$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa File: 28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa (raw, json) Hash identifier: KQ/+8/7tDzWbTq6aT+CwDQRiwVKUXlnWzbFMDckgxwU= Subject key identifier: E1:18:D5:C2:36:DC:AB:30:5E:63:37:1B:76:B6:3E:4F:68:E4:6C:85 Certificate issuer: /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Certificate serial: 010D0C9F4328584F9E9868F9AF0577843ED9A700 Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 3486 IP address blocks: 2620:11:40::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:68:f9:af:05:77:84:3e:d9:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=44eb9c16-3679-4a39-b544-05e41337e4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:26:f8:f2:80:c9:fa:8e:f5:8e:62:ca:9e: 2e:ea:b4:c9:28:ba:7c:7f:91:e8:d0:7a:04:8c:e4: 05:cf:ee:a3:60:0b:f5:ab:f7:e1:c5:69:43:49:6b: 97:c0:b1:7d:e3:7d:44:24:9b:f0:cd:72:14:8d:4c: ba:87:bd:bd:f1:ef:07:31:d7:81:b6:f4:9e:23:70: ec:7f:30:9a:64:de:e7:f9:71:34:d1:d6:f4:14:8f: d8:00:cd:4b:ee:8d:eb:f5:47:ab:f4:e5:b8:58:c9: 32:2f:6c:cf:7d:69:60:e9:fb:4e:1b:a0:5b:e1:0c: ab:44:18:2e:29:80:8e:51:17:93:1e:90:eb:31:62: 41:1a:a3:08:db:6b:68:f4:aa:52:8d:61:cd:71:3d: 33:05:56:8b:bc:73:c5:e7:6e:51:20:97:40:c1:00: 43:f4:6f:c7:bd:54:61:ca:f4:30:2b:90:c4:74:58: 9c:ac:19:a7:1d:b5:3b:5d:1d:71:1d:65:fe:0b:ef: 69:5a:41:38:12:17:9e:a0:53:c9:d0:08:0c:9d:e8: 90:e6:87:4a:ac:e6:04:0d:13:fd:ea:a5:59:ec:ce: 00:74:a6:8f:9b:98:d5:cd:d5:fd:c9:fa:07:c6:d0: 03:74:cf:e5:a3:8d:95:35:ff:01:89:52:85:55:07: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:18:D5:C2:36:DC:AB:30:5E:63:37:1B:76:B6:3E:4F:68:E4:6C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl X509v3 Authority Key Identifier: keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11:40::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:39:19:7f:39:fc:79:5f:ee:d8:c6:e8:d9:35:a2:8e:73: b1:2c:9a:f2:7b:22:39:01:d6:f4:cd:b6:87:73:f8:bc:95:ee: 36:3d:a8:4a:1f:8a:df:ee:9c:47:f1:a5:72:a8:8a:a6:32:a1: 50:84:36:ba:3a:b0:fc:9f:d1:1d:70:95:23:9a:1c:cf:7b:04: 88:62:2d:41:2d:28:f6:80:a0:76:d4:43:39:62:e3:d7:2c:ff: 8b:05:d7:e3:33:0e:c9:dc:2d:7c:be:5f:37:48:83:b9:f8:b2: ce:c9:aa:be:fb:fc:ba:19:f5:4e:69:6a:a2:29:84:b8:94:57: 9d:d4:ae:33:14:5c:12:15:aa:a0:bd:f8:f6:3e:3b:d9:33:aa: 15:15:04:7b:dc:7b:cf:0c:3e:fd:eb:d7:be:fe:f8:40:c1:fd: 48:02:df:0d:6f:fb:f1:e3:e8:61:09:d5:90:44:95:69:ee:77: b0:0a:af:9c:be:ca:3b:af:02:a3:7f:f8:20:af:11:b6:cb:d9: 66:5d:5e:18:c0:17:5c:99:5d:f7:27:a3:f4:8c:eb:c8:ff:2c: 26:94:8b:32:6e:49:5a:32:f1:6e:71:e4:0e:3c:bb:39:69:39: b7:74:26:2b:01:db:3b:58:4a:66:5b:29:0e:d9:cf:34:8f:a0: d2:bf:be:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+emGj5rwV3hD7ZpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4 N2ZjMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NDRlYjljMTYtMzY3OS00YTM5LWI1NDQtMDVlNDEzMzdlNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Qm+PKAyfqO9Y5iyp4u6rTJKLp8f5Ho0HoE jOQFz+6jYAv1q/fhxWlDSWuXwLF9431EJJvwzXIUjUy6h7298e8HMdeBtvSeI3Ds fzCaZN7n+XE00db0FI/YAM1L7o3r9Uer9OW4WMkyL2zPfWlg6ftOG6Bb4QyrRBgu KYCOUReTHpDrMWJBGqMI22to9KpSjWHNcT0zBVaLvHPF525RIJdAwQBD9G/HvVRh yvQwK5DEdFicrBmnHbU7XR1xHWX+C+9pWkE4EheeoFPJ0AgMneiQ5odKrOYEDRP9 6qVZ7M4AdKaPm5jVzdX9yfoHxtADdM/lo42VNf8BiVKFVQdavwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEY1cI23KswXmM3G3a2Pk9o5GyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMjhjZTJlZjUtZGY5OC0z ZmZkLTg4YjMtMmZmMDQwNzlmM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3 ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj MGFjYjg3ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAEQBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXQORl/Ofx5X+7YxujZNaKOc7EsmvJ7IjkB1vTNtodz+LyV7jY9 qEofit/unEfxpXKoiqYyoVCENro6sPyf0R1wlSOaHM97BIhiLUEtKPaAoHbUQzli 49cs/4sF1+MzDsncLXy+XzdIg7n4ss7Jqr77/LoZ9U5paqIphLiUV53UrjMUXBIV qqC9+PY+O9kzqhUVBHvce88MPv3r177++EDB/UgC3w1v+/Hj6GEJ1ZBElWnud7AK r5y+yjuvAqN/+CCvEbbL2WZdXhjAF1yZXfcno/SM68j/LCaUizJuSVoy8W5x5A48 uzlpObd0JisB2ztYSmZbKQ7ZzzSPoNK/vlI= -----END CERTIFICATE-----Generated at Sun Nov 15 08:03:19 2026 by rpki-client