$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa File: 6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa (raw, json) Hash identifier: 8irxY97Iy69H0nXHfwRMpj22E1asY4WWmvOyOxsQJW0= Subject key identifier: 65:47:0E:41:00:8B:9C:7C:64:DC:8F:09:E6:B0:83:61:6D:DE:DC:96 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584FB7D66C29B879BFEB5F8FAD20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa Signing time: Tue 03 Nov 2026 14:00:13 +0000 ROA not before: Tue 03 Nov 2026 14:00:13 +0000 ROA not after: Mon 01 Feb 2027 14:00:13 +0000 asID: 30058 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:d6:6c:29:b8:79:bf:eb:5f:8f:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 3 14:00:13 2026 GMT Not After : Feb 1 14:00:13 2027 GMT Subject: CN=76ca1914-d01e-4818-b690-36e9c9185b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:00:0b:41:8e:a8:76:e9:33:1b:e5:be:f7: 92:d4:69:e5:fe:a9:98:bd:e4:41:a6:63:21:db:f4: a0:f3:05:f0:48:33:7b:90:73:71:f7:db:80:b2:a7: 91:b3:f5:93:e5:84:f2:10:81:09:03:b8:cf:7e:63: 8e:3d:b6:6f:0f:fa:d7:79:29:b8:df:ce:14:00:86: 83:81:73:e3:3b:9f:79:0f:34:d6:78:32:36:2f:57: 9b:fd:c8:c0:ba:e2:22:2a:fd:e6:6c:19:a7:a6:39: 5d:36:91:f2:6d:bb:a1:69:90:3c:42:3b:4c:ed:38: fa:3f:53:97:94:5c:42:e8:35:e7:d2:1b:72:c5:0a: 9b:4d:a3:5f:39:c0:e4:47:68:c5:74:8d:fb:ee:df: c5:16:5a:00:96:0d:c3:97:d0:b5:fe:12:93:38:cf: f8:fb:dd:db:cc:ab:03:7f:75:42:5c:9a:11:40:16: 11:9c:3f:0a:06:00:19:0a:d8:96:c1:81:c5:99:ec: 63:bb:a1:38:73:a1:b3:ca:92:09:c5:1c:70:27:3d: 26:74:ae:93:63:12:da:25:17:82:6a:5f:8f:8f:cd: a3:d6:3a:9e:8c:1f:e2:9a:cd:d3:5f:75:ab:a6:ac: 19:df:25:ed:76:09:f8:75:6f:aa:83:cc:aa:d3:ef: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:47:0E:41:00:8B:9C:7C:64:DC:8F:09:E6:B0:83:61:6D:DE:DC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fd:74:df:67:d3:2c:42:02:7c:46:b5:3b:97:3c:f6:c3:a4: cf:c6:cc:d2:d8:ab:32:78:fc:b9:a6:59:6e:f2:cc:01:38:9b: 1d:3c:8f:50:db:57:62:66:d0:0d:77:42:d8:c7:9a:3c:35:8e: c7:ae:b1:ec:59:b2:24:50:87:5f:ee:c8:05:83:5d:21:cd:a4: 17:46:bc:0a:67:50:4a:f4:76:e4:4f:7f:33:e7:61:71:a9:12: 13:fb:82:5a:87:be:56:f4:7d:99:c6:02:f1:24:d7:ed:b5:77: c7:4e:d9:69:7c:88:d4:55:ff:42:99:51:07:42:12:84:60:c5: 1a:e3:10:85:d2:eb:67:e0:57:55:cf:72:29:11:be:2e:78:1f: 80:5c:f3:17:13:22:a5:15:5b:02:22:ce:78:af:2c:75:df:da: 88:87:60:24:1d:d7:c7:d0:16:11:23:96:3e:c9:a6:3a:82:f6: d9:26:1b:0f:5a:10:c7:4c:9a:c5:10:7b:c9:12:33:d3:e3:3f: ca:aa:98:62:00:69:53:bc:9c:62:35:04:ee:61:47:ea:33:4f: 8d:12:91:4b:06:cd:51:75:b2:46:03:85:c0:bc:71:e9:6e:2f: 20:e6:cc:09:2c:b5:e8:76:27:81:89:9e:cf:3b:c2:64:d7:23: 2b:4e:c8:5a -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE+31mwpuHm/61+PrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MTEwMzE0MDAxM1oXDTI3MDIwMTE0MDAxM1owLzEtMCsGA1UEAxMk NzZjYTE5MTQtZDAxZS00ODE4LWI2OTAtMzZlOWM5MTg1YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosYAC0GOqHbpMxvlvveS1Gnl/qmYveRBpmMh 2/Sg8wXwSDN7kHNx99uAsqeRs/WT5YTyEIEJA7jPfmOOPbZvD/rXeSm4384UAIaD gXPjO595DzTWeDI2L1eb/cjAuuIiKv3mbBmnpjldNpHybbuhaZA8QjtM7Tj6P1OX lFxC6DXn0htyxQqbTaNfOcDkR2jFdI377t/FFloAlg3Dl9C1/hKTOM/4+93bzKsD f3VCXJoRQBYRnD8KBgAZCtiWwYHFmexju6E4c6GzypIJxRxwJz0mdK6TYxLaJReC al+Pj82j1jqejB/ims3TX3WrpqwZ3yXtdgn4dW+qg8yq0+9uvQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFGVHDkEAi5x8ZNyPCeawg2Ft3tyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyN2Q4ZDMtYzJhYS0z ZmNhLWI2MDUtZTQ2OWJjNTBiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBc/XTfZ9MsQgJ8RrU7lzz2w6TPxszS2KsyePy5pllu8swBOJsdPI9Q21diZtAN d0LYx5o8NY7HrrHsWbIkUIdf7sgFg10hzaQXRrwKZ1BK9HbkT38z52FxqRIT+4Ja h75W9H2ZxgLxJNfttXfHTtlpfIjUVf9CmVEHQhKEYMUa4xCF0utn4FdVz3IpEb4u eB+AXPMXEyKlFVsCIs54ryx139qIh2AkHdfH0BYRI5Y+yaY6gvbZJhsPWhDHTJrF EHvJEjPT4z/KqphiAGlTvJxiNQTuYUfqM0+NEpFLBs1RdbJGA4XAvHHpbi8g5swJ LLXodieBiZ7PO8Jk1yMrTsha -----END CERTIFICATE-----Generated at Thu Nov 5 08:22:28 2026 by rpki-client