$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: BSBb6n2qcMxi/K7tt2kSA2F8vtYgXTQNkhRjOE2tO/E= Subject key identifier: ED:44:F2:91:62:38:A9:44:43:9E:1B:C5:12:1C:6C:A5:39:09:CC:C3 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584F119CF2997185C0E05E06A140 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f2:99:71:85:c0:e0:5e:06:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c0150b8b-0d0b-4f93-925f-14baada3f655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c4:09:c8:a8:60:f9:e3:bb:5a:12:e7:fe:17: 6c:ee:44:79:f6:62:f8:a5:b1:06:65:68:00:fb:7c: 81:46:30:60:82:04:1f:79:10:d0:09:9f:c9:99:f4: 7a:7a:0a:24:a1:66:85:24:c5:53:bd:50:c3:aa:05: ba:2d:7c:10:21:fe:ef:87:b0:e7:43:b4:79:3c:66: e3:dc:b8:5d:2c:ab:51:df:01:97:b4:1a:fe:8f:a5: b4:15:b3:c8:ba:e4:17:5c:fa:27:a6:72:61:af:43: d4:ba:97:73:3b:ba:30:7f:68:47:f5:5f:00:99:6a: fc:b1:b6:37:e6:b6:29:ee:45:03:a5:cb:7c:46:34: 6f:0f:63:ec:d8:5e:96:fb:e8:05:51:d4:4b:bb:50: a6:35:0a:44:d4:68:6f:58:e3:f5:af:b0:5b:71:6b: b6:8c:8d:3c:65:16:10:46:54:08:d3:6b:9f:48:6d: 0a:da:cd:f7:fb:da:da:c9:7f:2b:0b:b8:7d:36:34: fa:b6:ae:08:e7:40:18:f7:13:9e:d6:cb:63:16:c6: bc:13:0f:bb:b8:1b:cf:96:90:dd:4a:3a:32:2f:21: 0b:79:96:1d:3a:31:48:c8:af:fb:95:9d:8a:30:77: 66:45:5c:53:02:55:86:8e:8b:5f:99:89:fc:31:16: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:44:F2:91:62:38:A9:44:43:9E:1B:C5:12:1C:6C:A5:39:09:CC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:d1:8a:b4:0e:a4:60:8a:02:a0:f5:53:5a:93:b5:a1:03: 56:77:6c:59:07:ee:87:03:9a:98:d5:d5:05:9c:5d:cb:c1:ac: 5e:58:58:2b:67:3e:ea:ed:db:2f:b5:cb:9a:d5:58:95:ea:2b: ce:bc:6a:4b:25:a3:ec:c8:87:a0:3f:ea:37:fe:f4:8c:a8:97: f3:87:c8:4a:07:69:8a:d3:5d:04:bc:7d:b9:22:8f:43:88:6a: 6c:dc:8f:55:11:23:60:71:91:c9:30:07:16:71:f2:f8:3d:d4: f6:80:77:95:07:c7:b5:81:84:51:9f:6e:8f:0e:58:d6:e5:55: b9:35:28:a3:8d:aa:ea:69:2c:f6:6f:c0:2c:cd:2d:18:30:8e: 72:6f:2a:15:5f:3a:06:d8:f8:e3:ae:c4:bb:ea:b8:4f:66:15: 84:7a:d0:c2:aa:39:2e:56:3b:3d:df:03:83:27:f9:43:29:e2: ee:f6:3a:de:63:2d:2f:9e:19:82:8a:09:11:77:69:88:8d:3d: 54:7f:51:ee:c5:73:0a:6d:f4:1e:ba:49:d2:10:b6:71:a0:c7: 67:82:64:30:18:57:f9:e6:37:8d:26:1a:70:a0:39:fb:f2:f1: e9:a4:00:76:54:ac:f4:76:8f:1a:c2:4b:dc:45:00:24:3d:86: 33:ad:77:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnPKZcYXA4F4GoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzAxNTBiOGItMGQwYi00ZjkzLTkyNWYtMTRiYWFkYTNmNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8QJyKhg+eO7WhLn/hds7kR59mL4pbEGZWgA +3yBRjBgggQfeRDQCZ/JmfR6egokoWaFJMVTvVDDqgW6LXwQIf7vh7DnQ7R5PGbj 3LhdLKtR3wGXtBr+j6W0FbPIuuQXXPonpnJhr0PUupdzO7owf2hH9V8AmWr8sbY3 5rYp7kUDpct8RjRvD2Ps2F6W++gFUdRLu1CmNQpE1GhvWOP1r7BbcWu2jI08ZRYQ RlQI02ufSG0K2s33+9rayX8rC7h9NjT6tq4I50AY9xOe1stjFsa8Ew+7uBvPlpDd SjoyLyELeZYdOjFIyK/7lZ2KMHdmRVxTAlWGjotfmYn8MRaebwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1E8pFiOKlEQ54bxRIcbKU5CczDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYd0Yq0DqRgigKg9VNak7WhA1Z3bFkH7ocDmpjV1QWcXcvBrF5Y WCtnPurt2y+1y5rVWJXqK868akslo+zIh6A/6jf+9Iyol/OHyEoHaYrTXQS8fbki j0OIamzcj1URI2BxkckwBxZx8vg91PaAd5UHx7WBhFGfbo8OWNblVbk1KKONqupp LPZvwCzNLRgwjnJvKhVfOgbY+OOuxLvquE9mFYR60MKqOS5WOz3fA4Mn+UMp4u72 Ot5jLS+eGYKKCRF3aYiNPVR/Ue7Fcwpt9B66SdIQtnGgx2eCZDAYV/nmN40mGnCg Ofvy8emkAHZUrPR2jxrCS9xFACQ9hjOtd9k= -----END CERTIFICATE-----Generated at Mon Oct 12 00:29:59 2026 by rpki-client