$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2e2a87d2-e309-3fe5-8fae-caa5f7c4d0f8.roa File: 2e2a87d2-e309-3fe5-8fae-caa5f7c4d0f8.roa (raw, json) Hash identifier: GuqbZ7J8tTKvQ1Ppr/3h5ySL+sTTzXfsN+RTmd1VAm0= Subject key identifier: 6C:F5:5A:99:32:EF:8B:62:4B:A1:77:A0:7A:34:EF:B9:EC:67:6B:98 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F6CBAFD8C335CCF69821AB4C0 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2e2a87d2-e309-3fe5-8fae-caa5f7c4d0f8.roa Signing time: Wed 07 Oct 2026 16:19:31 +0000 ROA not before: Wed 07 Oct 2026 16:19:31 +0000 ROA not after: Tue 05 Jan 2027 17:19:31 +0000 asID: 3573 IP address blocks: 2610:b0:4126::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:ba:fd:8c:33:5c:cf:69:82:1a:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Oct 7 16:19:31 2026 GMT Not After : Jan 5 17:19:31 2027 GMT Subject: CN=056fb68a-eabe-4d0f-a2ea-175fa2a50016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:69:5e:a9:c2:59:75:2b:e4:a2:91:62:34: 5e:34:84:bd:ee:3a:b3:b9:73:9a:e3:c6:f9:65:df: ad:10:7c:78:00:5e:f8:a9:96:f7:c9:63:96:7b:bc: b3:20:7a:bd:f4:d5:cf:e9:70:41:c5:68:10:75:24: 77:1c:2c:fd:93:28:4b:22:b3:80:d8:03:4e:c7:e0: e0:7e:c9:f0:95:7c:f4:50:f9:64:40:d9:38:2d:e5: 97:55:db:a1:3b:e0:55:99:f2:c0:27:49:59:04:f1: 78:ea:e0:a2:db:3f:a0:c7:ca:c0:b0:8e:4e:80:2a: 52:e1:49:f7:79:2f:44:aa:99:1f:24:17:ab:f5:b7: fe:50:39:f2:59:de:26:cf:5c:40:87:ea:cf:bf:09: 5f:85:06:46:9d:a0:04:27:46:2a:0b:55:36:59:5b: 69:53:23:a3:5d:12:05:2b:86:27:a4:4a:b5:01:20: 27:ee:22:f0:d6:6d:ab:7b:84:f8:5f:08:b0:5f:fc: 65:87:fb:33:a4:3e:86:15:8d:6e:83:ef:1c:e9:9a: 50:4f:69:b0:73:f3:de:45:7a:a2:e0:83:5b:19:6d: 70:17:9a:33:09:dc:0b:f0:63:23:a6:66:79:31:c7: b8:af:26:14:d4:98:ce:06:d7:64:fb:74:66:d0:99: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F5:5A:99:32:EF:8B:62:4B:A1:77:A0:7A:34:EF:B9:EC:67:6B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2e2a87d2-e309-3fe5-8fae-caa5f7c4d0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:4126::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:06:7c:82:e0:7a:70:14:0d:10:ef:1e:cb:ff:28:ef:5f:5e: b4:50:86:e2:af:08:05:b5:a7:7d:5e:d3:52:71:bc:d5:97:b2: 16:9d:40:69:02:7c:a1:df:36:0b:af:a3:a4:10:12:37:60:fc: 3d:5f:22:33:c5:80:1d:4a:68:19:54:0c:f0:82:1a:c0:62:33: ad:4d:b9:e7:1d:97:cb:b1:bc:d4:f5:c4:f5:d5:fd:d9:c3:82: ce:42:5c:ad:68:52:05:cd:c5:22:20:98:70:6d:a8:bc:37:02: 2e:73:29:04:41:97:8e:df:9f:0a:b7:64:f3:ec:0b:62:6f:3a: f1:71:d1:74:bc:0d:31:93:b9:e6:04:e6:6c:42:26:55:9f:80: 4e:16:c9:16:a9:fc:35:b3:34:23:13:88:ec:7f:4f:16:32:4d: 1e:dc:14:e1:63:5d:87:fb:c4:c5:92:fa:6a:a3:f0:24:49:15: 4d:07:bb:8b:c4:28:ea:d0:1d:35:9a:71:c3:bc:e7:41:80:da: 15:e3:2b:73:02:27:e6:76:59:a7:e6:a6:56:cf:e7:79:36:8d: b5:b1:b4:b9:7a:13:b0:6f:83:44:90:67:04:8d:4a:eb:2b:9f: b6:67:76:eb:76:2c:f2:98:90:42:b3:df:73:67:d8:6b:aa:f7: 8b:1f:54:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9suv2MM1zPaYIatMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MTAwNzE2MTkzMVoXDTI3MDEwNTE3MTkzMVowLzEtMCsGA1UEAxMk MDU2ZmI2OGEtZWFiZS00ZDBmLWEyZWEtMTc1ZmEyYTUwMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3ZpXqnCWXUr5KKRYjReNIS97jqzuXOa48b5 Zd+tEHx4AF74qZb3yWOWe7yzIHq99NXP6XBBxWgQdSR3HCz9kyhLIrOA2ANOx+Dg fsnwlXz0UPlkQNk4LeWXVduhO+BVmfLAJ0lZBPF46uCi2z+gx8rAsI5OgCpS4Un3 eS9EqpkfJBer9bf+UDnyWd4mz1xAh+rPvwlfhQZGnaAEJ0YqC1U2WVtpUyOjXRIF K4YnpEq1ASAn7iLw1m2re4T4XwiwX/xlh/szpD6GFY1ug+8c6ZpQT2mwc/PeRXqi 4INbGW1wF5ozCdwL8GMjpmZ5Mce4ryYU1JjOBtdk+3Rm0Jm4bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGz1Wpky74tiS6F3oHo077nsZ2uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMmUyYTg3ZDItZTMwOS0z ZmU1LThmYWUtY2FhNWY3YzRkMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJhAAsEEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIGfILgenAUDRDvHsv/KO9fXrRQhuKvCAW1p31e01JxvNWXshad QGkCfKHfNguvo6QQEjdg/D1fIjPFgB1KaBlUDPCCGsBiM61Nuecdl8uxvNT1xPXV /dnDgs5CXK1oUgXNxSIgmHBtqLw3Ai5zKQRBl47fnwq3ZPPsC2JvOvFx0XS8DTGT ueYE5mxCJlWfgE4WyRap/DWzNCMTiOx/TxYyTR7cFOFjXYf7xMWS+mqj8CRJFU0H u4vEKOrQHTWaccO850GA2hXjK3MCJ+Z2WafmplbP53k2jbWxtLl6E7Bvg0SQZwSN Susrn7Zndut2LPKYkEKz33Nn2Guq94sfVPM= -----END CERTIFICATE-----Generated at Sun Nov 15 17:01:03 2026 by rpki-client