$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/a8bf0391-538a-3ffc-aabd-a391990bb14b.roa File: a8bf0391-538a-3ffc-aabd-a391990bb14b.roa (raw, json) Hash identifier: cSsj/OX4LDXrYAXHZfbJnKDWBCc/4kJb4/qrVRIvBaQ= Subject key identifier: 09:4E:DB:10:F5:6E:0B:51:62:DB:DB:0E:0B:82:DE:A2:EB:1A:40:88 Certificate issuer: /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9 Certificate serial: 010D0C9F4328584F99526769FC1C9A763494E780 Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/a8bf0391-538a-3ffc-aabd-a391990bb14b.roa Signing time: Fri 23 Oct 2026 15:40:10 +0000 ROA not before: Fri 23 Oct 2026 15:40:10 +0000 ROA not after: Thu 21 Jan 2027 16:40:10 +0000 asID: 63129 IP address blocks: 2602:f87f:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:52:67:69:fc:1c:9a:76:34:94:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9 Validity Not Before: Oct 23 15:40:10 2026 GMT Not After : Jan 21 16:40:10 2027 GMT Subject: CN=09963d39-0dc2-4157-aabc-0d241c2bda1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:7a:4a:5c:ef:2f:30:ce:78:8a:ff:7d:7c: 09:5d:65:96:69:06:b1:1d:3e:d8:57:91:fe:b1:6e: 08:f2:52:72:77:5c:a2:f2:44:60:74:0b:aa:e5:79: 1e:3c:9e:07:60:8b:47:06:76:26:e2:55:23:0c:f9: 56:e8:de:9b:d5:1f:78:d6:48:bf:6e:70:d3:99:ba: e8:98:41:97:e8:ea:2d:d1:90:15:60:af:f8:0c:53: 79:af:a2:a5:7a:16:8f:01:bf:f3:6e:b8:5e:57:9f: f3:4a:25:e0:5b:5f:76:0a:27:60:7f:84:52:b1:14: 3d:5a:61:ed:9a:c4:5c:20:4c:fc:f4:e3:3b:a2:4d: e2:5e:ed:7a:10:60:d2:25:94:4f:9d:2d:97:29:72: 37:ff:e5:3a:9c:f2:a1:d1:0f:03:b6:cd:aa:7a:8f: df:e2:6f:83:02:ec:e3:cb:45:38:77:eb:bb:fb:3b: 1a:f1:0e:9f:04:8d:a1:dd:dc:a7:47:31:c0:47:56: b8:94:31:49:d8:20:74:c1:28:b6:63:72:52:64:ae: 9a:e2:5f:ea:34:9d:3d:21:1e:09:ff:f5:b3:52:fc: 16:0c:e5:b2:5d:46:bd:44:d2:da:f5:bf:9a:5b:d0: 18:17:09:f8:61:d6:82:c8:cd:87:60:59:8f:60:64: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:DB:10:F5:6E:0B:51:62:DB:DB:0E:0B:82:DE:A2:EB:1A:40:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/a8bf0391-538a-3ffc-aabd-a391990bb14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl X509v3 Authority Key Identifier: keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f87f:5000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:69:f1:a4:60:83:f4:16:89:d0:a6:f9:d3:1b:ee:61:cf:3b: 1a:93:ba:28:36:25:4d:74:a5:55:83:8b:56:05:0a:2c:63:65: c6:b9:c9:c0:08:3b:04:28:74:7f:04:7f:39:6d:d6:cf:70:b6: c8:a9:00:da:61:5c:44:39:19:cf:31:be:ce:1d:aa:bf:e5:28: 60:79:55:45:06:78:b2:40:b5:4c:5f:a6:b8:b9:19:97:14:74: 9a:29:cb:c7:4e:13:84:00:f1:6b:40:23:d6:a9:93:3f:4c:52: 2f:38:1a:a6:2e:7b:e3:8d:fd:5e:b9:ff:ad:68:d5:ee:f4:71: 9b:90:58:d8:27:f2:93:ba:02:82:1c:5a:9a:92:d2:fd:e8:0d: 0e:03:e9:33:07:24:6c:83:1e:89:a0:0e:5f:1e:af:61:ab:d0: 64:1a:0d:e3:91:5b:7f:ab:d0:ae:2e:db:34:5c:b6:ed:5b:fa: 11:60:92:79:f1:34:12:51:91:2b:06:9e:3a:af:58:e2:f8:48: 19:69:11:d0:17:2d:02:4c:93:1a:64:8b:80:d4:98:1d:e7:29: 9d:33:c4:b0:4b:29:9e:f2:2f:b5:5f:a5:61:3f:7f:f9:1f:c3: 7b:e3:4b:38:ee:53:38:1c:9c:c0:9c:9d:6f:a6:2d:f3:3c:79: d1:94:58:53 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+ZUmdp/ByadjSU54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk N2E5MB4XDTI2MTAyMzE1NDAxMFoXDTI3MDEyMTE2NDAxMFowLzEtMCsGA1UEAxMk MDk5NjNkMzktMGRjMi00MTU3LWFhYmMtMGQyNDFjMmJkYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiZ6SlzvLzDOeIr/fXwJXWWWaQaxHT7YV5H+ sW4I8lJyd1yi8kRgdAuq5XkePJ4HYItHBnYm4lUjDPlW6N6b1R941ki/bnDTmbro mEGX6Oot0ZAVYK/4DFN5r6KlehaPAb/zbrheV5/zSiXgW192Cidgf4RSsRQ9WmHt msRcIEz89OM7ok3iXu16EGDSJZRPnS2XKXI3/+U6nPKh0Q8Dts2qeo/f4m+DAuzj y0U4d+u7+zsa8Q6fBI2h3dynRzHAR1a4lDFJ2CB0wSi2Y3JSZK6a4l/qNJ09IR4J //WzUvwWDOWyXUa9RNLa9b+aW9AYFwn4YdaCyM2HYFmPYGQG+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAlO2xD1bgtRYtvbDguC3qLrGkCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvYThiZjAzOTEtNTM4YS0z ZmZjLWFhYmQtYTM5MTk5MGJiMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5 M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji NzgyYmQ3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4f1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALGnxpGCD9BaJ0Kb50xvuYc87GpO6KDYlTXSlVYOLVgUKLGNlxrnJ wAg7BCh0fwR/OW3Wz3C2yKkA2mFcRDkZzzG+zh2qv+UoYHlVRQZ4skC1TF+muLkZ lxR0minLx04ThADxa0Aj1qmTP0xSLzgapi574439Xrn/rWjV7vRxm5BY2Cfyk7oC ghxampLS/egNDgPpMwckbIMeiaAOXx6vYavQZBoN45Fbf6vQri7bNFy27Vv6EWCS efE0ElGRKwaeOq9Y4vhIGWkR0BctAkyTGmSLgNSYHecpnTPEsEspnvIvtV+lYT9/ +R/De+NLOO5TOBycwJydb6Yt8zx50ZRYUw== -----END CERTIFICATE-----Generated at Sat Oct 31 08:39:16 2026 by rpki-client