$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/0fa3da85-6ac2-3c53-89bf-b6c3761f698a.roa File: 0fa3da85-6ac2-3c53-89bf-b6c3761f698a.roa (raw, json) Hash identifier: aqz1g/erMnXvEONebeB7AsP6Nk1CrO3TKmB0oSmp7ps= Subject key identifier: D4:09:27:D0:CD:83:DB:88:5D:F8:C5:57:1D:3D:96:67:23:D3:7F:B2 Certificate issuer: /CN=96c1d326-79d5-4bbe-924f-12c4b7c7fec9 Certificate serial: 010D0C9F4328584F6C4E6EF87292969A1B5DC9E0 Authority key identifier: 7E:4B:AC:D2:37:80:2E:74:CC:1A:3F:0A:83:43:35:BD:99:F4:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/0fa3da85-6ac2-3c53-89bf-b6c3761f698a.roa Signing time: Wed 07 Oct 2026 12:40:47 +0000 ROA not before: Wed 07 Oct 2026 12:40:47 +0000 ROA not after: Tue 05 Jan 2027 13:40:47 +0000 asID: 401235 IP address blocks: 2602:f2db:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:4e:6e:f8:72:92:96:9a:1b:5d:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c1d326-79d5-4bbe-924f-12c4b7c7fec9 Validity Not Before: Oct 7 12:40:47 2026 GMT Not After : Jan 5 13:40:47 2027 GMT Subject: CN=f2c41ade-f48b-4df9-a86b-dfea1680b9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:83:94:14:ef:1d:d2:47:2d:20:45:1b:5d: 33:f8:18:25:00:66:29:71:a6:3e:92:fc:98:57:31: df:e7:b3:60:13:6f:b9:a8:b8:6b:a6:87:06:a7:49: 2f:59:4f:f8:7e:73:98:b2:63:aa:0f:9b:42:6e:df: d7:78:34:90:53:c1:2e:cf:9d:ee:12:de:16:eb:b1: 20:bd:b0:a9:c3:87:90:f9:9b:8d:08:43:b5:0e:84: 1a:48:d7:21:dc:7a:d8:e6:a8:80:92:83:01:45:52: dd:33:4a:be:a1:d8:c7:14:95:14:f6:9f:88:f5:97: 8f:fa:1b:40:f0:c4:41:e9:62:39:7a:c2:4a:f8:1f: 40:86:75:f1:cd:4b:58:1e:ad:4a:a9:84:90:f4:63: bf:53:b7:27:e2:63:1a:54:b0:b6:90:1d:bb:64:88: a4:34:d7:ef:69:39:d5:1a:eb:d7:6d:bb:6f:9e:20: c7:07:aa:11:39:56:22:3c:76:a8:c3:42:14:b4:4c: aa:46:4d:3e:d4:5a:a2:08:51:bf:21:3e:23:ef:ee: 3c:1d:7d:2a:76:57:0e:a2:12:2c:cb:8d:b9:be:22: d3:19:b5:6a:77:63:ba:6f:de:b0:2a:fc:6a:78:9a: 82:80:e5:72:18:13:aa:de:75:7a:f7:23:58:8e:fb: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:27:D0:CD:83:DB:88:5D:F8:C5:57:1D:3D:96:67:23:D3:7F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/0fa3da85-6ac2-3c53-89bf-b6c3761f698a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.crl X509v3 Authority Key Identifier: keyid:7E:4B:AC:D2:37:80:2E:74:CC:1A:3F:0A:83:43:35:BD:99:F4:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2db:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f4:ef:ba:72:43:96:d2:20:cb:86:75:a3:58:9a:64:e4:2b: 8c:c5:2a:14:16:b8:bc:d2:c4:76:bd:f2:6c:09:89:a4:d5:06: 2b:32:9c:9c:53:12:56:2c:47:26:63:c2:f0:59:38:8b:9e:51: 3a:0b:10:1a:38:6a:b7:dd:84:df:15:4f:57:a7:a4:f2:a9:de: ab:01:53:df:34:71:6e:9e:ad:24:f6:4f:8c:e4:78:59:e1:0f: 0d:58:97:b9:78:1e:f2:b3:b4:35:17:39:bf:dd:1d:c8:ee:2f: 27:67:9b:3b:94:d8:98:a3:19:c5:ed:06:5c:8f:65:e9:ce:d7: d3:fb:bd:69:cd:a1:09:07:4a:e5:f0:dd:92:1e:fc:ce:2c:3e: 71:32:6e:ea:d6:d7:45:cd:4b:37:4c:96:b2:d6:87:72:f7:c0: e4:1e:98:dd:3f:c3:d9:72:62:fa:12:cd:b1:75:da:a0:d1:b1: 24:11:d5:8a:f2:91:f9:5b:c4:f2:80:1b:c0:a4:24:94:35:3e: ab:e1:88:c5:35:d8:3e:03:57:f0:dd:59:85:aa:87:da:dd:f5: 4a:30:56:04:60:f3:33:b5:76:88:73:12:3a:a8:bb:0c:69:b2: 25:2e:ae:9a:c6:4c:90:7e:a0:2b:25:ae:7b:74:98:22:9c:2d: 07:4a:d9:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9sTm74cpKWmhtdyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZjMWQzMjYtNzlkNS00YmJlLTkyNGYtMTJjNGI3Yzdm ZWM5MB4XDTI2MTAwNzEyNDA0N1oXDTI3MDEwNTEzNDA0N1owLzEtMCsGA1UEAxMk ZjJjNDFhZGUtZjQ4Yi00ZGY5LWE4NmItZGZlYTE2ODBiOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYSDlBTvHdJHLSBFG10z+BglAGYpcaY+kvyY VzHf57NgE2+5qLhrpocGp0kvWU/4fnOYsmOqD5tCbt/XeDSQU8Euz53uEt4W67Eg vbCpw4eQ+ZuNCEO1DoQaSNch3HrY5qiAkoMBRVLdM0q+odjHFJUU9p+I9ZeP+htA 8MRB6WI5esJK+B9AhnXxzUtYHq1KqYSQ9GO/U7cn4mMaVLC2kB27ZIikNNfvaTnV GuvXbbtvniDHB6oROVYiPHaow0IUtEyqRk0+1FqiCFG/IT4j7+48HX0qdlcOohIs y425viLTGbVqd2O6b96wKvxqeJqCgOVyGBOq3nV69yNYjvspgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQJJ9DNg9uIXfjFVx09lmcj03+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NmMx ZDMyNi03OWQ1LTRiYmUtOTI0Zi0xMmM0YjdjN2ZlYzkvMGZhM2RhODUtNmFjMi0z YzUzLTg5YmYtYjZjMzc2MWY2OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTZjMWQzMjYtNzlkNS00YmJlLTky NGYtMTJjNGI3YzdmZWM5Lzk2YzFkMzI2LTc5ZDUtNGJiZS05MjRmLTEyYzRiN2M3 ZmVjOS5jcmwwHwYDVR0jBBgwFoAUfkus0jeALnTMGj8Kg0M1vZn0OPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85NmMxZDMyNi03OWQ1LTRiYmUtOTI0Zi0xMmM0 YjdjN2ZlYzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLy2wAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAb077pyQ5bSIMuGdaNYmmTkK4zFKhQWuLzSxHa98mwJiaTVBisy nJxTElYsRyZjwvBZOIueUToLEBo4arfdhN8VT1enpPKp3qsBU980cW6erST2T4zk eFnhDw1Yl7l4HvKztDUXOb/dHcjuLydnmzuU2JijGcXtBlyPZenO19P7vWnNoQkH SuXw3ZIe/M4sPnEyburW10XNSzdMlrLWh3L3wOQemN0/w9lyYvoSzbF12qDRsSQR 1YrykflbxPKAG8CkJJQ1PqvhiMU12D4DV/DdWYWqh9rd9UowVgRg8zO1dohzEjqo uwxpsiUurprGTJB+oCslrnt0mCKcLQdK2Yw= -----END CERTIFICATE-----Generated at Sun Nov 1 21:03:56 2026 by rpki-client