$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa File: 9f200902-5aae-3a68-a97d-994b8717ca9d.roa (raw, json) Hash identifier: MNQdWdpSry8r+6WGtmD1FJ13iYEbyCCSTYjzUqdJc2c= Subject key identifier: C5:76:71:01:BD:E3:D9:A7:0D:BD:9B:0B:45:9A:19:BD:17:14:E3:25 Certificate issuer: /CN=421c0ace-1d1f-41d4-99d6-d72badfabf4a Certificate serial: 010D0C9F4328584FB0BDDC2A4122D6CBE588B780 Authority key identifier: 45:54:32:38:26:41:F3:8D:F8:F8:70:51:87:DB:C9:2B:C4:95:66:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 17267 IP address blocks: 2602:f2f6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:dc:2a:41:22:d6:cb:e5:88:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421c0ace-1d1f-41d4-99d6-d72badfabf4a Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=164c439e-8426-4290-ace2-c9b23285c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:44:f5:7b:3b:5d:12:08:2e:f4:4b:cb:4e: cc:2b:3f:97:5e:86:e5:d1:67:6a:8c:3c:e4:a1:9b: 58:82:b7:c3:84:a3:65:fa:a5:d1:21:e9:da:53:95: a5:a7:93:9c:bd:e3:71:0b:e0:ed:4f:c9:87:af:e4: bc:d6:21:57:41:55:6e:e9:f0:df:b4:b8:ae:d0:72: 4f:67:9d:38:32:3d:69:6a:c9:36:47:57:5e:de:b4: 03:a3:a5:8c:62:0d:96:27:ac:5a:77:b7:01:83:11: 33:e0:08:d6:ff:d3:b3:35:c7:06:26:7a:70:24:d2: 2a:37:cc:6c:62:73:38:8c:1b:2c:79:13:01:1b:15: 8b:9a:48:2b:b1:e0:fc:40:2a:9f:e7:da:b5:8f:e2: 89:89:36:f4:78:c8:d3:f9:05:9a:73:69:fa:76:dd: 13:4d:2e:a2:d4:44:98:08:64:72:d5:d9:db:02:7e: 87:33:a8:38:c6:93:ac:61:62:cd:f8:f0:0d:51:8d: a5:f9:0c:68:31:e5:ec:dc:f5:de:47:96:87:50:dc: 7a:35:55:29:6f:0c:88:3b:9d:ef:15:9d:4a:5e:a7: 0d:14:a9:dd:42:40:14:60:f4:57:2f:39:8c:28:7a: 7a:47:96:16:d1:08:12:ec:6f:e4:c5:cc:ce:c9:7e: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:76:71:01:BD:E3:D9:A7:0D:BD:9B:0B:45:9A:19:BD:17:14:E3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/9f200902-5aae-3a68-a97d-994b8717ca9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a/421c0ace-1d1f-41d4-99d6-d72badfabf4a.crl X509v3 Authority Key Identifier: keyid:45:54:32:38:26:41:F3:8D:F8:F8:70:51:87:DB:C9:2B:C4:95:66:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/421c0ace-1d1f-41d4-99d6-d72badfabf4a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2f6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:27:5e:22:17:0b:df:2d:82:c9:f4:a7:c9:b1:65:f3:62:33: 8d:1d:65:a7:be:c7:3b:ff:20:4d:f7:55:9e:e8:74:48:90:0c: 0e:08:23:12:fb:2e:23:ba:e2:e1:e1:3b:a0:ab:30:e2:41:02: b3:40:46:80:16:17:73:ef:d0:6e:39:b4:e7:52:c6:47:01:4c: 2b:57:d9:78:07:24:e2:94:12:9a:5a:c9:c5:0e:a7:fc:54:fb: d6:30:db:63:18:2d:a7:39:f0:91:bc:f7:bf:1c:ca:16:59:cb: b7:9f:1e:07:a3:9f:5c:26:5b:3d:6b:0d:a2:f6:6a:0d:c2:ea: 85:dd:e8:be:ba:d4:ee:c5:8d:9e:e9:7d:11:8f:c5:72:11:92: 5b:3c:d1:b5:2a:d2:8b:c0:fb:89:e0:90:d2:33:a4:c5:ae:f9: 1b:49:76:a7:ff:61:ab:48:cc:1f:59:c4:bd:26:e1:6f:33:6d: f0:6f:c8:99:58:ba:d1:bc:40:d1:d5:25:1c:44:f5:e5:76:17: 8f:4e:5e:ea:b2:bd:0f:09:05:a9:be:cc:ce:e0:1f:bc:3f:ca: 22:fb:40:ee:1a:63:f8:61:2c:db:7f:c1:c5:95:f5:74:9b:64: 04:cf:13:fe:3b:c8:a0:49:e6:f9:29:7c:6d:0d:bb:d1:99:42: b0:ae:c6:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+wvdwqQSLWy+WIt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxYzBhY2UtMWQxZi00MWQ0LTk5ZDYtZDcyYmFkZmFi ZjRhMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MTY0YzQzOWUtODQyNi00MjkwLWFjZTItYzliMjMyODVjMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0hE9Xs7XRIILvRLy07MKz+XXobl0WdqjDzk oZtYgrfDhKNl+qXRIenaU5Wlp5OcveNxC+DtT8mHr+S81iFXQVVu6fDftLiu0HJP Z504Mj1pask2R1de3rQDo6WMYg2WJ6xad7cBgxEz4AjW/9OzNccGJnpwJNIqN8xs YnM4jBsseRMBGxWLmkgrseD8QCqf59q1j+KJiTb0eMjT+QWac2n6dt0TTS6i1ESY CGRy1dnbAn6HM6g4xpOsYWLN+PANUY2l+QxoMeXs3PXeR5aHUNx6NVUpbwyIO53v FZ1KXqcNFKndQkAUYPRXLzmMKHp6R5YW0QgS7G/kxczOyX6FDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMV2cQG949mnDb2bC0WaGb0XFOMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80MjFj MGFjZS0xZDFmLTQxZDQtOTlkNi1kNzJiYWRmYWJmNGEvOWYyMDA5MDItNWFhZS0z YTY4LWE5N2QtOTk0Yjg3MTdjYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDIxYzBhY2UtMWQxZi00MWQ0LTk5 ZDYtZDcyYmFkZmFiZjRhLzQyMWMwYWNlLTFkMWYtNDFkNC05OWQ2LWQ3MmJhZGZh YmY0YS5jcmwwHwYDVR0jBBgwFoAURVQyOCZB8434+HBRh9vJK8SVZnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80MjFjMGFjZS0xZDFmLTQxZDQtOTlkNi1kNzJi YWRmYWJmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLy9gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACideIhcL3y2CyfSnybFl82IzjR1lp77HO/8gTfdVnuh0SJAMDggj EvsuI7ri4eE7oKsw4kECs0BGgBYXc+/Qbjm051LGRwFMK1fZeAck4pQSmlrJxQ6n /FT71jDbYxgtpznwkbz3vxzKFlnLt58eB6OfXCZbPWsNovZqDcLqhd3ovrrU7sWN nul9EY/FchGSWzzRtSrSi8D7ieCQ0jOkxa75G0l2p/9hq0jMH1nEvSbhbzNt8G/I mVi60bxA0dUlHET15XYXj05e6rK9DwkFqb7MzuAfvD/KIvtA7hpj+GEs23/BxZX1 dJtkBM8T/jvIoEnm+Sl8bQ270ZlCsK7Glw== -----END CERTIFICATE-----Generated at Thu Nov 5 05:20:36 2026 by rpki-client