$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa File: 590a989d-0026-3c8a-9651-54349e958a6b.roa (raw, json) Hash identifier: p5wXsBHf4dj65f0tuf2BOPldhR39VLF7Ja+6iruwurc= Subject key identifier: E8:8B:1A:46:31:E5:5E:45:12:04:F2:03:94:9B:60:B6:C4:0F:1B:DA Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584F7BB30AE47C9CB445996BEB40 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 5009 IP address blocks: 2605:e300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0a:e4:7c:9c:b4:45:99:6b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=ba7d374a-3f47-4ff0-8398-5a492ad7f3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:e1:7f:c0:31:ef:3b:e5:8f:fc:7f:59:be: 76:e2:c5:e0:49:5b:33:62:63:90:29:eb:01:91:ee: d6:6e:0d:a9:c4:d8:c8:ae:7b:71:e1:4f:0b:62:d3: 03:46:bb:f1:1c:79:85:de:62:4d:b7:30:25:26:3f: d5:f5:43:ce:3f:88:a5:ab:57:6d:40:35:d8:c5:2b: 2e:b1:c2:68:07:01:00:60:cb:a3:ba:00:78:a4:c2: 25:89:48:c1:5a:08:7b:12:ff:87:78:74:29:85:09: ba:7e:6d:6f:4c:18:e7:88:78:b9:78:8e:89:01:d0: bb:5b:49:dc:b8:fc:56:13:89:17:ac:82:1a:5e:0a: 8a:1b:7f:2f:6b:fd:0b:f2:43:ec:93:4a:84:87:a0: 9b:f2:3b:ed:50:55:9b:2d:ad:69:6d:b9:01:a8:c0: 38:29:29:23:c8:31:18:71:5a:e1:99:94:3f:ff:89: d0:93:c9:79:0c:6e:59:94:88:e7:7a:53:57:03:2f: 2f:b2:84:a3:f1:ee:8f:7f:70:98:c2:97:bf:11:23: f8:74:10:01:bb:4f:8a:03:40:80:00:c4:c1:5a:94: 87:3f:54:cd:82:5e:33:0b:4d:fa:84:ba:30:98:5a: 91:ab:45:b8:9a:93:83:cf:64:7a:16:e7:86:c8:9e: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8B:1A:46:31:E5:5E:45:12:04:F2:03:94:9B:60:B6:C4:0F:1B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/590a989d-0026-3c8a-9651-54349e958a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv6: 2605:e300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9f:d4:e2:81:05:c9:51:4b:cf:b9:b3:11:80:cc:4a:49:79: 78:10:a3:56:5b:ed:f4:e9:19:b8:3f:70:5d:38:0b:ac:06:97: 76:86:16:34:70:3d:ab:60:53:ad:e8:06:f0:f0:c6:1c:92:3a: 07:f7:49:3f:dc:e9:da:d2:f1:ce:5f:ff:2b:e2:3d:b7:4c:fa: 53:d5:ef:9a:0a:3c:f8:04:b1:49:77:0b:80:fd:1e:e8:7b:ef: 3d:fd:94:4e:95:27:58:67:0f:89:a1:1e:a4:51:64:e3:70:fe: 72:ab:96:8c:92:b6:97:23:e1:23:01:02:11:7f:4f:8e:9e:36: 43:96:4a:d1:c0:db:ab:44:8c:93:54:96:cf:65:68:5d:15:9a: 31:ce:cc:dd:4e:47:d5:5e:2b:59:85:e9:38:54:15:95:81:86: 0a:6e:4b:3a:c9:76:c1:a2:62:0f:db:4a:9b:b9:17:e7:00:49: 93:67:b1:02:42:a4:7d:07:41:8f:85:91:fc:ce:23:51:90:a9: 57:0c:c9:36:8d:b1:b9:c1:9b:2c:da:a9:c3:f7:aa:e3:e6:3d: 59:89:ef:4c:0f:13:6d:b7:cc:a0:68:14:33:c6:6c:e4:91:80: 62:ee:ab:cf:3c:9b:75:6f:09:99:8d:ba:28:50:a6:19:ef:2d: 79:71:b5:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE97swrkfJy0RZlr60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YmE3ZDM3NGEtM2Y0Ny00ZmYwLTgzOTgtNWE0OTJhZDdmM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO7hf8Ax7zvlj/x/Wb524sXgSVszYmOQKesB ke7Wbg2pxNjIrntx4U8LYtMDRrvxHHmF3mJNtzAlJj/V9UPOP4ilq1dtQDXYxSsu scJoBwEAYMujugB4pMIliUjBWgh7Ev+HeHQphQm6fm1vTBjniHi5eI6JAdC7W0nc uPxWE4kXrIIaXgqKG38va/0L8kPsk0qEh6Cb8jvtUFWbLa1pbbkBqMA4KSkjyDEY cVrhmZQ//4nQk8l5DG5ZlIjnelNXAy8vsoSj8e6Pf3CYwpe/ESP4dBABu0+KA0CA AMTBWpSHP1TNgl4zC036hLowmFqRq0W4mpODz2R6FueGyJ5xXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOiLGkYx5V5FEgTyA5SbYLbEDxvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvNTkwYTk4OWQtMDAyNi0z YzhhLTk2NTEtNTQzNDllOTU4YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXjADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3n9TigQXJUUvPubMRgMxKSXl4EKNWW+306Rm4P3BdOAusBpd2hhY0 cD2rYFOt6Abw8MYckjoH90k/3Ona0vHOX/8r4j23TPpT1e+aCjz4BLFJdwuA/R7o e+89/ZROlSdYZw+JoR6kUWTjcP5yq5aMkraXI+EjAQIRf0+OnjZDlkrRwNurRIyT VJbPZWhdFZoxzszdTkfVXitZhek4VBWVgYYKbks6yXbBomIP20qbuRfnAEmTZ7EC QqR9B0GPhZH8ziNRkKlXDMk2jbG5wZss2qnD96rj5j1Zie9MDxNtt8ygaBQzxmzk kYBi7qvPPJt1bwmZjbooUKYZ7y15cbXT -----END CERTIFICATE-----Generated at Thu Oct 15 08:11:51 2026 by rpki-client