$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/4470b5a9-0ad9-3b43-a444-a0f7b0ddc68f.roa File: 4470b5a9-0ad9-3b43-a444-a0f7b0ddc68f.roa (raw, json) Hash identifier: Qwpz4K9alhVvDxoZu5U9qbQNwQGpdPOLKmIFvUZf+hM= Subject key identifier: 76:02:89:F6:8E:F9:33:09:AB:CA:44:39:83:AB:58:11:54:EA:77:3D Certificate issuer: /CN=578f96a5-a811-48fa-9b0c-a4f84dc8bc7a Certificate serial: 010D0C9F4328584F8DD88DE11D7D7C5021F6EE40 Authority key identifier: A5:C1:81:79:97:F5:1C:EF:BA:C3:24:CD:CB:5D:86:B9:61:65:EF:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/4470b5a9-0ad9-3b43-a444-a0f7b0ddc68f.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 402667 IP address blocks: 2602:f377::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8d:e1:1d:7d:7c:50:21:f6:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578f96a5-a811-48fa-9b0c-a4f84dc8bc7a Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=5a809e90-82c9-4aea-a486-3eb2d25c08c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:e6:c8:9d:3e:29:3a:3e:f5:36:6a:db:0f: e7:74:f2:c6:02:1f:87:53:7f:23:2b:25:64:87:7d: a8:66:fa:79:87:c0:87:1f:46:b8:f0:8e:66:19:70: e5:0f:97:1a:15:f9:cb:96:dd:da:64:6f:e1:f3:2d: be:f7:17:8c:49:4e:4c:ee:c2:2a:11:d3:5f:48:da: ab:45:05:db:ef:85:ec:7c:35:cd:a3:2f:c6:90:ef: 35:30:7f:ea:5a:27:6f:6d:1d:13:70:11:53:bd:bd: 3f:c7:32:01:38:1b:cf:88:bf:e6:e1:2c:52:25:60: 57:1a:10:30:19:b3:e6:09:74:52:7a:d2:c7:60:24: 11:f2:0c:e7:9d:3c:04:f4:3e:71:fb:b7:56:48:65: ac:a4:b3:c5:12:e2:b4:fd:b9:ad:07:86:1b:99:72: 8b:6e:e8:c0:77:52:32:34:c3:20:a8:74:a6:9e:cc: ee:dc:00:0c:76:bd:7b:b3:02:bf:d5:15:94:67:3a: 76:33:0c:ed:86:1e:27:03:ff:83:7b:91:3c:cb:35: 37:3c:d0:d4:7c:c6:f5:32:3f:a8:ba:5a:3a:27:1c: b3:20:ae:e1:5c:17:eb:46:30:c2:d6:22:32:0c:69: d7:b1:13:d1:6c:c5:c5:80:ab:70:43:0a:a5:51:8d: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:89:F6:8E:F9:33:09:AB:CA:44:39:83:AB:58:11:54:EA:77:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/4470b5a9-0ad9-3b43-a444-a0f7b0ddc68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.crl X509v3 Authority Key Identifier: keyid:A5:C1:81:79:97:F5:1C:EF:BA:C3:24:CD:CB:5D:86:B9:61:65:EF:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/578f96a5-a811-48fa-9b0c-a4f84dc8bc7a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f377::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c5:0c:1a:48:e7:ad:db:44:62:30:66:11:dc:80:f0:a7:55: 37:e3:09:af:f4:2e:40:08:ca:c2:0d:b8:fd:41:a2:08:4e:85: 32:be:ce:9c:b5:3b:b3:f3:ea:a2:e6:09:64:f8:df:a7:d9:f4: a4:53:9e:96:fe:54:9d:e2:35:f2:06:cb:4d:11:f1:34:bd:18: b3:77:97:e3:40:a9:b6:2a:09:f0:40:9a:39:c7:26:1f:b4:72: 88:85:69:be:bf:81:0a:f7:fd:22:49:30:4f:00:cc:6f:b9:2a: d6:4e:6c:7c:96:95:e0:90:77:ae:6e:e6:2b:de:6f:76:0a:64: 1f:4f:48:a3:7c:27:3c:17:88:be:b1:2b:c2:a8:c9:9d:c3:1b: 4e:ce:41:bf:a8:0b:eb:cb:e1:7c:dc:66:1f:24:19:bc:ae:a0: 8b:5a:a5:1f:cb:e5:1e:e2:11:5d:d4:ce:ca:31:84:0f:77:23: 25:05:91:15:42:13:81:28:03:a4:0f:ed:e2:8c:41:70:80:eb: 28:fb:e5:f4:14:fe:40:7a:fe:76:bc:9c:f9:57:7d:4a:26:ac: 68:c3:8e:8e:d0:50:cc:e9:06:e2:0e:df:ef:7c:5c:9f:0e:5e: 12:2e:50:6b:2a:55:80:85:34:f3:41:be:6e:b7:ab:88:60:f2: ec:e7:39:2f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+N2I3hHX18UCH27kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc4Zjk2YTUtYTgxMS00OGZhLTliMGMtYTRmODRkYzhi YzdhMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NWE4MDllOTAtODJjOS00YWVhLWE0ODYtM2ViMmQyNWMwOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWLmyJ0+KTo+9TZq2w/ndPLGAh+HU38jKyVk h32oZvp5h8CHH0a48I5mGXDlD5caFfnLlt3aZG/h8y2+9xeMSU5M7sIqEdNfSNqr RQXb74XsfDXNoy/GkO81MH/qWidvbR0TcBFTvb0/xzIBOBvPiL/m4SxSJWBXGhAw GbPmCXRSetLHYCQR8gznnTwE9D5x+7dWSGWspLPFEuK0/bmtB4YbmXKLbujAd1Iy NMMgqHSmnszu3AAMdr17swK/1RWUZzp2Mwzthh4nA/+De5E8yzU3PNDUfMb1Mj+o ulo6JxyzIK7hXBfrRjDC1iIyDGnXsRPRbMXFgKtwQwqlUY1NFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHYCifaO+TMJq8pEOYOrWBFU6nc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81Nzhm OTZhNS1hODExLTQ4ZmEtOWIwYy1hNGY4NGRjOGJjN2EvNDQ3MGI1YTktMGFkOS0z YjQzLWE0NDQtYTBmN2IwZGRjNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTc4Zjk2YTUtYTgxMS00OGZhLTli MGMtYTRmODRkYzhiYzdhLzU3OGY5NmE1LWE4MTEtNDhmYS05YjBjLWE0Zjg0ZGM4 YmM3YS5jcmwwHwYDVR0jBBgwFoAUpcGBeZf1HO+6wyTNy12GuWFl74UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NzhmOTZhNS1hODExLTQ4ZmEtOWIwYy1hNGY4 NGRjOGJjN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLzdwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbMUMGkjnrdtEYjBmEdyA8KdVN+MJr/QuQAjKwg24/UGiCE6FMr7O nLU7s/PqouYJZPjfp9n0pFOelv5UneI18gbLTRHxNL0Ys3eX40CptioJ8ECaOccm H7RyiIVpvr+BCvf9IkkwTwDMb7kq1k5sfJaV4JB3rm7mK95vdgpkH09Io3wnPBeI vrErwqjJncMbTs5Bv6gL68vhfNxmHyQZvK6gi1qlH8vlHuIRXdTOyjGED3cjJQWR FUITgSgDpA/t4oxBcIDrKPvl9BT+QHr+dryc+Vd9SiasaMOOjtBQzOkG4g7f73xc nw5eEi5QaypVgIU080G+breriGDy7Oc5Lw== -----END CERTIFICATE-----Generated at Sun Oct 25 03:09:45 2026 by rpki-client