$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa File: 25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json) Hash identifier: QWcIIkx9Kw9qWHHVtQC5wRSnwWZbIvXTVOdvDbkzVME= Subject key identifier: 21:EB:08:2A:7E:E5:AE:80:40:03:B6:FA:DF:80:1B:CF:03:47:D2:FC Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F4328584F82ADA95559FF4A73CCF15720 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 64289 IP address blocks: 2602:2ea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:a9:55:59:ff:4a:73:cc:f1:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=4e96fa65-4ae6-4a66-a9ca-d32a6346711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:34:31:47:e6:5f:14:c5:b1:50:64:46:73: 0c:cf:1e:df:65:12:06:b4:6f:3e:d7:d7:7b:b4:34: a6:d7:94:da:67:3d:47:f3:5a:1d:5a:64:4b:ce:ab: 38:33:81:43:ca:ae:6d:64:57:31:04:0d:c7:65:b0: a5:56:0d:8d:db:59:18:ac:b7:cc:4d:71:dd:bb:30: bd:a1:07:2e:94:94:4a:bc:77:c7:9e:de:fa:dd:9b: d8:90:cc:cb:f6:9c:52:e3:47:b7:c5:dd:31:98:81: a8:4b:c2:01:5e:b7:e5:8a:6c:9d:d8:90:4a:e8:d1: df:52:20:96:10:a8:d6:53:68:6b:4b:49:a7:c0:94: 6b:23:02:8a:d6:5f:26:f1:80:69:f3:09:3d:98:78: bc:b3:14:cc:94:01:fe:c4:d6:ae:7e:89:6d:b3:61: c2:4f:df:f6:7c:26:68:b9:bc:55:f8:59:ea:3f:bd: 6b:3a:9e:d3:cb:68:ae:36:c3:4c:43:3f:95:21:46: ae:e7:87:60:04:38:97:c2:32:b0:60:73:74:58:ce: 87:50:c0:cc:63:81:56:a8:9e:10:55:7e:8d:df:df: be:5b:49:93:bf:b2:4b:4e:36:17:3a:97:1d:35:7a: f7:86:45:15:ba:73:ee:e4:69:74:ce:8f:04:58:c9: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EB:08:2A:7E:E5:AE:80:40:03:B6:FA:DF:80:1B:CF:03:47:D2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fd:07:cb:78:f1:9a:db:24:b9:72:d2:b4:7b:03:e4:67:e4: 5b:82:23:5b:96:8f:70:41:ff:5e:d7:ee:41:1a:10:1f:93:e0: 3d:89:56:11:5b:3f:70:dd:f3:52:7e:0e:6e:68:1b:37:c7:1e: 69:b8:5a:d5:1d:27:eb:16:44:b8:62:5c:c1:5c:98:b4:bc:06: c1:f3:36:7f:db:ac:5d:89:7c:48:04:71:72:09:bd:c1:c8:9e: 3b:53:8c:3c:25:2c:dd:77:a5:d8:a3:70:17:5e:c3:4d:a2:23: e0:52:37:e4:c1:3d:d2:47:20:35:ee:18:5a:f6:23:e4:42:12: e7:80:18:b7:75:c1:c9:27:c9:c5:c5:b9:6b:08:fa:8f:ba:33: 62:59:01:cf:6e:75:d8:84:31:b4:c3:f1:e0:18:5b:a4:a0:c8: 5b:4e:70:28:67:ca:73:86:8d:0b:6b:41:c7:50:db:f5:0f:70: 85:b2:ef:11:e7:97:66:e9:c5:67:96:6f:50:92:15:9f:cb:da: ae:eb:1a:52:1b:25:b9:06:c8:c0:bd:d2:11:88:05:fd:53:9c: c0:bd:bf:9c:ed:77:5c:dd:70:ee:2e:08:f8:05:7e:45:67:f2: f4:f0:c5:4b:39:51:3c:b5:6f:e9:29:ed:e6:34:c5:aa:0d:08: e1:07:56:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+CralVWf9Kc8zxVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NGU5NmZhNjUtNGFlNi00YTY2LWE5Y2EtZDMyYTYzNDY3MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0I0MUfmXxTFsVBkRnMMzx7fZRIGtG8+19d7 tDSm15TaZz1H81odWmRLzqs4M4FDyq5tZFcxBA3HZbClVg2N21kYrLfMTXHduzC9 oQculJRKvHfHnt763ZvYkMzL9pxS40e3xd0xmIGoS8IBXrflimyd2JBK6NHfUiCW EKjWU2hrS0mnwJRrIwKK1l8m8YBp8wk9mHi8sxTMlAH+xNaufolts2HCT9/2fCZo ubxV+FnqP71rOp7Ty2iuNsNMQz+VIUau54dgBDiXwjKwYHN0WM6HUMDMY4FWqJ4Q VX6N39++W0mTv7JLTjYXOpcdNXr3hkUVunPu5Gl0zo8EWMm3cQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCHrCCp+5a6AQAO2+t+AG88DR9L8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMjVkYmNhNDItMWZkMC0z OGFiLTg1MmEtMmUyYjAxOTA5MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC6gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADf0Hy3jxmtskuXLStHsD5GfkW4IjW5aPcEH/XtfuQRoQH5PgPYlW EVs/cN3zUn4ObmgbN8ceabha1R0n6xZEuGJcwVyYtLwGwfM2f9usXYl8SARxcgm9 wcieO1OMPCUs3Xel2KNwF17DTaIj4FI35ME90kcgNe4YWvYj5EIS54AYt3XBySfJ xcW5awj6j7ozYlkBz2512IQxtMPx4BhbpKDIW05wKGfKc4aNC2tBx1Db9Q9whbLv EeeXZunFZ5ZvUJIVn8varusaUhsluQbIwL3SEYgF/VOcwL2/nO13XN1w7i4I+AV+ RWfy9PDFSzlRPLVv6Snt5jTFqg0I4QdWRQ== -----END CERTIFICATE-----Generated at Thu Nov 5 03:16:39 2026 by rpki-client