$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/6dcefb1e-6088-3f1d-a67c-86265fd14672.roa File: 6dcefb1e-6088-3f1d-a67c-86265fd14672.roa (raw, json) Hash identifier: xrxqtyBIVzXPKfQYVA19PkfKf7e93G451hD6GY82f/M= Subject key identifier: 3C:1B:AC:33:D0:B8:1A:52:16:92:11:A3:7C:07:7F:35:47:4E:64:52 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584FB50BB6AB9FA465E9B6DDAC80 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/6dcefb1e-6088-3f1d-a67c-86265fd14672.roa Signing time: Mon 02 Nov 2026 14:00:14 +0000 ROA not before: Mon 02 Nov 2026 14:00:14 +0000 ROA not after: Sun 31 Jan 2027 14:00:14 +0000 asID: 22855 IP address blocks: 2602:fd26::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:0b:b6:ab:9f:a4:65:e9:b6:dd:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Nov 2 14:00:14 2026 GMT Not After : Jan 31 14:00:14 2027 GMT Subject: CN=8a4f7842-a3c3-459b-9b95-075adc4568ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:12:3e:1c:2c:0d:d1:e1:ad:a3:de:1f:60: df:1b:e7:9d:80:1e:e1:2d:dd:fb:25:35:4f:52:95: e6:38:be:2b:21:59:4c:09:92:9d:6b:7a:f0:55:90: 2a:7f:6a:2e:4d:9d:c8:9e:f1:37:2d:40:4b:7d:3c: be:24:7e:de:27:b6:ce:07:1c:67:d5:29:1f:4f:24: 39:e3:4d:b8:a3:a8:97:ec:12:51:56:06:7e:1b:de: 24:eb:6f:49:dc:0c:b1:4b:08:06:01:17:a3:e0:38: 9c:10:33:a2:df:63:37:15:99:d3:88:e3:6c:c6:18: 4b:15:68:ff:99:84:95:a7:e3:88:f3:06:42:cc:ce: fe:28:1a:8f:ab:6f:6a:cd:c5:4e:d8:35:e3:83:a1: fd:96:14:9d:9e:10:3c:7d:c5:1f:d7:6c:bd:5e:b3: c0:8f:69:24:a3:73:73:16:27:2d:55:8c:e3:43:d1: ec:8e:90:c0:27:93:1c:39:62:43:9f:78:a1:e7:e1: df:df:61:06:e9:11:c4:2a:29:72:7e:f3:6d:42:85: 21:da:a2:5e:c3:46:c6:0e:f8:9c:aa:3c:7d:b9:15: 1a:3b:37:b1:10:7c:85:fe:f5:d7:70:1c:b5:d0:2f: 85:27:6c:52:52:2f:5d:be:94:be:dd:16:9e:67:85: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:AC:33:D0:B8:1A:52:16:92:11:A3:7C:07:7F:35:47:4E:64:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/6dcefb1e-6088-3f1d-a67c-86265fd14672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd26::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b3:7c:bd:1a:13:45:ca:40:96:bf:3b:53:bb:0d:41:05:99: c1:13:8d:98:b5:9f:e7:e2:b9:6d:0e:92:7c:b5:dd:67:82:80: e9:3f:56:00:bc:b8:c3:f3:90:c4:bb:c8:97:74:8d:2b:59:94: 41:0a:30:ce:ad:d0:56:76:ae:43:95:59:9d:7a:c3:00:b0:7d: 57:ff:88:97:57:87:01:c8:69:77:84:74:73:51:f3:61:07:40: 62:c6:db:a6:e2:92:d8:14:fd:3f:3f:e4:83:14:f2:aa:a3:2f: 73:ee:0e:7e:90:f3:30:d9:00:b9:2b:fa:c9:4b:30:1c:ce:ce: 5a:87:46:45:eb:c4:f1:b7:34:82:83:e6:9b:51:28:e8:73:52: ff:5e:e7:37:c7:44:ee:00:4f:66:7f:c9:8b:9b:78:35:7d:04: 84:d1:16:d5:bf:a0:23:25:80:29:f2:4b:5f:9e:38:51:6e:59: fa:f1:aa:f8:60:f0:67:72:35:23:79:ec:1d:05:d9:c8:28:ad: e1:41:cd:64:38:59:45:60:ea:83:ad:16:ec:2a:76:e0:5b:f8: 8f:db:3f:e3:dc:75:28:60:01:25:7f:23:d5:ac:a2:a0:3c:c8: d9:c4:85:d1:9f:b9:2b:22:39:4f:52:e0:6a:89:dd:af:e6:8f: b1:9e:49:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+1C7arn6Rl6bbdrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI2MTEwMjE0MDAxNFoXDTI3MDEzMTE0MDAxNFowLzEtMCsGA1UEAxMk OGE0Zjc4NDItYTNjMy00NTliLTliOTUtMDc1YWRjNDU2OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8SPhwsDdHhraPeH2DfG+edgB7hLd37JTVP UpXmOL4rIVlMCZKda3rwVZAqf2ouTZ3InvE3LUBLfTy+JH7eJ7bOBxxn1SkfTyQ5 4024o6iX7BJRVgZ+G94k629J3AyxSwgGARej4DicEDOi32M3FZnTiONsxhhLFWj/ mYSVp+OI8wZCzM7+KBqPq29qzcVO2DXjg6H9lhSdnhA8fcUf12y9XrPAj2kko3Nz FictVYzjQ9HsjpDAJ5McOWJDn3ih5+Hf32EG6RHEKilyfvNtQoUh2qJew0bGDvic qjx9uRUaOzexEHyF/vXXcBy10C+FJ2xSUi9dvpS+3RaeZ4WWyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDwbrDPQuBpSFpIRo3wHfzVHTmRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNmRjZWZiMWUtNjA4OC0z ZjFkLWE2N2MtODYyNjVmZDE0NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9JgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANrN8vRoTRcpAlr87U7sNQQWZwRONmLWf5+K5bQ6SfLXdZ4KA6T9W ALy4w/OQxLvIl3SNK1mUQQowzq3QVnauQ5VZnXrDALB9V/+Il1eHAchpd4R0c1Hz YQdAYsbbpuKS2BT9Pz/kgxTyqqMvc+4OfpDzMNkAuSv6yUswHM7OWodGRevE8bc0 goPmm1Eo6HNS/17nN8dE7gBPZn/Ji5t4NX0EhNEW1b+gIyWAKfJLX544UW5Z+vGq +GDwZ3I1I3nsHQXZyCit4UHNZDhZRWDqg60W7Cp24Fv4j9s/49x1KGABJX8j1ayi oDzI2cSF0Z+5KyI5T1Lgaondr+aPsZ5Jsg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:59:12 2026 by rpki-client