$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/d5e1c4cc-0e70-3173-9b13-7e9d08016e6e.roa File: d5e1c4cc-0e70-3173-9b13-7e9d08016e6e.roa (raw, json) Hash identifier: LqfxWms8ZxLLlrsOCJb67RPQIfpw8Kw2MG87LMr+8vw= Subject key identifier: 38:8B:22:20:3B:AB:D4:AC:57:AC:63:16:14:1F:35:5D:B1:F9:E1:70 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584F5A32CE3D0A101106C32C3000 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/d5e1c4cc-0e70-3173-9b13-7e9d08016e6e.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 62553 IP address blocks: 2602:f71e:72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ce:3d:0a:10:11:06:c3:2c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=bf7397bf-7740-41da-be16-d21eed8fe155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:23:0f:6c:5d:9d:41:c3:7f:b4:84:80:d5: e7:b8:1a:af:da:c1:fe:e5:49:1c:b2:9f:1d:40:3d: 79:1d:fb:22:b3:cc:74:fa:87:2d:4a:56:91:5c:e0: 63:c7:6e:3a:9f:76:d6:d5:b7:e7:a3:25:01:cc:a4: 6c:0b:2c:c9:a6:21:cf:f6:18:13:0f:8a:33:3c:f4: 49:20:49:0c:14:00:be:16:17:e6:15:ea:ef:cd:c6: 93:b8:39:50:5e:a0:a8:b7:8f:5b:96:65:95:50:89: 6e:f7:65:63:c6:42:e1:09:b8:fb:b3:e8:df:1b:e6: 7a:c7:68:fd:51:a4:97:a3:8c:39:3d:a2:66:35:e4: 29:09:a3:99:57:9f:45:f3:ab:f7:72:89:dc:e4:ce: 88:2c:c3:19:d4:73:3c:1f:cd:64:78:c0:de:e8:7e: d4:10:75:13:e3:bb:6f:88:ac:38:07:e4:ce:98:7b: c0:b1:15:57:51:cf:f2:13:7d:6f:35:5d:2d:0d:13: d0:5f:7a:f7:a7:73:df:03:d7:43:a2:73:0b:95:51: e8:af:27:65:d4:49:df:31:60:2e:ed:08:83:89:24: db:83:3a:01:64:38:7d:7d:0e:ea:fd:79:03:3c:a4: f5:7b:09:67:9d:07:91:31:88:69:2f:de:44:90:4e: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:22:20:3B:AB:D4:AC:57:AC:63:16:14:1F:35:5D:B1:F9:E1:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/d5e1c4cc-0e70-3173-9b13-7e9d08016e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:72::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a8:ca:5a:13:dc:7d:45:51:c3:81:de:b2:fe:64:9f:7c:35: 16:5d:2e:2f:8e:a9:ac:e6:48:6f:77:f3:72:f8:eb:da:80:f0: d4:7e:dd:87:4d:2f:f7:3d:97:06:1d:d7:78:d1:0c:9e:b9:78: 96:9a:13:36:51:60:f7:77:89:fc:6e:5d:67:ad:28:b2:94:df: 64:22:55:49:bb:59:b4:88:d4:34:52:b3:48:81:21:39:b5:af: ea:f7:61:3f:7f:6f:6e:e0:ab:44:2f:b2:16:73:a0:da:ae:fd: 43:d2:3a:b5:2f:6f:5b:ee:2e:43:8e:f0:62:52:28:8c:f5:31: 0e:ae:29:1d:a2:67:f9:b7:1a:d7:a9:82:0f:fe:1f:18:e4:7c: 77:17:f1:34:08:95:ee:37:29:9c:a0:58:3b:ef:78:1b:bd:78: c6:32:80:02:51:79:c9:02:cc:36:d5:08:b6:5f:78:1f:92:be: 38:cb:ef:4f:d3:70:94:cd:25:03:2c:a7:18:82:80:b7:9b:ca: cf:5f:11:ba:13:2d:a0:6f:fe:ba:a6:8c:64:d0:92:d2:4c:fa: 5e:1a:fb:33:fd:33:05:54:04:f9:a8:8f:40:bc:49:77:6f:c8: c0:98:34:52:a1:82:4f:16:7c:37:74:79:32:e1:cb:21:d6:45: f6:ca:a1:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9aMs49ChARBsMsMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmY3Mzk3YmYtNzc0MC00MWRhLWJlMTYtZDIxZWVkOGZlMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbAjD2xdnUHDf7SEgNXnuBqv2sH+5Ukcsp8d QD15Hfsis8x0+octSlaRXOBjx246n3bW1bfnoyUBzKRsCyzJpiHP9hgTD4ozPPRJ IEkMFAC+FhfmFervzcaTuDlQXqCot49blmWVUIlu92VjxkLhCbj7s+jfG+Z6x2j9 UaSXo4w5PaJmNeQpCaOZV59F86v3conc5M6ILMMZ1HM8H81keMDe6H7UEHUT47tv iKw4B+TOmHvAsRVXUc/yE31vNV0tDRPQX3r3p3PfA9dDonMLlVHorydl1EnfMWAu 7QiDiSTbgzoBZDh9fQ7q/XkDPKT1ewlnnQeRMYhpL95EkE77dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDiLIiA7q9SsV6xjFhQfNV2x+eFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvZDVlMWM0Y2MtMGU3MC0z MTczLTliMTMtN2U5ZDA4MDE2ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKmoyloT3H1FUcOB3rL+ZJ98NRZdLi+OqazmSG9383L469qA8NR+ 3YdNL/c9lwYd13jRDJ65eJaaEzZRYPd3ifxuXWetKLKU32QiVUm7WbSI1DRSs0iB ITm1r+r3YT9/b27gq0QvshZzoNqu/UPSOrUvb1vuLkOO8GJSKIz1MQ6uKR2iZ/m3 Gtepgg/+HxjkfHcX8TQIle43KZygWDvveBu9eMYygAJReckCzDbVCLZfeB+SvjjL 70/TcJTNJQMspxiCgLebys9fEboTLaBv/rqmjGTQktJM+l4a+zP9MwVUBPmoj0C8 SXdvyMCYNFKhgk8WfDd0eTLhyyHWRfbKoVE= -----END CERTIFICATE-----Generated at Thu Nov 5 13:02:15 2026 by rpki-client