$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa File: 3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa (raw, json) Hash identifier: RkD5lZrFIpmLxM4Q/7UN1Kxjgbm4ZbRRc0TLCso44T4= Subject key identifier: B8:C9:AA:D5:32:17:48:5B:8E:E0:E8:14:47:70:22:A7:05:06:17:6C Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584F9A68678278496483D8BB21C0 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 0 IP address blocks: 2607:fe80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:67:82:78:49:64:83:d8:bb:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=df4348aa-30be-4ace-9a8d-8b6410a558b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:56:13:da:68:95:ca:ec:da:63:16:34:6c: 07:1f:90:9a:a4:48:cd:b8:cd:cc:31:0d:a4:d4:f1: c8:04:de:3d:e3:21:90:c1:da:9d:13:0e:76:31:ed: c6:c1:01:b7:63:6e:48:49:b1:48:6f:7c:7c:58:36: 13:9a:85:81:9d:37:82:50:85:50:53:9b:e3:7c:4f: 55:c9:45:3e:85:51:f2:7b:d6:46:f6:63:dc:67:39: 17:88:85:ad:78:c6:60:ab:fe:66:b0:4c:e2:0a:b5: 28:11:67:99:d1:ad:cd:a6:0d:3a:9e:b6:06:35:ff: b6:a8:95:81:70:53:70:e8:fc:6f:13:f7:e2:6b:8c: 6b:a9:e8:5e:91:b3:82:5f:44:73:04:1c:73:45:fa: 64:8b:98:d0:66:65:ca:f5:67:aa:54:82:99:38:d0: 68:95:25:4c:d3:1d:f2:37:74:d7:8a:59:b7:42:4c: 46:86:07:13:87:fc:15:01:c9:37:52:d0:eb:0b:c2: ba:8d:05:9a:c8:49:3d:eb:3b:e2:cb:c5:0a:da:a1: 33:9f:54:ee:ae:f2:da:ad:94:b8:f7:b2:ad:f7:9e: df:2c:2b:f1:fa:98:20:89:0c:06:2b:07:ff:45:96: 31:68:91:5d:78:c0:44:f8:6c:b7:2a:2b:5c:69:20: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C9:AA:D5:32:17:48:5B:8E:E0:E8:14:47:70:22:A7:05:06:17:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:2d:3c:be:20:3e:8f:1f:7d:82:37:e7:36:e0:3a:1b:15:59: c9:ef:a9:b2:1e:a0:80:31:a0:b3:71:94:b9:73:0f:65:a7:00: b9:a0:a7:66:bc:f5:c9:b1:3f:5e:55:c2:db:25:b0:00:6f:ea: e7:16:ce:53:30:5f:71:59:d6:bc:d7:a1:62:d7:f9:21:aa:12: 30:b9:f6:08:a2:0c:ca:7a:a4:98:e0:2c:0d:12:d2:5f:29:7c: 1b:f2:b2:29:a2:63:ce:d8:d4:a7:f8:f8:af:3d:96:63:94:ae: 8f:4b:9a:eb:49:f5:ab:3c:f1:67:47:ae:80:a8:7c:ce:11:65: 99:86:e2:49:4a:29:02:b5:a5:c8:9a:b4:08:ad:5e:aa:1f:0e: 8a:e2:fc:a1:82:28:8c:94:72:93:7f:ba:ea:7d:c9:c2:74:87: e9:50:99:6c:2c:31:69:fe:1f:6a:45:4f:3e:ef:a6:80:23:ec: e2:93:0e:21:d1:0d:6c:ce:49:6a:f5:ab:96:2c:49:fb:13:88: 02:82:87:9d:89:24:97:c3:95:a7:b2:f8:4d:ba:dc:89:80:16: 38:ba:e9:4c:e5:19:66:ae:4d:8b:88:61:62:92:18:f8:8b:5f: be:78:46:b2:c2:d9:b2:00:0d:a6:7c:2a:ba:91:6a:74:b5:7f: 88:28:26:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+aaGeCeElkg9i7IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGY0MzQ4YWEtMzBiZS00YWNlLTlhOGQtOGI2NDEwYTU1OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW9WE9polcrs2mMWNGwHH5CapEjNuM3MMQ2k 1PHIBN494yGQwdqdEw52Me3GwQG3Y25ISbFIb3x8WDYTmoWBnTeCUIVQU5vjfE9V yUU+hVHye9ZG9mPcZzkXiIWteMZgq/5msEziCrUoEWeZ0a3Npg06nrYGNf+2qJWB cFNw6PxvE/fia4xrqehekbOCX0RzBBxzRfpki5jQZmXK9WeqVIKZONBolSVM0x3y N3TXilm3QkxGhgcTh/wVAck3UtDrC8K6jQWayEk96zviy8UK2qEzn1TurvLarZS4 97Kt957fLCvx+pggiQwGKwf/RZYxaJFdeMBE+Gy3KitcaSDgawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLjJqtUyF0hbjuDoFEdwIqcFBhdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzI5OGNjYjctM2U3Yi0z NGE5LTk1OTgtMzNmZGJiY2Q2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmLTy+ID6PH32CN+c24DobFVnJ76myHqCAMaCzcZS5cw9lpwC5oKdm vPXJsT9eVcLbJbAAb+rnFs5TMF9xWda816Fi1/khqhIwufYIogzKeqSY4CwNEtJf KXwb8rIpomPO2NSn+PivPZZjlK6PS5rrSfWrPPFnR66AqHzOEWWZhuJJSikCtaXI mrQIrV6qHw6K4vyhgiiMlHKTf7rqfcnCdIfpUJlsLDFp/h9qRU8+76aAI+zikw4h 0Q1szklq9auWLEn7E4gCgoediSSXw5WnsvhNutyJgBY4uulM5Rlmrk2LiGFikhj4 i1++eEaywtmyAA2mfCq6kWp0tX+IKCZE -----END CERTIFICATE-----Generated at Sat Oct 24 12:17:45 2026 by rpki-client