$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa File: 23857d2a-ee7a-3906-8ed4-1674292d68d8.roa (raw, json) Hash identifier: tLHBYpiP0q25fYWeEj8EKkKALcfDgSaJaIARx9ovSps= Subject key identifier: AD:DA:2C:50:A9:19:85:41:46:BA:A9:25:B3:AD:B1:E4:6A:BD:04:0F Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584F9A68697AA2B1F4AA95D65900 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 140666 IP address blocks: 2602:fa80:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:69:7a:a2:b1:f4:aa:95:d6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=e3fd8a61-acc4-4be3-bfd2-224d51bf6066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:85:91:8b:41:bf:ac:24:81:9f:a2:13:62: ba:35:d8:05:64:1e:a4:ce:5d:23:cb:4f:c6:b2:c8: e9:5b:b1:58:9c:d7:08:13:ed:9b:64:65:51:26:14: 81:78:cb:f5:df:11:d9:f3:74:60:43:5c:19:91:c2: b3:da:e1:cb:4c:66:3e:d6:aa:1e:b9:21:7f:c5:a1: b5:66:8c:68:9b:02:38:f6:cc:65:b9:36:fe:5f:02: cf:c6:8f:aa:c9:15:e0:e2:cd:73:5b:e6:c9:7c:c8: de:aa:54:1e:0f:26:a7:30:af:b9:48:1a:52:20:48: 67:a5:69:fa:26:56:45:76:a3:b1:1f:9c:9c:72:78: fd:82:89:f3:e2:35:12:41:85:68:45:72:96:b7:f4: c1:de:38:3c:6a:ec:8b:1a:3b:32:f6:25:8f:41:40: 01:da:5a:a8:67:6d:14:51:84:f2:af:ef:55:09:ef: 1f:a9:b7:fa:de:7b:ff:3f:2a:70:37:c2:70:36:d0: 1a:e2:90:17:e1:81:79:72:57:cb:3a:d5:92:67:00: 54:c9:58:f7:e1:3a:ed:a0:ed:28:03:75:88:60:fe: fc:92:1e:c0:fe:f2:e0:84:29:01:d3:19:4d:4b:1d: c1:63:bb:df:48:49:37:a9:e8:97:18:ce:43:34:c1: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:2C:50:A9:19:85:41:46:BA:A9:25:B3:AD:B1:E4:6A:BD:04:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/23857d2a-ee7a-3906-8ed4-1674292d68d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f7:bf:56:e4:0a:52:4f:60:4b:ec:a2:22:3f:54:e0:92:2b: c6:ba:ee:1e:06:c6:44:db:a6:cd:3d:88:0f:0a:77:44:7b:18: d5:00:c5:75:17:21:b1:b7:0f:a8:2a:79:89:8a:22:4e:5b:d5: 86:09:a0:30:6c:c1:db:8c:f4:e8:54:a7:8c:1c:86:ef:ca:02: e1:49:bf:f0:b2:3f:b1:e7:01:1f:08:93:78:15:6c:f6:6b:96: cd:82:83:e0:a0:48:3a:b2:9d:c3:e7:1b:e6:eb:52:ce:d3:87: 9b:b0:a4:f4:80:58:3a:dd:29:f3:f0:94:b8:11:06:7d:78:82: e9:c9:58:21:7c:4c:b3:78:da:73:ae:70:7b:ae:80:d4:0a:77: 52:bd:7f:cd:be:1b:d5:69:15:26:23:9b:61:23:d1:fd:6e:b4: 6a:af:50:28:da:8e:a9:b1:48:6f:7f:86:79:94:4e:02:89:c9: f0:40:70:37:24:f7:0a:43:34:55:58:9b:2a:ce:0c:3d:3d:53: 83:91:cb:f0:9f:48:cc:67:fb:14:b1:e8:56:60:c0:0c:d6:f2: 15:69:b7:a8:fc:98:15:e9:67:ec:e4:68:ff:2a:e0:f1:be:c7: fc:b9:1c:9f:02:31:f0:3f:02:e4:6c:aa:7a:65:a8:7b:de:f5: ac:d3:b7:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+aaGl6orH0qpXWWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTNmZDhhNjEtYWNjNC00YmUzLWJmZDItMjI0ZDUxYmY2MDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UiFkYtBv6wkgZ+iE2K6NdgFZB6kzl0jy0/G ssjpW7FYnNcIE+2bZGVRJhSBeMv13xHZ83RgQ1wZkcKz2uHLTGY+1qoeuSF/xaG1 ZoxomwI49sxluTb+XwLPxo+qyRXg4s1zW+bJfMjeqlQeDyanMK+5SBpSIEhnpWn6 JlZFdqOxH5yccnj9gonz4jUSQYVoRXKWt/TB3jg8auyLGjsy9iWPQUAB2lqoZ20U UYTyr+9VCe8fqbf63nv/PypwN8JwNtAa4pAX4YF5clfLOtWSZwBUyVj34TrtoO0o A3WIYP78kh7A/vLghCkB0xlNSx3BY7vfSEk3qeiXGM5DNMHOLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3aLFCpGYVBRrqpJbOtseRqvQQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvMjM4NTdkMmEtZWU3YS0z OTA2LThlZDQtMTY3NDI5MmQ2OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFn3v1bkClJPYEvsoiI/VOCSK8a67h4GxkTbps09iA8Kd0R7GNUA xXUXIbG3D6gqeYmKIk5b1YYJoDBswduM9OhUp4wchu/KAuFJv/CyP7HnAR8Ik3gV bPZrls2Cg+CgSDqyncPnG+brUs7Th5uwpPSAWDrdKfPwlLgRBn14gunJWCF8TLN4 2nOucHuugNQKd1K9f82+G9VpFSYjm2Ej0f1utGqvUCjajqmxSG9/hnmUTgKJyfBA cDck9wpDNFVYmyrODD09U4ORy/CfSMxn+xSx6FZgwAzW8hVpt6j8mBXpZ+zkaP8q 4PG+x/y5HJ8CMfA/AuRsqnplqHve9azTt04= -----END CERTIFICATE-----Generated at Wed Oct 28 03:16:13 2026 by rpki-client