$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa File: 3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa (raw, json) Hash identifier: pfcFZ1BWMs+w4CCUGtvuXjrSwfi8In2BryQ9QTS7OAk= Subject key identifier: 5F:22:65:DE:BF:24:8A:34:AB:B4:A5:8C:AB:8C:64:2D:11:06:30:DD Certificate issuer: /CN=f8e9b39d-7487-4785-9ac4-252370044d7a Certificate serial: 010D0C9F4328584FAB2883AF688B7BB5E50EEE40 Authority key identifier: 09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 55280 IP address blocks: 2602:f4d3:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:83:af:68:8b:7b:b5:e5:0e:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e9b39d-7487-4785-9ac4-252370044d7a Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=b7b319ff-18e1-4e4d-b093-329ccb2e68a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:a9:88:39:b9:4f:e2:5b:67:60:2c:41:74: f3:2b:17:a3:f9:0d:d9:26:91:7e:43:3f:d6:84:d6: 92:59:37:ff:61:63:05:c8:96:f4:04:5b:b4:b1:5e: c1:a5:b7:53:f4:ac:b2:a7:3f:ea:d8:c7:98:aa:c4: 1b:95:39:8a:4f:0d:d3:2f:71:77:d5:68:0c:71:f9: e3:fa:cb:7e:12:35:75:0d:67:74:5f:e5:32:38:84: 6b:85:85:7c:8c:4c:80:be:aa:a2:10:f0:58:47:7b: 8a:ab:04:0a:2d:0d:23:58:28:5c:8b:1b:08:55:fa: 53:d2:e7:b0:f1:b7:80:b2:8b:95:96:ef:b5:2c:17: 55:50:78:36:2b:9f:82:72:8d:a2:76:1e:d0:70:6e: 4c:ad:29:0b:a2:08:61:45:db:18:75:dc:fe:df:25: 06:e8:4e:d8:72:12:e4:92:a0:f1:ef:0e:08:ae:f3: 46:59:a3:27:2f:c3:8b:56:89:6d:8e:9a:47:2b:6f: 60:97:0d:6d:a7:b5:1c:13:47:9e:ca:92:0e:79:81: 9a:fa:96:64:78:f6:16:04:ff:ad:d5:10:2e:a3:1c: 95:03:ca:9d:81:bd:ad:96:c0:d0:d4:2e:94:7e:cf: b7:ab:a2:b5:86:18:4d:13:f6:e5:89:17:e7:b4:81: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:22:65:DE:BF:24:8A:34:AB:B4:A5:8C:AB:8C:64:2D:11:06:30:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.crl X509v3 Authority Key Identifier: keyid:09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4d3:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:b7:5f:bc:b0:0a:e7:23:91:00:36:cb:d3:e5:7e:0f:8a: 52:33:50:62:46:76:56:67:3b:53:6d:8a:85:5f:33:67:e4:50: c2:d6:8a:3b:cf:a5:c6:66:6a:e6:5e:0a:ca:46:18:e0:ba:f0: 20:71:11:da:41:8e:a9:0b:44:e4:f6:bc:a0:7f:53:04:bc:56: 48:a4:b4:66:bc:d5:7b:02:d1:ca:e9:d7:3f:67:80:ec:4e:55: 98:a1:c9:52:da:3a:41:5b:bc:3f:32:75:6b:f3:32:cf:37:fe: f1:fa:78:08:b9:8b:32:47:c3:14:72:3a:13:68:74:84:cd:d2: ca:5f:70:c5:76:fd:ca:3a:a4:76:28:d9:3a:d0:cd:6e:51:8e: 52:90:f6:ff:c4:9a:15:7f:88:a7:a0:c1:f0:7c:a3:53:ba:73: 5d:0f:d2:42:87:59:32:b7:6d:f9:11:7e:b0:8e:89:1e:f7:c6: e4:f2:2f:3a:eb:24:d8:10:5a:61:d6:c2:06:2b:44:6e:6a:d4: 92:4f:60:61:4d:3c:67:be:f6:29:0f:e3:18:26:9a:67:9c:ae: 5d:53:38:f3:ad:8c:6d:97:6b:be:06:fd:bd:3d:48:be:e4:0a: 86:d1:bd:f3:51:36:ff:cc:c8:23:7b:03:a8:f8:69:19:0c:96: 72:76:24:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+rKIOvaIt7teUO7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlOWIzOWQtNzQ4Ny00Nzg1LTlhYzQtMjUyMzcwMDQ0 ZDdhMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YjdiMzE5ZmYtMThlMS00ZTRkLWIwOTMtMzI5Y2NiMmU2OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5apiDm5T+JbZ2AsQXTzKxej+Q3ZJpF+Qz/W hNaSWTf/YWMFyJb0BFu0sV7BpbdT9Kyypz/q2MeYqsQblTmKTw3TL3F31WgMcfnj +st+EjV1DWd0X+UyOIRrhYV8jEyAvqqiEPBYR3uKqwQKLQ0jWChcixsIVfpT0uew 8beAsouVlu+1LBdVUHg2K5+Cco2idh7QcG5MrSkLoghhRdsYddz+3yUG6E7YchLk kqDx7w4IrvNGWaMnL8OLVoltjppHK29glw1tp7UcE0eeypIOeYGa+pZkePYWBP+t 1RAuoxyVA8qdgb2tlsDQ1C6Ufs+3q6K1hhhNE/bliRfntIE0fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8iZd6/JIo0q7SljKuMZC0RBjDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGU5 YjM5ZC03NDg3LTQ3ODUtOWFjNC0yNTIzNzAwNDRkN2EvM2Q1ZTVjZjUtZTBlNy0z NzA4LTk5OTgtYjZiYWZiOTc2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjhlOWIzOWQtNzQ4Ny00Nzg1LTlh YzQtMjUyMzcwMDQ0ZDdhL2Y4ZTliMzlkLTc0ODctNDc4NS05YWM0LTI1MjM3MDA0 NGQ3YS5jcmwwHwYDVR0jBBgwFoAUCW7D123SaylNtu/kyrshO5OX1bswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGU5YjM5ZC03NDg3LTQ3ODUtOWFjNC0yNTIz NzAwNDRkN2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL00wAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLnt1+8sArnI5EANsvT5X4PilIzUGJGdlZnO1NtioVfM2fkUMLW ijvPpcZmauZeCspGGOC68CBxEdpBjqkLROT2vKB/UwS8VkiktGa81XsC0crp1z9n gOxOVZihyVLaOkFbvD8ydWvzMs83/vH6eAi5izJHwxRyOhNodITN0spfcMV2/co6 pHYo2TrQzW5RjlKQ9v/EmhV/iKegwfB8o1O6c10P0kKHWTK3bfkRfrCOiR73xuTy LzrrJNgQWmHWwgYrRG5q1JJPYGFNPGe+9ikP4xgmmmecrl1TOPOtjG2Xa74G/b09 SL7kCobRvfNRNv/MyCN7A6j4aRkMlnJ2JFE= -----END CERTIFICATE-----Generated at Thu Nov 5 14:43:26 2026 by rpki-client