$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/0d36921f-7844-380d-b2f0-0c793d795b0b.roa File: 0d36921f-7844-380d-b2f0-0c793d795b0b.roa (raw, json) Hash identifier: Zyf9kg9+cq2LvFbh4lNEckYByMVlXGm0oUTjUmJj1q8= Subject key identifier: 2D:03:0B:B1:9E:FF:BA:39:9A:18:2A:69:86:1B:40:0B:8C:57:C8:80 Certificate issuer: /CN=ffc9c3c2-5f8d-45fc-820d-17df589c5626 Certificate serial: 010D0C9F4328584F699C12C49B112610B2FB9780 Authority key identifier: DB:51:27:3D:87:83:0F:CA:62:3C:0C:6C:E0:5C:B9:A3:CC:F2:00:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/0d36921f-7844-380d-b2f0-0c793d795b0b.roa Signing time: Tue 06 Oct 2026 13:29:48 +0000 ROA not before: Tue 06 Oct 2026 13:29:48 +0000 ROA not after: Mon 04 Jan 2027 14:29:48 +0000 asID: 403010 IP address blocks: 2602:f2d4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/ffc9c3c2-5f8d-45fc-820d-17df589c5626.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/ffc9c3c2-5f8d-45fc-820d-17df589c5626.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:9c:12:c4:9b:11:26:10:b2:fb:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc9c3c2-5f8d-45fc-820d-17df589c5626 Validity Not Before: Oct 6 13:29:48 2026 GMT Not After : Jan 4 14:29:48 2027 GMT Subject: CN=70037e15-bdbf-41c3-bb87-2939f648ebdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:25:33:73:49:b8:5e:64:2f:db:01:cc:57: d4:c6:d4:22:5f:29:6e:50:39:dc:87:4c:bd:a5:48: b3:c9:5d:2f:3c:3f:d8:c0:be:60:9c:61:47:8c:94: cf:0c:31:d8:bd:43:22:96:b2:8b:db:0a:1e:7f:28: 46:12:91:f7:f1:40:8d:15:f0:6b:a5:72:4e:a2:47: 9f:bf:04:55:e8:5e:40:ed:68:d0:4c:5a:7b:56:5d: 72:25:18:1b:4c:b0:eb:33:cf:58:19:12:39:94:3c: 1c:47:21:40:68:07:af:88:9f:01:ec:59:d6:da:37: e1:37:48:13:b7:6f:3e:24:24:fe:b5:f3:53:a5:06: 70:d6:24:68:54:c2:67:5e:9a:68:49:a8:10:43:e8: 04:b6:c4:6a:ab:06:ee:99:5c:9b:c7:e2:4b:8f:d2: 53:85:39:16:e4:ed:03:0c:f7:68:1f:e0:10:c2:68: c4:b1:df:06:c1:db:7d:ce:e5:60:f2:a5:65:6e:b7: a4:a3:85:94:2a:99:bc:3f:ef:e2:09:e7:87:24:0b: 30:44:d8:4c:2d:71:8c:21:f3:d0:db:80:8c:8e:0f: 9d:bd:85:bf:f0:ef:4e:38:25:c8:57:e8:29:66:02: c2:f6:09:87:e8:e0:e2:1c:46:d5:37:2b:8d:2b:d4: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:03:0B:B1:9E:FF:BA:39:9A:18:2A:69:86:1B:40:0B:8C:57:C8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/0d36921f-7844-380d-b2f0-0c793d795b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626/ffc9c3c2-5f8d-45fc-820d-17df589c5626.crl X509v3 Authority Key Identifier: keyid:DB:51:27:3D:87:83:0F:CA:62:3C:0C:6C:E0:5C:B9:A3:CC:F2:00:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ffc9c3c2-5f8d-45fc-820d-17df589c5626.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2d4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8a:72:26:87:6c:b0:98:16:15:ef:49:83:67:fb:55:0c:c2: f3:5c:99:ce:95:90:af:8a:03:53:55:a9:42:76:f1:c2:5d:1c: 5c:7e:dc:41:98:f4:63:7b:d3:40:d9:05:48:af:aa:64:00:43: 0f:43:95:8c:14:10:c5:5a:b5:8d:4e:57:a1:d5:aa:a1:46:f5: 35:f7:be:d8:24:73:03:4f:06:ab:57:a5:bf:1b:d2:47:b4:38: 58:98:28:14:a5:2c:4e:d2:9e:f8:85:d2:f8:c4:07:21:d2:da: 13:58:17:76:74:e7:89:4c:dc:91:15:9e:a4:50:06:86:81:77: 47:e4:3b:4e:96:8a:cb:9a:5f:8a:7c:f1:71:b7:95:25:1d:9f: f4:bd:bb:d8:bc:f7:d6:71:89:8a:d8:87:1c:75:52:d8:80:1a: e2:b8:c5:9c:f6:c8:3e:6c:b1:68:a3:dc:cc:92:a2:21:bc:dc: 20:4e:0e:dd:1a:e6:fd:67:96:1d:52:b5:3e:47:c8:19:0e:51: 5a:37:73:0b:36:a1:c9:37:10:5e:a6:51:20:ce:17:80:98:43: 2a:fb:86:41:5d:b7:01:3e:81:21:fc:51:f6:d0:44:c9:6c:03: 2a:ff:8c:fc:04:73:46:d6:3f:e6:2c:bc:48:16:3b:47:f2:c2: 29:75:87:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9pnBLEmxEmELL7l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjOWMzYzItNWY4ZC00NWZjLTgyMGQtMTdkZjU4OWM1 NjI2MB4XDTI2MTAwNjEzMjk0OFoXDTI3MDEwNDE0Mjk0OFowLzEtMCsGA1UEAxMk NzAwMzdlMTUtYmRiZi00MWMzLWJiODctMjkzOWY2NDhlYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ4lM3NJuF5kL9sBzFfUxtQiXyluUDnch0y9 pUizyV0vPD/YwL5gnGFHjJTPDDHYvUMilrKL2woefyhGEpH38UCNFfBrpXJOokef vwRV6F5A7WjQTFp7Vl1yJRgbTLDrM89YGRI5lDwcRyFAaAeviJ8B7FnW2jfhN0gT t28+JCT+tfNTpQZw1iRoVMJnXppoSagQQ+gEtsRqqwbumVybx+JLj9JThTkW5O0D DPdoH+AQwmjEsd8Gwdt9zuVg8qVlbreko4WUKpm8P+/iCeeHJAswRNhMLXGMIfPQ 24CMjg+dvYW/8O9OOCXIV+gpZgLC9gmH6ODiHEbVNyuNK9Tr1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC0DC7Ge/7o5mhgqaYYbQAuMV8iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZmM5 YzNjMi01ZjhkLTQ1ZmMtODIwZC0xN2RmNTg5YzU2MjYvMGQzNjkyMWYtNzg0NC0z ODBkLWIyZjAtMGM3OTNkNzk1YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmZjOWMzYzItNWY4ZC00NWZjLTgy MGQtMTdkZjU4OWM1NjI2L2ZmYzljM2MyLTVmOGQtNDVmYy04MjBkLTE3ZGY1ODlj NTYyNi5jcmwwHwYDVR0jBBgwFoAU21EnPYeDD8piPAxs4Fy5o8zyAOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mZmM5YzNjMi01ZjhkLTQ1ZmMtODIwZC0xN2Rm NTg5YzU2MjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLy1AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHopyJodssJgWFe9Jg2f7VQzC81yZzpWQr4oDU1WpQnbxwl0cXH7c QZj0Y3vTQNkFSK+qZABDD0OVjBQQxVq1jU5XodWqoUb1Nfe+2CRzA08Gq1elvxvS R7Q4WJgoFKUsTtKe+IXS+MQHIdLaE1gXdnTniUzckRWepFAGhoF3R+Q7TpaKy5pf inzxcbeVJR2f9L272Lz31nGJitiHHHVS2IAa4rjFnPbIPmyxaKPczJKiIbzcIE4O 3Rrm/WeWHVK1PkfIGQ5RWjdzCzahyTcQXqZRIM4XgJhDKvuGQV23AT6BIfxR9tBE yWwDKv+M/ARzRtY/5iy8SBY7R/LCKXWHAQ== -----END CERTIFICATE-----Generated at Sat Oct 31 10:52:50 2026 by rpki-client