$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/5256e397-f153-3b3b-bbc0-39293f942482.roa File: 5256e397-f153-3b3b-bbc0-39293f942482.roa (raw, json) Hash identifier: q6p9hfkF6U6Ei5Y2QbSao/aWCWR7Mkvyp3rCMZYRotA= Subject key identifier: DA:87:BC:A9:57:D2:C7:66:13:74:B5:48:AA:8B:10:57:27:AC:34:1D Certificate issuer: /CN=4386f7e1-06e1-45c4-ae55-7dea00a8349e Certificate serial: 010D0C9F4328584F5C5FE449DC110975F4E95400 Authority key identifier: CD:54:84:19:89:52:3B:66:C8:05:05:20:FE:FE:5B:D8:1D:2C:6D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/5256e397-f153-3b3b-bbc0-39293f942482.roa Signing time: Thu 01 Oct 2026 19:43:02 +0000 ROA not before: Thu 01 Oct 2026 19:43:02 +0000 ROA not after: Wed 30 Dec 2026 20:43:02 +0000 asID: 396474 IP address blocks: 2602:fa72::/44 maxlen: 44 2602:fa72:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:5f:e4:49:dc:11:09:75:f4:e9:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4386f7e1-06e1-45c4-ae55-7dea00a8349e Validity Not Before: Oct 1 19:43:02 2026 GMT Not After : Dec 30 20:43:02 2026 GMT Subject: CN=cbd66211-ac87-4e6d-b39d-09207a550d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:80:f0:c9:c5:97:22:ab:6b:8a:48:e6:64: 1a:ad:9a:59:ff:13:d9:5b:93:f6:9a:d1:18:54:34: 46:e9:e0:4d:43:5c:43:1c:16:10:43:73:e3:16:b1: 9b:00:cb:1b:36:55:1e:04:85:2a:69:0a:b5:38:68: d9:0f:db:ef:95:f9:48:fe:ec:a2:1b:2f:78:73:a5: d5:23:15:73:80:79:ce:db:fa:e4:32:ba:4a:ec:b6: cd:21:ef:62:43:9b:0b:11:a8:15:ae:97:b7:12:9e: 6f:85:e4:9b:a2:78:9b:b3:80:79:6d:2a:8f:51:4f: 06:7e:84:39:28:56:d6:59:71:a7:52:b8:b8:ed:16: db:f0:0f:4f:cc:02:41:8b:28:9f:b3:09:f5:b9:d4: 28:0d:df:a3:3d:dc:ff:7e:68:89:7c:de:25:19:18: 22:09:93:d1:3f:a2:75:b5:79:f4:6b:1e:1f:91:23: 2e:61:97:90:25:cf:16:fa:94:d9:a5:ad:d9:f2:8b: 45:79:f8:52:80:2c:9a:4e:06:11:24:36:76:9e:2c: a6:9b:3b:2e:49:3e:7b:b6:ae:64:3e:9e:30:a7:08: 11:35:35:85:0e:9f:e2:8a:18:8d:20:3e:62:a3:9e: a6:5e:97:ee:6e:6e:b0:21:59:63:e3:bc:ec:15:12: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:BC:A9:57:D2:C7:66:13:74:B5:48:AA:8B:10:57:27:AC:34:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/5256e397-f153-3b3b-bbc0-39293f942482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.crl X509v3 Authority Key Identifier: keyid:CD:54:84:19:89:52:3B:66:C8:05:05:20:FE:FE:5B:D8:1D:2C:6D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa72::/44 2602:fa72:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c2:82:4f:0e:30:37:5d:aa:5d:c8:5a:fc:ad:5c:b2:bc:e7: 9b:ec:bb:41:ac:da:84:08:ff:77:2e:21:c9:2e:af:73:cb:1d: db:da:7d:9f:9e:fe:62:e5:7f:ff:e4:ee:cc:7c:f5:12:15:80: 5f:20:ba:4d:bf:76:e6:fa:ce:a1:bc:66:3c:41:fe:ab:7b:ba: 43:a2:8c:17:d2:18:68:64:08:33:84:c2:c9:46:58:f6:36:d9: 96:e9:0a:6f:69:91:99:b9:26:85:08:b1:8c:aa:70:29:2a:c0: 1b:a6:a5:66:4b:06:59:52:26:7d:01:72:f7:9d:04:dd:06:31: 24:cc:f9:eb:f7:bc:ad:fd:d0:80:b8:89:23:a5:21:16:d0:7b: d1:fa:96:46:7f:99:45:54:5b:9c:82:fe:42:b2:39:72:f3:fe: dc:cc:99:7f:7a:1b:8b:9d:01:e1:24:92:cc:8d:39:f4:78:d0: 50:54:52:47:f9:a8:7a:df:d9:be:a0:2b:df:ec:43:56:8a:4a: 0c:b2:9a:1a:1f:0f:13:50:39:c5:21:f9:a5:24:32:22:d3:e6: f2:0a:2a:aa:a8:83:0b:b0:0e:3f:1a:ca:cc:45:6d:be:48:11: f5:f3:a1:4d:87:90:51:26:30:49:5d:34:45:8c:00:bc:8a:f2: 16:25:5d:81 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9cX+RJ3BEJdfTpVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM4NmY3ZTEtMDZlMS00NWM0LWFlNTUtN2RlYTAwYTgz NDllMB4XDTI2MTAwMTE5NDMwMloXDTI2MTIzMDIwNDMwMlowLzEtMCsGA1UEAxMk Y2JkNjYyMTEtYWM4Ny00ZTZkLWIzOWQtMDkyMDdhNTUwZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXCA8MnFlyKra4pI5mQarZpZ/xPZW5P2mtEY VDRG6eBNQ1xDHBYQQ3PjFrGbAMsbNlUeBIUqaQq1OGjZD9vvlflI/uyiGy94c6XV IxVzgHnO2/rkMrpK7LbNIe9iQ5sLEagVrpe3Ep5vheSbonibs4B5bSqPUU8GfoQ5 KFbWWXGnUri47Rbb8A9PzAJBiyifswn1udQoDd+jPdz/fmiJfN4lGRgiCZPRP6J1 tXn0ax4fkSMuYZeQJc8W+pTZpa3Z8otFefhSgCyaTgYRJDZ2niymmzsuST57tq5k Pp4wpwgRNTWFDp/iihiNID5io56mXpfubm6wIVlj47zsFRKkFQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNqHvKlX0sdmE3S1SKqLEFcnrDQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80Mzg2 ZjdlMS0wNmUxLTQ1YzQtYWU1NS03ZGVhMDBhODM0OWUvNTI1NmUzOTctZjE1My0z YjNiLWJiYzAtMzkyOTNmOTQyNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDM4NmY3ZTEtMDZlMS00NWM0LWFl NTUtN2RlYTAwYTgzNDllLzQzODZmN2UxLTA2ZTEtNDVjNC1hZTU1LTdkZWEwMGE4 MzQ5ZS5jcmwwHwYDVR0jBBgwFoAUzVSEGYlSO2bIBQUg/v5b2B0sbeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80Mzg2ZjdlMS0wNmUxLTQ1YzQtYWU1NS03ZGVh MDBhODM0OWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgL6cgAA AwcEJgL6cgAgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABzCgk8OMDddql3IWvytXLK855vsu0Gs2oQI/3cu Ickur3PLHdvafZ+e/mLlf//k7sx89RIVgF8guk2/dub6zqG8ZjxB/qt7ukOijBfS GGhkCDOEwslGWPY22ZbpCm9pkZm5JoUIsYyqcCkqwBumpWZLBllSJn0BcvedBN0G MSTM+ev3vK390IC4iSOlIRbQe9H6lkZ/mUVUW5yC/kKyOXLz/tzMmX96G4udAeEk ksyNOfR40FBUUkf5qHrf2b6gK9/sQ1aKSgyymhofDxNQOcUh+aUkMiLT5vIKKqqo gwuwDj8aysxFbb5IEfXzoU2HkFEmMEldNEWMALyK8hYlXYE= -----END CERTIFICATE-----Generated at Wed Nov 4 04:14:43 2026 by rpki-client