$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa File: 845f1553-f08d-39f9-a899-cec424893769.roa (raw, json) Hash identifier: Qq0awmIDcuY1Ryhk5YdlRiaBy1GwtxPvW2SXtsas71g= Subject key identifier: CA:F9:0B:85:1D:98:99:7F:11:63:0D:76:D2:A9:45:0B:25:F7:C5:23 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F8F3DC5860BEEC62D35518180 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 62651 IP address blocks: 2606:b300:8600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c5:86:0b:ee:c6:2d:35:51:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=af14a78e-7d10-4ee7-9190-fe4d069257e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:44:fc:96:23:3b:c9:e0:82:c6:fe:0e:f0: ea:2a:f5:a0:57:0a:dd:d8:7c:a4:55:f5:b3:44:db: de:ec:ba:45:29:20:3e:d5:2f:fa:b4:52:1b:a4:86: 79:63:84:85:eb:87:0d:63:63:6f:9e:1a:25:5a:d3: a7:33:1d:51:18:22:7d:33:28:b4:95:b6:75:ef:d0: b7:e5:c9:78:3a:cf:91:d4:9d:ed:85:47:79:b7:af: f2:2e:cf:a5:64:a8:2b:bf:c2:94:03:2f:17:46:21: d7:52:ba:b0:19:93:0f:73:1d:c8:fc:95:b9:73:2d: 28:67:4f:7c:2d:9f:eb:b3:25:8f:e1:23:5e:71:66: e2:da:6c:89:f7:20:0f:bf:94:ef:e2:02:2c:f1:5b: 68:e6:0e:79:75:dc:ff:bc:cf:fb:62:5c:04:89:a6: 7d:88:3a:43:d6:69:e0:e6:a9:8d:7a:0b:dd:07:c1: 6d:16:81:5b:43:0b:91:0e:d8:be:6f:a9:7e:4d:e3: eb:2c:4a:8f:35:67:cd:44:ec:de:af:a3:59:b6:db: 67:55:2d:39:f7:da:b5:99:18:7e:b1:2e:97:88:26: 9f:6a:12:25:06:bf:64:fe:5a:06:0b:59:bd:89:7c: 17:46:3f:a8:a9:be:15:af:88:1b:66:3e:0f:db:36: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F9:0B:85:1D:98:99:7F:11:63:0D:76:D2:A9:45:0B:25:F7:C5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2606:b300:8600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e8:ab:97:dc:80:92:49:eb:dd:c4:57:3a:72:21:71:b3:70: a1:e7:7e:c5:6f:7c:15:0c:ec:2a:ad:be:b8:1f:50:07:19:1f: 4e:86:ad:b7:b3:01:a3:9d:74:d0:ee:15:a1:32:7a:a2:e7:96: 59:e5:bb:0c:d7:49:93:c7:6f:05:07:36:55:f0:76:8d:6c:c1: 87:58:0c:23:bb:10:d5:f8:9e:4a:8b:e3:d4:4d:bb:b3:4b:ea: 56:75:bf:d1:fc:b2:44:2e:41:7c:50:4b:4b:6f:c4:13:85:bf: d1:f0:50:31:56:b4:bb:d9:7b:7c:4c:bb:6c:1b:77:81:fd:ae: ef:b0:ec:6b:b6:e8:85:33:e2:e9:d4:56:7c:a8:95:d9:34:6f: 71:37:a5:5d:68:dc:1c:d1:7e:c6:9f:dc:53:11:f0:3e:eb:d1: 14:cb:7c:54:84:20:be:17:ab:88:61:2e:ff:a6:30:29:3e:71: fa:2a:0e:6d:24:86:bb:3c:de:f4:d8:b8:07:c5:22:42:5e:a3: bc:5a:e5:ad:55:4e:32:a0:a8:86:9b:3c:5a:7a:9e:fa:b4:a9: 0f:ff:46:c6:ff:8d:82:8f:ca:5c:55:68:c4:45:9d:2c:3c:e5: aa:99:3f:93:b9:6b:9b:8f:29:30:63:52:75:15:12:34:eb:4e: 1c:d2:85:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+PPcWGC+7GLTVRgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWYxNGE3OGUtN2QxMC00ZWU3LTkxOTAtZmU0ZDA2OTI1N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX5E/JYjO8nggsb+DvDqKvWgVwrd2HykVfWz RNve7LpFKSA+1S/6tFIbpIZ5Y4SF64cNY2NvnholWtOnMx1RGCJ9Myi0lbZ179C3 5cl4Os+R1J3thUd5t6/yLs+lZKgrv8KUAy8XRiHXUrqwGZMPcx3I/JW5cy0oZ098 LZ/rsyWP4SNecWbi2myJ9yAPv5Tv4gIs8Vto5g55ddz/vM/7YlwEiaZ9iDpD1mng 5qmNegvdB8FtFoFbQwuRDti+b6l+TePrLEqPNWfNROzer6NZtttnVS0599q1mRh+ sS6XiCafahIlBr9k/loGC1m9iXwXRj+oqb4Vr4gbZj4P2zY0QwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMr5C4UdmJl/EWMNdtKpRQsl98UjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODQ1ZjE1NTMtZjA4ZC0z OWY5LWE4OTktY2VjNDI0ODkzNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgazAIYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALOirl9yAkknr3cRXOnIhcbNwoed+xW98FQzsKq2+uB9QBxkfToat t7MBo5100O4VoTJ6oueWWeW7DNdJk8dvBQc2VfB2jWzBh1gMI7sQ1fieSovj1E27 s0vqVnW/0fyyRC5BfFBLS2/EE4W/0fBQMVa0u9l7fEy7bBt3gf2u77Dsa7bohTPi 6dRWfKiV2TRvcTelXWjcHNF+xp/cUxHwPuvRFMt8VIQgvheriGEu/6YwKT5x+ioO bSSGuzze9Ni4B8UiQl6jvFrlrVVOMqCohps8Wnqe+rSpD/9Gxv+Ngo/KXFVoxEWd LDzlqpk/k7lrm48pMGNSdRUSNOtOHNKF9g== -----END CERTIFICATE-----Generated at Sat Oct 31 07:58:05 2026 by rpki-client