$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa File: 5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa (raw, json) Hash identifier: fQk3P73l2V4Vt+PJul5Lenth/GM3fa2v7Z3qxtomdbI= Subject key identifier: 50:BC:E2:18:82:83:5D:C9:75:AA:B9:E3:ED:21:63:4E:B4:59:CA:65 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584FD3C1497FF338917DC614FE00 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 22223 IP address blocks: 2606:f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:49:7f:f3:38:91:7d:c6:14:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=b88484e8-b1da-4fbb-ba6c-d6558ffa6afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bd:c6:35:ed:8a:95:0c:22:2c:2a:3d:dd:c0: c5:69:5e:9c:0d:06:45:3b:3c:1b:4c:07:72:a9:c7: 20:a6:c9:eb:b2:37:b1:d2:72:be:26:1a:93:dd:f1: 7e:aa:29:de:09:2c:79:b3:3c:96:ef:4c:e0:03:f4: d6:84:e4:39:e0:ed:65:d9:fb:38:7e:7a:3c:08:80: 06:bc:30:59:0e:d7:80:8d:4c:e7:02:0c:93:95:5f: 74:01:e0:26:39:8e:7d:01:a5:98:65:18:c1:c3:f8: 12:2b:25:cb:55:7a:38:28:6d:4a:19:32:12:0a:f3: 28:3b:a2:b8:75:d9:08:50:f2:53:9c:7e:65:9c:69: f4:32:a4:84:e1:f3:ba:de:42:13:4f:63:a1:60:8a: 1b:21:10:22:8a:f2:b4:f5:51:35:a3:61:f4:3e:42: 58:5d:09:22:82:c6:34:92:de:d4:ed:15:39:41:70: 69:4f:bf:33:9a:3c:e6:96:3a:35:06:1f:26:58:2f: a0:b8:21:e5:b0:0a:ea:3e:8c:2f:00:80:b8:c2:b4: ea:7c:db:19:41:de:21:d7:48:85:a2:bd:8a:31:81: a5:7c:72:e4:73:fd:7b:b2:97:a5:32:7c:3c:6e:2a: 0c:fb:34:e5:14:6d:43:19:0a:83:05:08:39:ec:14: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:E2:18:82:83:5D:C9:75:AA:B9:E3:ED:21:63:4E:B4:59:CA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/5a0ad764-c5b7-33ff-9e89-d83378aefdc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv6: 2606:f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b5:21:a2:ce:8b:5f:30:bf:47:46:14:41:cd:4d:2f:15:3e: 89:43:66:14:ba:a1:f5:e3:98:86:4a:9d:28:a6:b1:21:01:80: ff:c5:03:bb:9d:8d:53:09:08:7f:f6:44:77:93:bc:82:3d:89: d5:77:ba:73:d7:d7:15:ed:df:3e:0e:a8:9e:27:8d:7e:c5:f1: 1f:e6:74:07:e6:1a:ce:03:1d:41:00:d5:ff:e6:5d:3d:b2:9d: 4e:56:22:bf:0c:80:21:d6:4f:83:fa:a2:10:c6:7e:e2:56:5d: 96:18:7c:0c:83:a4:2b:11:8a:78:39:89:1f:4e:92:b8:a0:86: bf:39:7c:e4:0f:de:0e:ca:06:8a:ff:d0:d9:2b:9f:af:69:50: 9e:c9:91:15:c3:13:b3:97:7f:22:b0:9d:c6:fc:cf:db:59:82: 4c:e7:b1:74:07:80:4f:84:35:ad:b8:cb:5a:30:67:a3:97:23: d9:bb:75:23:6e:9e:a3:87:78:6a:96:b3:95:07:2d:ab:f1:6f: ad:08:33:e3:55:f1:85:24:9c:d7:32:b7:9c:42:01:65:a5:08: 3f:2c:ea:95:a9:36:63:1b:8c:e6:78:6f:fc:eb:9d:1d:2b:f6: 04:3b:68:13:83:a3:ba:2f:e1:56:f3:d6:24:12:2d:58:fe:d7: 6e:e8:2c:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/TwUl/8ziRfcYU/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk Yjg4NDg0ZTgtYjFkYS00ZmJiLWJhNmMtZDY1NThmZmE2YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b3GNe2KlQwiLCo93cDFaV6cDQZFOzwbTAdy qccgpsnrsjex0nK+JhqT3fF+qineCSx5szyW70zgA/TWhOQ54O1l2fs4fno8CIAG vDBZDteAjUznAgyTlV90AeAmOY59AaWYZRjBw/gSKyXLVXo4KG1KGTISCvMoO6K4 ddkIUPJTnH5lnGn0MqSE4fO63kITT2OhYIobIRAiivK09VE1o2H0PkJYXQkigsY0 kt7U7RU5QXBpT78zmjzmljo1Bh8mWC+guCHlsArqPowvAIC4wrTqfNsZQd4h10iF or2KMYGlfHLkc/17spelMnw8bioM+zTlFG1DGQqDBQg57BTf4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFC84hiCg13Jdaq54+0hY060WcplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvNWEwYWQ3NjQtYzViNy0z M2ZmLTllODktZDgzMzc4YWVmZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArtSGizotfML9HRhRBzU0vFT6JQ2YUuqH145iGSp0oprEhAYD/xQO7 nY1TCQh/9kR3k7yCPYnVd7pz19cV7d8+DqieJ41+xfEf5nQH5hrOAx1BANX/5l09 sp1OViK/DIAh1k+D+qIQxn7iVl2WGHwMg6QrEYp4OYkfTpK4oIa/OXzkD94OygaK /9DZK5+vaVCeyZEVwxOzl38isJ3G/M/bWYJM57F0B4BPhDWtuMtaMGejlyPZu3Uj bp6jh3hqlrOVBy2r8W+tCDPjVfGFJJzXMrecQgFlpQg/LOqVqTZjG4zmeG/8650d K/YEO2gTg6O6L+FW89YkEi1Y/tdu6Cy3 -----END CERTIFICATE-----Generated at Sun Nov 15 10:08:14 2026 by rpki-client