$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa File: 43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa (raw, json) Hash identifier: +dHlo3BIB11faCV8/btpDOkRimjat6eD55oK5fM5F0w= Subject key identifier: 8B:31:2E:63:97:05:40:84:6A:3D:25:D9:27:33:F7:06:B5:0E:5E:9F Certificate issuer: /CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5 Certificate serial: 010D0C9F4328584F936DA6217BB543CA67CE6680 Authority key identifier: 8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa Signing time: Wed 21 Oct 2026 13:00:12 +0000 ROA not before: Wed 21 Oct 2026 13:00:12 +0000 ROA not after: Tue 19 Jan 2027 14:00:12 +0000 asID: 402799 IP address blocks: 2602:f32a:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:6d:a6:21:7b:b5:43:ca:67:ce:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5 Validity Not Before: Oct 21 13:00:12 2026 GMT Not After : Jan 19 14:00:12 2027 GMT Subject: CN=51ba72fd-0d3b-400e-ac2c-c94af0598fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:bc:15:9e:ef:ed:b5:ec:5e:be:dd:30:c3: cf:fb:6c:74:f6:72:fd:ed:c5:c8:e1:2a:92:39:86: 43:2b:ee:10:81:92:fa:be:86:4b:b1:a2:bf:eb:64: 0d:e5:c9:7e:fc:91:f0:95:ae:54:90:1c:b5:a7:b7: 2a:14:66:dd:75:9f:f6:a3:f7:bc:64:dd:42:29:be: ff:b5:c7:2d:c7:3a:bc:70:b5:8d:ad:dc:e2:62:d8: 46:b6:69:a7:2d:98:54:9b:85:8f:84:5a:ed:19:d0: 86:d6:4e:a8:43:7e:9e:e3:b9:72:d4:ed:06:21:14: 7f:6b:4c:17:99:97:f8:48:46:ea:eb:ad:45:d8:5b: 59:9a:b7:70:56:c0:40:ca:a8:7d:7d:da:0a:bd:65: 47:06:37:c5:57:b7:3c:e4:18:b0:a0:ff:ea:15:c6: c2:ad:ec:1d:da:1e:8b:2d:ce:d9:a3:d1:f5:03:6a: 43:38:4b:33:f5:79:9a:7d:c3:43:c1:5e:1e:f9:16: 53:6d:08:b6:49:25:8f:bf:77:1c:24:dc:62:0c:a3: d8:8b:cd:06:6f:53:ee:66:b1:38:9e:0f:39:90:ce: c7:b5:ad:0d:5d:e4:b2:55:33:9b:05:c0:17:7f:7d: a2:b8:88:e6:e1:12:5f:e6:5d:76:58:24:92:25:70: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:31:2E:63:97:05:40:84:6A:3D:25:D9:27:33:F7:06:B5:0E:5E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl X509v3 Authority Key Identifier: keyid:8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f32a:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:40:da:60:44:38:75:ca:06:1c:73:ba:74:a8:a2:36:2a:03: 25:b6:30:dd:ca:7e:98:06:d7:81:7e:ce:34:b6:35:3c:e5:fa: f4:a8:74:b8:c9:00:33:30:01:b0:2e:56:e8:ed:f4:51:dd:1c: 5e:3f:e9:54:59:9b:d7:43:7b:09:d4:b5:44:e3:74:74:10:e8: 8a:52:da:59:fa:a9:d1:2f:46:b4:d8:b6:dc:de:71:ee:be:7e: 22:cc:40:5c:ac:bb:ab:8f:14:6c:ee:81:98:59:16:09:c5:ee: ee:49:84:fb:62:cd:05:66:20:0a:d7:c1:f1:f5:8d:f5:d3:c3: c8:1b:7d:96:3c:22:06:07:36:cc:d2:7c:41:32:96:5b:d8:71: 5a:a9:6c:ae:fa:2f:f9:d6:78:7c:e4:55:c4:5a:87:5c:a0:a6: 41:90:66:ff:01:fb:c3:fc:7b:b6:9a:41:2a:13:a0:2c:a4:91: ab:1c:9e:a7:34:dd:15:cd:a9:7e:23:79:54:f7:ac:1b:76:71: a7:1e:b8:a5:a3:e0:9a:f6:99:7a:08:6a:ae:13:06:c5:55:50: c7:6c:d6:fb:36:e9:15:e9:e5:a1:a7:b1:7d:6d:6f:ee:ae:2d: 8c:50:90:52:0e:76:10:c8:01:52:ba:eb:85:07:ea:26:d9:b8: cc:95:ba:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+TbaYhe7VDymfOZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M4MTExZDEtNjMzNy00M2IxLThjZmMtMzdlYzQyZjdl NWY1MB4XDTI2MTAyMTEzMDAxMloXDTI3MDExOTE0MDAxMlowLzEtMCsGA1UEAxMk NTFiYTcyZmQtMGQzYi00MDBlLWFjMmMtYzk0YWYwNTk4ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoO8FZ7v7bXsXr7dMMPP+2x09nL97cXI4SqS OYZDK+4QgZL6voZLsaK/62QN5cl+/JHwla5UkBy1p7cqFGbddZ/2o/e8ZN1CKb7/ tcctxzq8cLWNrdziYthGtmmnLZhUm4WPhFrtGdCG1k6oQ36e47ly1O0GIRR/a0wX mZf4SEbq661F2FtZmrdwVsBAyqh9fdoKvWVHBjfFV7c85BiwoP/qFcbCrewd2h6L Lc7Zo9H1A2pDOEsz9XmafcNDwV4e+RZTbQi2SSWPv3ccJNxiDKPYi80Gb1PuZrE4 ng85kM7Hta0NXeSyVTObBcAXf32iuIjm4RJf5l12WCSSJXCJtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIsxLmOXBUCEaj0l2Scz9wa1Dl6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYzgx MTFkMS02MzM3LTQzYjEtOGNmYy0zN2VjNDJmN2U1ZjUvNDMwMDg3MTctMmQ3ZS0z MmEzLTgyZmMtNWM5ZGU4YzBkN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2M4MTExZDEtNjMzNy00M2IxLThj ZmMtMzdlYzQyZjdlNWY1L2NjODExMWQxLTYzMzctNDNiMS04Y2ZjLTM3ZWM0MmY3 ZTVmNS5jcmwwHwYDVR0jBBgwFoAUisZpPoBPb4E8KXIwJYUgc946fngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYzgxMTFkMS02MzM3LTQzYjEtOGNmYy0zN2Vj NDJmN2U1ZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgLzKgAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNA2mBEOHXKBhxzunSoojYqAyW2MN3KfpgG14F+zjS2NTzl+vSo dLjJADMwAbAuVujt9FHdHF4/6VRZm9dDewnUtUTjdHQQ6IpS2ln6qdEvRrTYttze ce6+fiLMQFysu6uPFGzugZhZFgnF7u5JhPtizQVmIArXwfH1jfXTw8gbfZY8IgYH NszSfEEyllvYcVqpbK76L/nWeHzkVcRah1ygpkGQZv8B+8P8e7aaQSoToCykkasc nqc03RXNqX4jeVT3rBt2caceuKWj4Jr2mXoIaq4TBsVVUMds1vs26RXp5aGnsX1t b+6uLYxQkFIOdhDIAVK664UH6ibZuMyVuk8= -----END CERTIFICATE-----Generated at Sat Oct 24 07:14:36 2026 by rpki-client