$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/43c859c3-72ac-3d97-a856-dcbadf464ab1.roa File: 43c859c3-72ac-3d97-a856-dcbadf464ab1.roa (raw, json) Hash identifier: 2EPeJs/3HC9cMV8Lsgih4y1tqwkUc4nqMd0JQQ83x2w= Subject key identifier: E3:C0:19:E2:DB:D0:22:8D:5D:E6:F6:06:4D:D1:0F:D4:09:FC:83:79 Certificate issuer: /CN=eba568bc-caf4-4df4-8adb-9955051bdf42 Certificate serial: 010D0C9F4328584F7DC7E4528D16367044C71FC0 Authority key identifier: 30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/43c859c3-72ac-3d97-a856-dcbadf464ab1.roa Signing time: Tue 13 Oct 2026 18:54:15 +0000 ROA not before: Tue 13 Oct 2026 18:54:15 +0000 ROA not after: Mon 11 Jan 2027 19:54:15 +0000 asID: 26968 IP address blocks: 2602:ff93::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:c7:e4:52:8d:16:36:70:44:c7:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba568bc-caf4-4df4-8adb-9955051bdf42 Validity Not Before: Oct 13 18:54:15 2026 GMT Not After : Jan 11 19:54:15 2027 GMT Subject: CN=b5de9ca5-386c-44bc-8083-a76fc1700eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:35:86:6b:b2:28:c3:fc:37:ba:ee:eb:73: e1:62:71:72:4c:41:fe:09:79:49:a1:b9:b7:34:9b: b1:25:c6:08:4d:3a:aa:b2:82:9f:60:b0:c4:c9:a1: b3:d1:90:0a:a7:5e:3e:45:e5:7a:7a:a1:bf:0d:c2: 53:df:1d:cf:1d:40:16:04:16:0a:3f:62:e9:fd:64: 2b:75:9f:52:d6:e6:02:73:ce:bb:42:73:91:c7:7c: e4:89:1b:a2:fb:7b:cb:ba:8f:05:e4:00:02:ad:c3: 2e:42:a9:e7:48:16:a0:38:74:eb:3e:05:20:e4:b6: 32:03:d3:4a:d7:80:3f:47:01:38:63:24:a5:e0:90: 01:eb:76:78:2f:ea:fe:51:8e:b6:f5:62:97:38:c8: 06:3f:ae:52:25:a8:1d:e2:55:ba:78:5b:1d:13:06: e4:e2:f8:55:a2:05:79:74:46:98:ca:d5:6d:f5:6b: 80:05:df:1e:77:9b:69:cd:b6:34:f1:20:29:07:90: ab:c8:b9:22:d8:50:79:81:6f:58:d6:c6:6f:29:f3: bf:f1:67:9d:a4:56:b4:41:e7:66:5e:77:59:b6:51: 31:b9:f7:57:02:cf:35:54:8c:db:bc:61:aa:ab:d7: 77:d8:97:01:1e:b2:3b:97:8f:8c:3e:87:74:f3:3b: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C0:19:E2:DB:D0:22:8D:5D:E6:F6:06:4D:D1:0F:D4:09:FC:83:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/43c859c3-72ac-3d97-a856-dcbadf464ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42/eba568bc-caf4-4df4-8adb-9955051bdf42.crl X509v3 Authority Key Identifier: keyid:30:DE:CF:37:91:F5:66:2C:2A:08:8F:87:CB:11:5B:65:FB:F6:5C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/eba568bc-caf4-4df4-8adb-9955051bdf42.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff93::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:31:c5:d7:c6:01:29:52:7b:8c:0a:e8:27:35:d3:cc:57:11: b7:62:27:c9:6b:36:6d:f6:b5:77:86:fd:7a:c3:f7:42:52:0f: 98:23:e3:e2:0e:29:4f:0c:ef:45:ec:1d:78:b0:3a:4e:95:79: 70:48:71:9f:2f:b8:f6:fd:48:14:ee:13:0a:7d:19:45:dd:0a: 36:5e:a8:a9:bb:06:da:61:cd:98:15:fa:a2:e4:88:95:c3:c2: 3f:a8:88:21:67:c9:e0:4f:fc:37:00:4a:a5:6a:c9:cc:f4:9e: a7:2a:ab:62:90:8c:9a:76:ed:b6:34:4d:d1:55:69:7a:32:fd: 72:c2:0e:eb:95:6d:25:7d:02:16:3d:ed:1b:b2:bf:e8:25:f9: e0:fc:f3:35:c6:b8:d6:87:8e:c7:2d:8e:1e:88:e7:4c:2b:20: a6:f2:4b:0e:cd:05:9a:77:6f:51:6e:8b:ee:91:da:bf:90:3d: ee:9d:0d:09:dd:c8:56:eb:b8:44:2b:c9:92:8d:3a:0b:8c:86: 1c:e3:49:ec:3e:2c:29:38:76:fa:93:af:79:88:c7:a3:7a:2b: 5a:d9:bb:8c:0e:08:d3:24:75:46:79:e9:d2:5e:e5:2a:45:2f: 67:97:15:ab:56:89:ed:96:c9:1d:e3:da:06:ea:f9:65:b8:8c: 8c:a3:07:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE99x+RSjRY2cETHH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJhNTY4YmMtY2FmNC00ZGY0LThhZGItOTk1NTA1MWJk ZjQyMB4XDTI2MTAxMzE4NTQxNVoXDTI3MDExMTE5NTQxNVowLzEtMCsGA1UEAxMk YjVkZTljYTUtMzg2Yy00NGJjLTgwODMtYTc2ZmMxNzAwZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Y1hmuyKMP8N7ru63PhYnFyTEH+CXlJobm3 NJuxJcYITTqqsoKfYLDEyaGz0ZAKp14+ReV6eqG/DcJT3x3PHUAWBBYKP2Lp/WQr dZ9S1uYCc867QnORx3zkiRui+3vLuo8F5AACrcMuQqnnSBagOHTrPgUg5LYyA9NK 14A/RwE4YySl4JAB63Z4L+r+UY629WKXOMgGP65SJagd4lW6eFsdEwbk4vhVogV5 dEaYytVt9WuABd8ed5tpzbY08SApB5CryLki2FB5gW9Y1sZvKfO/8WedpFa0Qedm XndZtlExufdXAs81VIzbvGGqq9d32JcBHrI7l4+MPod08zuQkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOPAGeLb0CKNXeb2Bk3RD9QJ/IN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9lYmE1 NjhiYy1jYWY0LTRkZjQtOGFkYi05OTU1MDUxYmRmNDIvNDNjODU5YzMtNzJhYy0z ZDk3LWE4NTYtZGNiYWRmNDY0YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZWJhNTY4YmMtY2FmNC00ZGY0LThh ZGItOTk1NTA1MWJkZjQyL2ViYTU2OGJjLWNhZjQtNGRmNC04YWRiLTk5NTUwNTFi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUMN7PN5H1ZiwqCI+HyxFbZfv2XPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9lYmE1NjhiYy1jYWY0LTRkZjQtOGFkYi05OTU1 MDUxYmRmNDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL/kzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJMcXXxgEpUnuMCugnNdPMVxG3YifJazZt9rV3hv16w/dCUg+YI+Pi DilPDO9F7B14sDpOlXlwSHGfL7j2/UgU7hMKfRlF3Qo2XqipuwbaYc2YFfqi5IiV w8I/qIghZ8ngT/w3AEqlasnM9J6nKqtikIyadu22NE3RVWl6Mv1ywg7rlW0lfQIW Pe0bsr/oJfng/PM1xrjWh47HLY4eiOdMKyCm8ksOzQWad29Rbovukdq/kD3unQ0J 3chW67hEK8mSjToLjIYc40nsPiwpOHb6k695iMejeita2buMDgjTJHVGeenSXuUq RS9nlxWrVontlskd49oG6vlluIyMowdQ -----END CERTIFICATE-----Generated at Wed Oct 14 03:13:14 2026 by rpki-client