ubyPvGwMVDvaKYaPy/c6dyCIp81 cKk8aueIRxAWFPdZNm5LY+Tt9gGCLRsCrYEPeusX3YF/3Qgzug3TdKBHj9zm2Uo1 0xcHdx1GDvS+AqvNX0tWzued8HfHtSUpKBY190NQ1mAJ9haUpd3yobmMNjbIec6D /jYTDsulcdRh1JPbV40zBc4s3t5cgn4jjSyPIXEsArtWnGcNiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXNbm9XII89t0AOL2bSeM2AACSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvZDg0OGM4YWYtMDY1Mi0z MTE0LTg0NTUtMDhhMzRjNGRmZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpbrR4uiCm1p+5dFusjyXmjBiWcPsdpaChjWVZ0/8cTBp/82uZu KdaK9JGQRAnEmo6rcF0QnAaiuGA18NHYlgDf1ZbIUMLZ8qVFO46Y2KLXKTa2LAyx Ksr7aJX30O7fAMPuOX2lsfTFsdTJWw9Hj81nE/Y3KF/Bp4FVlN1x6MbDJEJxhrkB erP74JoXu8riNkjXo/2ACjU9hTpevUIPPiFeGROYbmIa5a4qfWGi9Tq5okadaQ2S cRYvkb8cPc72xswXVMnvuZh21qWqt/Awo900mQ8F0RPZXvz0jSqsFcFrRxw2cb9q rd9smAoCiXlxlrGoKbq2HtWZDjlWL7iTpIo= -----END CERTIFICATE-----Generated at Sun Nov 15 18:08:37 2026 by rpki-client