$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ef026883-ef75-38c5-acba-ea4ec3754770.roa File: ef026883-ef75-38c5-acba-ea4ec3754770.roa (raw, json) Hash identifier: EiJ6x0xNnbm+0oHA7aw66R5bcbFz4maZbVtjZ+xJjuI= Subject key identifier: F2:78:04:75:A2:92:7D:1A:58:1A:9E:A2:43:A1:EA:8D:E9:86:41:31 Certificate issuer: /CN=ba89a4c5-d662-4e9c-8467-d7f93161ba38 Certificate serial: 010D0C9F4328584F9BCDB548E129C94155F15EC0 Authority key identifier: 2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ef026883-ef75-38c5-acba-ea4ec3754770.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 30179 IP address blocks: 2602:f4e8::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:b5:48:e1:29:c9:41:55:f1:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba89a4c5-d662-4e9c-8467-d7f93161ba38 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=14df4679-b843-4d3a-ae72-cd3f5f926ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:3b:24:37:f4:34:f2:27:56:0d:9a:17:9c: cf:c2:a2:95:4d:7d:2e:71:42:46:52:b6:58:dc:03: 70:cd:87:e7:9b:60:04:bc:68:7c:3c:44:d7:6e:71: cd:21:5b:99:2d:b9:91:7e:f5:38:bb:11:1e:06:75: e8:21:75:99:39:69:59:3d:df:29:fb:15:f2:a8:7a: 93:49:94:1f:b8:1f:1b:8e:8d:ae:31:34:ac:90:58: b1:c9:75:fe:7f:f6:e3:d2:c7:01:66:1f:8c:94:dc: 0e:f4:9d:72:42:e4:bb:89:14:58:e2:1a:0a:78:5d: db:27:5e:e5:ab:d4:5f:06:5f:11:cb:e0:15:cf:36: 42:40:10:fa:43:c4:2c:59:45:f3:1f:db:7e:cf:54: ef:b7:8a:2b:19:2f:d9:a6:3b:01:37:c3:17:d3:91: 31:f8:37:b5:ea:6e:1b:6f:0c:a7:fd:07:a0:90:0c: 08:f1:04:78:72:cc:52:2b:54:ad:73:bb:ae:e5:7c: b8:0c:84:d6:dd:f5:c1:51:ed:34:d9:a4:39:9c:b6: 12:b9:e1:06:5d:55:c5:47:86:f9:07:14:75:c3:81: 59:27:ad:08:62:91:13:f1:f5:18:9b:a8:0b:a7:7b: fa:c7:7a:02:b9:7d:69:69:84:7c:71:f2:35:d9:cc: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:04:75:A2:92:7D:1A:58:1A:9E:A2:43:A1:EA:8D:E9:86:41:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ef026883-ef75-38c5-acba-ea4ec3754770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.crl X509v3 Authority Key Identifier: keyid:2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4e8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:12:fa:38:50:af:4e:09:c4:0f:04:dd:a7:1e:02:0f:b9:ae: 25:68:30:54:fd:f1:f4:b6:19:25:52:38:2a:ee:c1:ef:76:77: 21:e4:28:97:6d:fe:98:a7:62:f5:99:a8:56:99:06:74:f3:33: 3a:46:66:0d:d4:d8:5e:c3:c4:5e:80:d8:0f:3c:9a:6f:d3:3d: 01:07:4f:73:3c:e1:99:e7:f3:c2:4e:a0:76:32:77:ff:f7:fe: a4:61:3c:89:51:c0:c3:42:9f:7b:b6:2b:98:65:70:42:df:a6: 8a:8e:ff:d5:e6:72:89:fc:df:71:21:f6:59:33:95:63:32:b4: 46:1d:26:f2:6c:e0:cf:d3:c2:23:52:9c:76:72:9b:a7:f1:50: 5b:29:fe:f5:75:a5:fe:70:64:ed:8f:40:ff:3b:d2:44:4b:1e: dd:a4:a0:9a:37:3c:fe:d9:9e:9e:b7:26:97:e5:77:73:05:1f: dd:c9:ef:80:da:f4:32:d0:e2:a5:35:cd:6f:7a:40:9e:36:44: 95:8a:13:49:5b:3c:e2:1d:df:77:9a:d4:68:48:ae:0e:f2:e1: ed:ec:a0:c5:28:ff:64:93:5d:93:a3:86:60:4f:77:51:2c:41: 94:fc:3a:6b:41:04:06:50:8a:e8:cc:4f:7d:7f:d8:62:d8:1d: 72:f2:6d:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+bzbVI4SnJQVXxXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4OWE0YzUtZDY2Mi00ZTljLTg0NjctZDdmOTMxNjFi YTM4MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MTRkZjQ2NzktYjg0My00ZDNhLWFlNzItY2QzZjVmOTI2YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQg7JDf0NPInVg2aF5zPwqKVTX0ucUJGUrZY 3ANwzYfnm2AEvGh8PETXbnHNIVuZLbmRfvU4uxEeBnXoIXWZOWlZPd8p+xXyqHqT SZQfuB8bjo2uMTSskFixyXX+f/bj0scBZh+MlNwO9J1yQuS7iRRY4hoKeF3bJ17l q9RfBl8Ry+AVzzZCQBD6Q8QsWUXzH9t+z1Tvt4orGS/ZpjsBN8MX05Ex+De16m4b bwyn/QegkAwI8QR4csxSK1Stc7uu5Xy4DITW3fXBUe002aQ5nLYSueEGXVXFR4b5 BxR1w4FZJ60IYpET8fUYm6gLp3v6x3oCuX1paYR8cfI12cypGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPJ4BHWikn0aWBqeokOh6o3phkExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTg5 YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5MzE2MWJhMzgvZWYwMjY4ODMtZWY3NS0z OGM1LWFjYmEtZWE0ZWMzNzU0NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmE4OWE0YzUtZDY2Mi00ZTljLTg0 NjctZDdmOTMxNjFiYTM4L2JhODlhNGM1LWQ2NjItNGU5Yy04NDY3LWQ3ZjkzMTYx YmEzOC5jcmwwHwYDVR0jBBgwFoAUKo5ehjnJGhRV+/pjdD7TltmRWW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTg5YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5 MzE2MWJhMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL06AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHBL6OFCvTgnEDwTdpx4CD7muJWgwVP3x9LYZJVI4Ku7B73Z3IeQo l23+mKdi9ZmoVpkGdPMzOkZmDdTYXsPEXoDYDzyab9M9AQdPczzhmefzwk6gdjJ3 //f+pGE8iVHAw0Kfe7YrmGVwQt+mio7/1eZyifzfcSH2WTOVYzK0Rh0m8mzgz9PC I1KcdnKbp/FQWyn+9XWl/nBk7Y9A/zvSREse3aSgmjc8/tmenrcml+V3cwUf3cnv gNr0MtDipTXNb3pAnjZElYoTSVs84h3fd5rUaEiuDvLh7eygxSj/ZJNdk6OGYE93 USxBlPw6a0EEBlCK6MxPfX/YYtgdcvJtpQ== -----END CERTIFICATE-----Generated at Sun Nov 15 17:34:27 2026 by rpki-client