$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa File: 48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa (raw, json) Hash identifier: wzjGX6a2DiGWMQLq82XgV57dV3XZv6vt7RTtb+aMjmQ= Subject key identifier: 83:97:0D:EC:2F:94:F9:4B:EE:97:D7:56:A0:79:1C:F6:2B:03:C1:5D Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584FB50BAF64F61872B7D1B64D00 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa Signing time: Mon 02 Nov 2026 14:00:14 +0000 ROA not before: Mon 02 Nov 2026 14:00:14 +0000 ROA not after: Sun 31 Jan 2027 14:00:14 +0000 asID: 14639 IP address blocks: 2602:fd26::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:0b:af:64:f6:18:72:b7:d1:b6:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Nov 2 14:00:14 2026 GMT Not After : Jan 31 14:00:14 2027 GMT Subject: CN=d5e109ca-2a12-4e07-9f97-5cf30bfbbc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:27:3a:5d:5e:67:c5:42:e8:34:17:64:ec: e5:e2:f0:8f:e4:05:97:3a:f5:84:5c:23:5b:94:43: a2:81:89:a6:b0:e4:d4:a0:b9:b6:22:8e:bb:85:49: 91:d8:a2:75:7f:33:8b:7f:bc:4f:b1:26:f7:f8:62: 76:50:00:10:33:88:de:34:1e:23:57:97:e3:3b:c9: 49:5e:dd:8b:a0:ea:53:66:b9:62:fa:35:d2:24:8e: 5a:ce:be:c3:b3:d4:82:1e:88:8c:e7:4b:a2:3e:7e: 6c:1c:b4:fb:f2:fc:9c:b7:80:87:09:97:0b:0d:9b: 12:86:4a:ee:66:66:4b:d5:84:c1:aa:f3:59:6d:ea: 1e:64:77:1b:97:13:44:82:15:66:98:35:96:2d:69: 16:61:e0:af:8c:57:b4:f2:69:6d:06:ca:dd:7e:32: e7:08:0f:46:e4:ff:ce:29:87:eb:c6:76:71:6b:93: f7:c3:9b:7d:af:eb:2d:75:c7:96:ec:eb:72:53:d8: 59:c7:54:ef:e4:0d:eb:29:6d:48:9e:0e:ea:ee:11: 03:33:26:0c:bf:10:05:18:11:14:6e:17:db:5c:9e: c5:c5:57:cb:96:5f:48:64:91:54:e3:12:16:b7:56: f7:9a:04:86:56:01:f9:85:9f:b0:11:33:5f:81:1a: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:0D:EC:2F:94:F9:4B:EE:97:D7:56:A0:79:1C:F6:2B:03:C1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/48bfd73e-2873-32b0-b929-a2ee4cd9767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd26::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9d:d1:66:86:0f:bd:16:13:e7:cb:b9:c3:ed:8a:7e:1c:47: 0f:39:73:11:45:c6:6f:a3:74:2b:26:47:0f:ee:bc:d8:e5:1b: 33:6a:7e:09:b2:20:e9:7e:1f:4e:74:ba:b2:ff:ed:e2:e9:2c: f8:db:27:d4:1b:25:d0:9f:6a:1f:88:31:09:0b:6b:06:1c:c0: 4b:05:93:c8:de:bc:fb:68:fe:2e:6d:12:bd:09:7a:37:cc:c5: e2:d4:12:2f:d7:09:4b:50:0b:45:16:f4:2e:cc:08:6d:16:44: e9:19:38:6f:f4:d5:f8:e8:50:9a:ef:c5:fc:a1:13:f4:7b:ac: 55:39:1a:d7:2c:57:9e:db:8b:09:45:de:7a:d4:3c:09:5e:4e: fc:bc:85:84:99:8a:6d:73:b8:6b:d3:09:a3:9e:f4:2e:26:9c: c8:b1:cc:9d:34:b3:cf:9a:a4:d9:ee:1b:f5:75:02:29:66:c3: 39:0c:25:21:eb:ab:63:f7:3e:de:13:9c:92:d4:fd:d8:80:ac: e6:0c:19:72:b2:97:0d:3b:8f:a3:cf:4d:1b:e0:cd:11:03:2a: 39:80:77:17:f4:1a:29:40:f9:e2:b3:87:46:38:a1:69:b8:16: 3a:78:f6:fb:bc:eb:8f:3a:e0:de:b3:09:3c:04:da:56:43:3a: e3:46:a8:a6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+1C69k9hhyt9G2TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI2MTEwMjE0MDAxNFoXDTI3MDEzMTE0MDAxNFowLzEtMCsGA1UEAxMk ZDVlMTA5Y2EtMmExMi00ZTA3LTlmOTctNWNmMzBiZmJiYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAcnOl1eZ8VC6DQXZOzl4vCP5AWXOvWEXCNb lEOigYmmsOTUoLm2Io67hUmR2KJ1fzOLf7xPsSb3+GJ2UAAQM4jeNB4jV5fjO8lJ Xt2LoOpTZrli+jXSJI5azr7Ds9SCHoiM50uiPn5sHLT78vyct4CHCZcLDZsShkru ZmZL1YTBqvNZbeoeZHcblxNEghVmmDWWLWkWYeCvjFe08mltBsrdfjLnCA9G5P/O KYfrxnZxa5P3w5t9r+stdceW7OtyU9hZx1Tv5A3rKW1Ing7q7hEDMyYMvxAFGBEU bhfbXJ7FxVfLll9IZJFU4xIWt1b3mgSGVgH5hZ+wETNfgRpaDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIOXDewvlPlL7pfXVqB5HPYrA8FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNDhiZmQ3M2UtMjg3My0z MmIwLWI5MjktYTJlZTRjZDk3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9JgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjJ3RZoYPvRYT58u5w+2KfhxHDzlzEUXGb6N0KyZHD+682OUbM2p+ CbIg6X4fTnS6sv/t4uks+Nsn1Bsl0J9qH4gxCQtrBhzASwWTyN68+2j+Lm0SvQl6 N8zF4tQSL9cJS1ALRRb0LswIbRZE6Rk4b/TV+OhQmu/F/KET9HusVTka1yxXntuL CUXeetQ8CV5O/LyFhJmKbXO4a9MJo570LiacyLHMnTSzz5qk2e4b9XUCKWbDOQwl IeurY/c+3hOcktT92ICs5gwZcrKXDTuPo89NG+DNEQMqOYB3F/QaKUD54rOHRjih abgWOnj2+7zrjzrg3rMJPATaVkM640aopg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:59:11 2026 by rpki-client