$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa File: 1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa (raw, json) Hash identifier: YTnNAiqqBicUU8MJOgGZHEzWhGq3bYyEAzGkFHadf3o= Subject key identifier: 20:58:00:CF:E9:C7:D3:7A:EB:63:58:3A:0E:5A:6C:7F:13:9A:20:70 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584ECBD1EB1BF9A86EF3099FC9E0 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 138915 IP address blocks: 2602:fa80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:eb:1b:f9:a8:6e:f3:09:9f:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=c67e162d-cad9-45ae-9b80-456d1132cd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:54:bf:f0:fc:84:b8:9f:8b:0a:66:e3:7a: 99:f0:48:69:e6:31:66:53:a5:39:8f:19:d8:9c:9b: 79:83:7f:16:bf:72:20:df:25:b9:bf:35:f6:dc:3b: f4:6c:4d:0c:33:c0:26:ed:43:75:83:c1:1f:c7:51: dc:c2:09:95:3f:4e:6a:54:f2:12:23:a0:2e:e1:35: 1d:57:7b:f3:3a:2d:3e:80:5f:62:7d:7a:64:49:ab: 72:27:f8:3a:ff:c4:82:63:c3:da:54:6b:c6:67:76: c0:c8:eb:b1:3d:17:c2:22:b6:29:ad:d8:c2:06:15: 9b:99:2c:79:ab:a2:e5:3f:ac:ff:ff:ad:70:27:72: c3:b5:2a:44:15:8e:a0:c3:f4:a4:2c:c0:e2:1c:0e: 90:30:13:d8:06:3f:45:b5:c2:09:f7:7b:b0:4b:14: e5:2d:1f:1f:37:26:e6:14:42:a7:2d:26:61:ae:26: 46:52:b1:38:51:31:2f:7e:df:4a:15:0d:4d:fa:97: b5:4b:d9:ef:ad:f3:ee:c2:29:73:a5:74:e4:4b:49: ba:b2:13:6f:37:a7:27:13:78:93:ef:60:a9:52:be: ca:db:0e:a2:1d:bd:b0:61:cb:e1:f6:3e:52:96:6b: a1:d0:f9:16:7b:f8:ef:87:b9:66:09:72:66:e6:8f: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:58:00:CF:E9:C7:D3:7A:EB:63:58:3A:0E:5A:6C:7F:13:9A:20:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/1cecd10c-e687-3ea3-9c49-6f8a1b5321fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:53:ad:03:53:19:4d:e5:65:28:03:34:ff:44:e7:4e:c3:b5: 0c:cf:2c:69:f0:f3:8f:46:35:12:97:8f:b1:89:be:6c:53:36: 81:ee:b8:99:57:a8:b8:a4:dd:cb:a1:fc:30:16:bc:f1:00:8c: 5c:63:4f:67:94:4a:9d:a9:1a:34:5c:05:6c:ab:a7:c2:72:29: bc:a4:7d:50:c1:30:ca:5c:79:44:fd:d7:10:99:c9:85:fe:8d: c8:dd:59:f6:29:52:c6:6e:48:48:d8:79:24:72:d9:6f:c6:18: 55:90:60:72:cc:74:1c:de:34:61:02:a2:db:5e:85:95:a9:68: 0c:25:a3:92:9d:07:86:66:1c:57:22:40:60:d0:63:75:02:45: c2:d1:10:37:bb:16:25:03:dd:98:ee:c4:cf:25:2c:f2:bc:0c: 66:13:35:7b:2e:7f:16:01:8b:49:8a:3a:e2:c2:05:45:9f:12: 98:bf:01:eb:93:77:07:b0:6e:a0:ad:1d:52:9f:1d:75:45:fd: e0:bf:62:8a:b8:0c:6b:03:23:82:63:9c:a3:38:8b:2b:47:3b: d5:a2:fd:48:25:7a:ee:76:a1:b9:76:4f:1b:d8:ac:20:8f:00: b2:19:a6:fe:af:68:ec:e7:a5:22:fd:fa:cd:25:14:13:25:a8: 29:30:ba:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7L0esb+ahu8wmfyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YzY3ZTE2MmQtY2FkOS00NWFlLTliODAtNDU2ZDExMzJjZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxUv/D8hLifiwpm43qZ8Ehp5jFmU6U5jxnY nJt5g38Wv3Ig3yW5vzX23Dv0bE0MM8Am7UN1g8Efx1HcwgmVP05qVPISI6Au4TUd V3vzOi0+gF9ifXpkSatyJ/g6/8SCY8PaVGvGZ3bAyOuxPRfCIrYprdjCBhWbmSx5 q6LlP6z//61wJ3LDtSpEFY6gw/SkLMDiHA6QMBPYBj9FtcIJ93uwSxTlLR8fNybm FEKnLSZhriZGUrE4UTEvft9KFQ1N+pe1S9nvrfPuwilzpXTkS0m6shNvN6cnE3iT 72CpUr7K2w6iHb2wYcvh9j5Slmuh0PkWe/jvh7lmCXJm5o/BjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBYAM/px9N662NYOg5abH8TmiBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvMWNlY2QxMGMtZTY4Ny0z ZWEzLTljNDktNmY4YTFiNTMyMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9TrQNTGU3lZSgDNP9E507DtQzPLGnw849GNRKXj7GJvmxTNoHu uJlXqLik3cuh/DAWvPEAjFxjT2eUSp2pGjRcBWyrp8JyKbykfVDBMMpceUT91xCZ yYX+jcjdWfYpUsZuSEjYeSRy2W/GGFWQYHLMdBzeNGECottehZWpaAwlo5KdB4Zm HFciQGDQY3UCRcLREDe7FiUD3ZjuxM8lLPK8DGYTNXsufxYBi0mKOuLCBUWfEpi/ AeuTdwewbqCtHVKfHXVF/eC/Yoq4DGsDI4JjnKM4iytHO9Wi/Ugleu52obl2TxvY rCCPALIZpv6vaOznpSL9+s0lFBMlqCkwusE= -----END CERTIFICATE-----Generated at Sun Sep 20 16:24:46 2026 by rpki-client