$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3aa09a3e-65b2-3c8e-aaa7-ff5fe54697b2.roa File: 3aa09a3e-65b2-3c8e-aaa7-ff5fe54697b2.roa (raw, json) Hash identifier: nM0+BKQ9804u1dqFFOZcV9TS2TVmxag6I546UFwgc5M= Subject key identifier: 05:7E:51:92:29:19:AC:88:1A:52:29:A2:96:43:B2:3E:AA:D4:2C:D7 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584F6CB902978E344E6BA7656CC0 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3aa09a3e-65b2-3c8e-aaa7-ff5fe54697b2.roa Signing time: Wed 07 Oct 2026 16:15:31 +0000 ROA not before: Wed 07 Oct 2026 16:15:31 +0000 ROA not after: Tue 05 Jan 2027 17:15:31 +0000 asID: 3573 IP address blocks: 2610:b0:41d6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:b9:02:97:8e:34:4e:6b:a7:65:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Oct 7 16:15:31 2026 GMT Not After : Jan 5 17:15:31 2027 GMT Subject: CN=c8d94859-1c85-4b7a-b87f-aca8dd0bc2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:0f:a6:a9:b1:ae:15:4e:7e:44:7b:8f:64: ff:10:0a:5e:0e:d1:a9:73:71:b1:5f:10:72:eb:58: 40:29:d6:37:bb:8e:d2:eb:c8:80:af:0b:46:5a:cd: 78:fa:1e:08:f2:e6:77:b0:6a:39:be:3e:c4:c4:c6: e1:a7:4a:32:8f:31:21:61:06:08:20:91:a2:4c:9a: 3a:4e:20:24:1e:a2:f5:b6:44:f6:94:2d:01:7d:9b: b7:c9:a8:00:bd:7a:4b:7a:c1:f4:53:bc:0a:4c:36: 03:14:e6:e5:79:e5:6a:3f:cf:ed:43:0a:71:ef:9c: 2e:70:68:62:f0:01:78:c6:f3:c0:86:36:34:a9:cf: e8:e0:5d:56:4f:ec:64:f9:f1:2a:cd:00:7e:be:ae: 00:69:6d:90:32:1a:0f:a3:1b:48:58:62:22:dc:f0: f4:32:47:ef:03:62:c9:1d:45:ee:0e:f6:bd:73:a0: f0:bd:fc:fa:49:13:36:46:90:0f:49:33:88:44:cb: 7a:15:18:0e:00:cc:5f:c0:f2:c9:5a:49:20:6a:7d: fb:20:fa:3b:5a:db:bf:bc:2b:35:6f:2e:f0:02:b9: bc:44:88:c5:57:3f:c4:7f:b7:11:ef:dc:69:0e:b3: 64:54:80:56:d7:9e:10:bb:bd:c7:11:07:99:b3:17: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:51:92:29:19:AC:88:1A:52:29:A2:96:43:B2:3E:AA:D4:2C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/3aa09a3e-65b2-3c8e-aaa7-ff5fe54697b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:41d6::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ba:6e:c2:7f:bf:4c:79:b4:75:8b:e6:5e:07:8d:69:82:08: ef:71:ae:c4:82:32:f2:da:54:6a:63:bb:b5:e7:40:c3:6b:22: a2:c0:50:84:24:eb:4a:c2:cb:f1:58:de:22:00:a0:b1:ac:6b: e6:62:88:2b:80:c4:9e:2f:c1:03:c7:aa:a7:30:d6:b3:2a:6a: 7c:81:a2:91:9d:dc:18:b5:4a:8c:ce:4d:66:78:af:42:35:c2: b5:c4:5d:4d:4c:9c:33:34:40:a5:d0:bb:94:3e:7b:4a:00:5d: 72:22:68:4b:d2:98:1b:45:de:4c:a1:82:a7:a7:10:db:48:04: 78:e3:af:0b:35:95:19:19:da:56:89:0a:df:02:62:9b:d0:5f: 33:68:cb:92:fb:06:c2:1b:e4:40:b3:b5:76:2a:2d:83:cf:85: e7:1b:55:89:59:97:32:2e:19:5e:c0:83:c7:78:7d:de:c8:5f: f3:63:af:f4:2d:a4:2f:9e:55:77:15:50:ce:d9:7d:a2:f8:16: a7:99:6b:6a:5a:eb:75:f9:0e:3c:40:67:a5:55:81:34:47:d1: 58:1b:01:14:6f:17:3f:5a:f7:2b:d1:63:6f:46:78:78:47:aa: 78:9f:dd:33:c7:ba:ec:86:d0:f6:15:a1:9c:f8:5c:50:11:82: 83:b7:9e:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9suQKXjjROa6dlbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI2MTAwNzE2MTUzMVoXDTI3MDEwNTE3MTUzMVowLzEtMCsGA1UEAxMk YzhkOTQ4NTktMWM4NS00YjdhLWI4N2YtYWNhOGRkMGJjMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8APpqmxrhVOfkR7j2T/EApeDtGpc3GxXxBy 61hAKdY3u47S68iArwtGWs14+h4I8uZ3sGo5vj7ExMbhp0oyjzEhYQYIIJGiTJo6 TiAkHqL1tkT2lC0BfZu3yagAvXpLesH0U7wKTDYDFObleeVqP8/tQwpx75wucGhi 8AF4xvPAhjY0qc/o4F1WT+xk+fEqzQB+vq4AaW2QMhoPoxtIWGIi3PD0MkfvA2LJ HUXuDva9c6Dwvfz6SRM2RpAPSTOIRMt6FRgOAMxfwPLJWkkgan37IPo7Wtu/vCs1 by7wArm8RIjFVz/Ef7cR79xpDrNkVIBW154Qu73HEQeZsxcTuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAV+UZIpGayIGlIpopZDsj6q1CzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvM2FhMDlhM2UtNjViMi0z YzhlLWFhYTctZmY1ZmU1NDY5N2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJhAAsEHW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHG6bsJ/v0x5tHWL5l4HjWmCCO9xrsSCMvLaVGpju7XnQMNrIqLA UIQk60rCy/FY3iIAoLGsa+ZiiCuAxJ4vwQPHqqcw1rMqanyBopGd3Bi1SozOTWZ4 r0I1wrXEXU1MnDM0QKXQu5Q+e0oAXXIiaEvSmBtF3kyhgqenENtIBHjjrws1lRkZ 2laJCt8CYpvQXzNoy5L7BsIb5ECztXYqLYPPhecbVYlZlzIuGV7Ag8d4fd7IX/Nj r/QtpC+eVXcVUM7ZfaL4FqeZa2pa63X5DjxAZ6VVgTRH0VgbARRvFz9a9yvRY29G eHhHqnif3TPHuuyG0PYVoZz4XFARgoO3nlY= -----END CERTIFICATE-----Generated at Sun Nov 15 20:25:20 2026 by rpki-client