$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa File: a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa (raw, json) Hash identifier: KgCK0iMssGhXqv/3866jHcoQ0oaRuh7ZnhhbiP1akpU= Subject key identifier: A6:90:8E:5C:A7:2B:4D:A9:9B:94:A6:E9:8F:F6:2C:3B:13:1A:C3:21 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584FA85DF5E984B2CB9F639A5580 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 20253 IP address blocks: 2606:bc40:f1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f5:e9:84:b2:cb:9f:63:9a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=2d297f88-a83c-4598-ab87-b81aadf8f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:dc:d8:cd:1e:5e:cf:cb:a3:b6:a8:e4:25: 24:be:e9:2d:12:0e:d7:dc:e0:d4:9f:d5:00:c4:3b: 1f:dc:ba:00:7c:f0:52:50:01:4d:02:be:17:43:71: 65:d2:50:a1:84:04:41:e6:d1:45:24:7c:f9:db:65: 08:05:0c:fc:32:ba:17:4a:e6:09:d7:01:c0:7e:3d: 72:3a:0e:4b:cf:23:c1:75:73:c0:e8:93:fd:de:e8: fa:78:1d:c5:df:cb:fd:85:34:3e:59:56:be:6b:e2: 90:df:cb:98:34:5c:3d:05:c4:ed:0b:a7:d1:ae:28: fc:78:f2:6b:53:b8:43:3f:c5:44:74:a4:cd:03:d2: 35:92:64:45:f5:ed:d8:33:57:32:d1:a2:50:f2:44: 4f:28:fd:7b:20:e4:36:6a:dd:41:38:67:7f:20:19: 31:a6:ec:c2:6a:04:dc:66:20:1d:30:cb:45:fd:51: 92:32:b4:6d:7a:a2:e5:e4:77:6d:67:bc:80:32:e6: 87:44:e3:85:1c:0f:b8:9f:d6:34:5d:db:dc:ff:cc: e2:2f:d3:32:8b:9d:3c:e7:f1:92:2f:fe:a2:f1:af: 8c:12:41:a3:61:65:5d:a9:c0:48:92:f7:d4:96:6a: c9:1d:d3:24:b1:b6:ef:1d:db:68:0e:3a:62:b9:67: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:90:8E:5C:A7:2B:4D:A9:9B:94:A6:E9:8F:F6:2C:3B:13:1A:C3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:0d:48:87:19:33:96:c1:ad:db:05:26:41:64:5e:da:ff:56: f9:e2:20:30:d5:20:2d:91:5e:a6:57:63:1e:d0:17:77:9b:c2: bb:c2:a2:5b:84:84:cc:f9:f0:4a:c0:4e:eb:27:92:b3:2f:2b: a9:42:b7:f9:44:28:8e:79:ff:90:6c:db:b2:65:82:d0:60:b0: de:2d:e5:20:99:6f:d1:b5:bb:df:e7:ab:ba:e8:bf:4b:fe:1e: de:ab:5a:42:40:e3:2e:85:42:8e:86:1b:c9:ed:10:29:fc:56: 57:8e:1b:3c:68:2f:c4:ad:01:7f:95:cc:72:2a:98:55:b0:ca: ff:0c:f5:b4:83:42:a4:56:31:cb:b9:58:5e:b4:73:66:08:8b: 6e:92:ee:44:5e:ec:e2:a3:71:1f:59:14:49:a5:c6:f9:de:55: 58:ee:a9:ad:f8:f6:82:03:65:11:84:5f:c3:18:bb:7b:96:a1: 95:f9:27:fc:dd:43:bc:78:ae:cc:6c:dd:0a:92:3b:3d:0c:bb: 54:6e:49:d2:cd:e7:f1:97:f1:2d:3c:95:0d:0d:43:81:13:97: 04:e1:95:5f:78:65:e7:6a:11:a8:bd:18:5e:5f:96:8e:0e:23: 0a:64:89:bf:02:70:2a:80:78:21:9f:d1:0a:39:70:b0:64:ad: b6:c6:86:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+oXfXphLLLn2OaVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MmQyOTdmODgtYTgzYy00NTk4LWFiODctYjgxYWFkZjhmOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT3c2M0eXs/Lo7ao5CUkvuktEg7X3ODUn9UA xDsf3LoAfPBSUAFNAr4XQ3Fl0lChhARB5tFFJHz522UIBQz8MroXSuYJ1wHAfj1y Og5LzyPBdXPA6JP93uj6eB3F38v9hTQ+WVa+a+KQ38uYNFw9BcTtC6fRrij8ePJr U7hDP8VEdKTNA9I1kmRF9e3YM1cy0aJQ8kRPKP17IOQ2at1BOGd/IBkxpuzCagTc ZiAdMMtF/VGSMrRteqLl5HdtZ7yAMuaHROOFHA+4n9Y0Xdvc/8ziL9Myi5085/GS L/6i8a+MEkGjYWVdqcBIkvfUlmrJHdMksbbvHdtoDjpiuWc5TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKaQjlynK02pm5Sm6Y/2LDsTGsMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTQ0ZmRlM2UtODZjMi0z NTA0LWI5MTQtYmM0NGE3ZWFjN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8f MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKoNSIcZM5bBrdsFJkFkXtr/VvniIDDVIC2RXqZXYx7QF3ebwrvC oluEhMz58ErATusnkrMvK6lCt/lEKI55/5Bs27JlgtBgsN4t5SCZb9G1u9/nq7ro v0v+Ht6rWkJA4y6FQo6GG8ntECn8VleOGzxoL8StAX+VzHIqmFWwyv8M9bSDQqRW Mcu5WF60c2YIi26S7kRe7OKjcR9ZFEmlxvneVVjuqa349oIDZRGEX8MYu3uWoZX5 J/zdQ7x4rsxs3QqSOz0Mu1RuSdLN5/GX8S08lQ0NQ4ETlwThlV94ZedqEai9GF5f lo4OIwpkib8CcCqAeCGf0Qo5cLBkrbbGhkE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:12:54 2026 by rpki-client