$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa File: 8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa (raw, json) Hash identifier: uRRBPbEdx9fRWVqYRwwoy+IaMyrZ7Lb9btegjfe+Gn8= Subject key identifier: 68:D8:02:D8:47:88:94:D7:B2:6B:C0:A4:6A:E6:C4:39:86:0C:94:73 Certificate issuer: /CN=2b41a59d-bac0-456f-82a5-a12979543eff Certificate serial: 010D0C9F4328584F89A84A1495E4DDEFA7E8C780 Authority key identifier: 72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 20473 IP address blocks: 2602:f4fb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:4a:14:95:e4:dd:ef:a7:e8:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b41a59d-bac0-456f-82a5-a12979543eff Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=f7cddc7d-78d0-478f-a1af-bcd455d0b263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:1b:3a:6d:44:9c:b4:b9:13:d6:28:a0:45: 32:60:4e:e8:89:37:65:37:59:9c:ef:56:ba:64:f6: 06:d6:8a:9a:fe:bd:a3:b9:8b:22:0f:32:ee:f9:17: a7:6a:bc:01:95:db:49:88:2d:c5:86:bd:ca:03:ed: f5:1b:74:c2:0b:df:d6:82:ec:42:74:a4:a1:95:fd: 14:ed:88:e6:cb:fe:7d:e9:40:93:bc:96:1c:47:fd: 43:3e:d4:70:b3:5b:5a:6b:ac:df:e4:91:b9:d0:62: f9:e6:ad:34:4e:01:f9:11:93:8c:14:46:5a:28:ee: 4e:2d:b2:dc:1e:8f:15:8c:3e:54:74:a2:f1:20:25: c3:bc:a3:a5:aa:cb:5b:a4:20:b4:f4:86:45:d5:89: a5:3b:1e:f2:50:c2:e8:88:2c:1c:48:65:f4:67:62: fa:e4:43:29:01:4e:5e:17:21:7a:d5:a5:54:17:75: a2:ce:c7:87:57:30:2f:8e:9f:d9:de:c0:88:f7:6f: 9d:83:d2:be:fa:33:b3:93:cd:df:38:3b:d1:63:30: 7d:a5:47:4a:b9:7a:10:91:cc:c8:d0:ea:fe:3b:b4: d5:e2:a9:3a:8a:a1:86:e4:1e:09:ba:90:10:ee:b5: d8:db:12:8b:dc:f2:e7:d9:e6:fd:1a:f0:1c:47:34: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:02:D8:47:88:94:D7:B2:6B:C0:A4:6A:E6:C4:39:86:0C:94:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl X509v3 Authority Key Identifier: keyid:72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4fb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b3:9d:db:ad:43:3e:f9:fc:29:c4:e5:56:09:66:28:f4:a1: 96:be:f4:91:3c:47:c0:ec:f4:e1:45:d4:56:98:91:ea:f8:bc: 24:04:35:11:84:c2:2d:26:9b:5b:63:ce:59:90:af:80:98:42: 71:5d:8d:8e:1f:6a:5c:c0:e8:ff:ea:8e:29:39:72:fe:38:14: 85:09:85:3f:1d:2b:1c:37:e5:9f:bd:c6:a0:3d:12:82:38:a0: 3e:3b:4b:de:6e:10:23:92:1e:9d:f0:19:e1:97:a0:46:26:e1: 06:65:78:b9:85:83:24:1a:25:61:90:18:bb:9d:5c:c4:74:77: e2:f0:1f:aa:32:23:30:22:af:22:00:71:76:81:47:aa:7d:93: 68:64:fc:8c:61:7a:7e:9f:3c:3c:97:35:d0:16:ca:96:00:82: 7c:3e:e0:55:88:ab:cb:1d:09:8a:65:6b:82:d6:43:9c:37:a9: 95:49:71:da:ec:4a:ee:40:68:6a:24:b2:99:ea:6e:a5:52:88: dc:38:c3:08:69:38:30:93:0f:b6:5a:e5:bc:92:0e:5a:51:5f: 16:7c:9c:88:8f:9d:cb:e7:2b:83:df:c7:52:48:ec:73:7b:52: 2b:44:ed:41:dc:f2:02:3c:6d:4a:f9:cb:45:c8:6b:9a:5a:76: d1:27:b3:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+JqEoUleTd76fox4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI0MWE1OWQtYmFjMC00NTZmLTgyYTUtYTEyOTc5NTQz ZWZmMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZjdjZGRjN2QtNzhkMC00NzhmLWExYWYtYmNkNDU1ZDBiMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHwbOm1EnLS5E9YooEUyYE7oiTdlN1mc71a6 ZPYG1oqa/r2juYsiDzLu+RenarwBldtJiC3Fhr3KA+31G3TCC9/WguxCdKShlf0U 7Yjmy/596UCTvJYcR/1DPtRws1taa6zf5JG50GL55q00TgH5EZOMFEZaKO5OLbLc Ho8VjD5UdKLxICXDvKOlqstbpCC09IZF1YmlOx7yUMLoiCwcSGX0Z2L65EMpAU5e FyF61aVUF3WizseHVzAvjp/Z3sCI92+dg9K++jOzk83fODvRYzB9pUdKuXoQkczI 0Or+O7TV4qk6iqGG5B4JupAQ7rXY2xKL3PLn2eb9GvAcRzSrXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGjYAthHiJTXsmvApGrmxDmGDJRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjQx YTU5ZC1iYWMwLTQ1NmYtODJhNS1hMTI5Nzk1NDNlZmYvOGExYWZkN2EtMTQ0Ny0z YzUxLWJlYjAtOGQ5MzI4ZGZlN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmI0MWE1OWQtYmFjMC00NTZmLTgy YTUtYTEyOTc5NTQzZWZmLzJiNDFhNTlkLWJhYzAtNDU2Zi04MmE1LWExMjk3OTU0 M2VmZi5jcmwwHwYDVR0jBBgwFoAUchz/XQEarx+TPfY7QVG8RHmax1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjQxYTU5ZC1iYWMwLTQ1NmYtODJhNS1hMTI5 Nzk1NDNlZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0+wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoLOd261DPvn8KcTlVglmKPShlr70kTxHwOz04UXUVpiR6vi8JAQ1 EYTCLSabW2POWZCvgJhCcV2Njh9qXMDo/+qOKTly/jgUhQmFPx0rHDfln73GoD0S gjigPjtL3m4QI5IenfAZ4ZegRibhBmV4uYWDJBolYZAYu51cxHR34vAfqjIjMCKv IgBxdoFHqn2TaGT8jGF6fp88PJc10BbKlgCCfD7gVYiryx0JimVrgtZDnDeplUlx 2uxK7kBoaiSymepupVKI3DjDCGk4MJMPtlrlvJIOWlFfFnyciI+dy+crg9/HUkjs c3tSK0TtQdzyAjxtSvnLRchrmlp20Sez1A== -----END CERTIFICATE-----Generated at Tue Oct 20 08:11:52 2026 by rpki-client