$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa File: 8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa (raw, json) Hash identifier: XkyLK2+npzd1NOSBOaAFbMZClswXwG8qJ2mzfKNxeGI= Subject key identifier: 0E:17:FD:23:09:13:B2:37:19:86:7A:6A:CB:CC:1B:29:45:79:2A:D9 Certificate issuer: /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Certificate serial: 010D0C9F4328584FA2C87E6A89BC801897C79800 Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 30083 IP address blocks: 2605:de00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7e:6a:89:bc:80:18:97:c7:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=4482d5ac-c565-401f-9179-f971afc1b5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:ed:7c:7c:9e:e6:e3:08:6b:7c:59:60:a1: 81:42:be:a5:39:d3:8e:fd:7a:70:af:ca:58:a7:ed: ad:93:dc:98:48:2c:f6:68:98:ab:24:47:c1:9d:02: cb:4b:01:20:2b:b7:48:41:5d:0a:ac:d4:05:e8:65: a4:6b:59:cb:34:84:1b:b2:5b:56:16:97:df:95:5d: 18:6f:e0:1a:64:35:c6:a3:ae:8b:ab:90:66:de:42: 57:3b:75:8a:c8:d5:88:17:5e:19:9a:76:cd:40:0c: 90:a0:61:e0:97:7c:68:80:85:4d:cb:00:3e:1f:cb: 93:e7:64:c0:d8:ef:d6:a5:17:00:b3:d9:01:f3:be: a2:9d:49:03:86:6a:4d:5a:b0:d8:a9:ac:5a:6f:52: d5:5c:88:7b:e7:97:9a:81:54:67:d9:b9:cc:af:a0: de:8b:8e:55:3c:21:c2:d9:02:5d:f4:28:db:e3:d6: b8:b2:70:7e:c6:7b:17:3d:18:1a:70:38:ac:7e:70: 21:56:5c:95:19:d9:4a:f2:e7:be:72:43:ac:19:f5: ea:15:b7:e3:f7:76:ab:ef:89:cf:5e:5c:2c:0c:5f: 2a:4c:60:c7:03:74:ff:c2:ca:1e:3f:4c:fb:3c:3c: d7:c1:78:ec:30:75:6b:be:36:60:87:70:62:59:8d: 94:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:FD:23:09:13:B2:37:19:86:7A:6A:CB:CC:1B:29:45:79:2A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl X509v3 Authority Key Identifier: keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer sbgp-ipAddrBlock: critical IPv6: 2605:de00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ab:d4:19:9b:d8:73:8d:b4:18:16:ee:eb:68:ae:db:cd:c0: 69:19:0a:da:19:23:93:03:0e:ae:a1:44:d3:04:a8:9a:c2:d8: cd:d6:63:c1:a1:0b:7b:4d:13:70:99:a9:7d:83:fc:61:ba:17: 4e:8d:9c:31:02:88:9a:db:7d:fc:74:30:fc:1f:08:5c:54:2a: a7:d2:2e:b9:d3:e2:e9:0e:ce:f3:b8:97:4d:83:e4:47:b6:26: b9:08:7b:13:5c:c7:e2:24:5e:00:74:09:a4:73:bc:f9:01:ea: fc:20:be:b0:da:e2:94:af:dd:39:82:18:cb:69:17:cc:cc:46: 78:3b:f0:29:3d:2c:8e:cf:49:0e:9c:82:8e:29:e5:4b:f4:7d: 18:f0:3d:16:cc:c7:00:12:30:60:cc:bc:72:dd:1e:3c:ed:29: b0:60:da:c4:36:a9:f1:fd:47:2f:7e:20:6f:fb:7e:de:09:84: d7:89:95:a1:6b:3a:13:a9:f2:06:ff:87:12:4f:0b:f4:dc:93: e6:b7:ff:da:c5:41:66:0c:95:aa:64:0a:4d:a8:9b:4b:35:b7: 1f:00:c7:5b:f1:ee:69:12:ef:f1:13:47:5b:71:28:c6:ef:bd: f9:14:90:b4:a1:4d:16:8a:26:99:2d:0e:ac:e7:e0:72:ee:c6: 1f:c8:d4:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+iyH5qibyAGJfHmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjNjhhYTMtYWJjNS00ZDM0LThmMWMtMTdiYjExZDky YmEzMB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk NDQ4MmQ1YWMtYzU2NS00MDFmLTkxNzktZjk3MWFmYzFiNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8LtfHye5uMIa3xZYKGBQr6lOdOO/Xpwr8pY p+2tk9yYSCz2aJirJEfBnQLLSwEgK7dIQV0KrNQF6GWka1nLNIQbsltWFpfflV0Y b+AaZDXGo66Lq5Bm3kJXO3WKyNWIF14ZmnbNQAyQoGHgl3xogIVNywA+H8uT52TA 2O/WpRcAs9kB876inUkDhmpNWrDYqaxab1LVXIh755eagVRn2bnMr6Dei45VPCHC 2QJd9Cjb49a4snB+xnsXPRgacDisfnAhVlyVGdlK8ue+ckOsGfXqFbfj93ar74nP XlwsDF8qTGDHA3T/wsoeP0z7PDzXwXjsMHVrvjZgh3BiWY2UhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA4X/SMJE7I3GYZ6asvMGylFeSrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2 OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2JiMTFkOTJiYTMvOGIyZjAzMmUtZjhkMS0z YTBhLWI1MTUtMjZhMzZkNjhmOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZjNjhhYTMtYWJjNS00ZDM0LThm MWMtMTdiYjExZDkyYmEzL2VmYzY4YWEzLWFiYzUtNGQzNC04ZjFjLTE3YmIxMWQ5 MmJhMy5jcmwwHwYDVR0jBBgwFoAUGjV0+uDTzjmDRIFr6CLuJyWOF6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2Ji MTFkOTJiYTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLq9QZm9hzjbQYFu7raK7bzcBpGQraGSOTAw6uoUTTBKiawtjN1mPB oQt7TRNwmal9g/xhuhdOjZwxAoia2338dDD8HwhcVCqn0i650+LpDs7zuJdNg+RH tia5CHsTXMfiJF4AdAmkc7z5Aer8IL6w2uKUr905ghjLaRfMzEZ4O/ApPSyOz0kO nIKOKeVL9H0Y8D0WzMcAEjBgzLxy3R487SmwYNrENqnx/UcvfiBv+37eCYTXiZWh azoTqfIG/4cSTwv03JPmt//axUFmDJWqZApNqJtLNbcfAMdb8e5pEu/xE0dbcSjG 7735FJC0oU0WiiaZLQ6s5+By7sYfyNRw -----END CERTIFICATE-----Generated at Sun Nov 15 11:11:10 2026 by rpki-client