$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/8839d93f-9dc7-3932-a981-8acccc9c3c31.roa File: 8839d93f-9dc7-3932-a981-8acccc9c3c31.roa (raw, json) Hash identifier: 7NTbdWs+zlagWXiS3SNThOuAgcpoKBs7MU7cl1m0q3I= Subject key identifier: 07:C5:9A:DB:D1:3A:39:E9:20:27:7B:1F:EF:0B:D3:7C:5E:96:B8:8A Certificate issuer: /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Certificate serial: 010D0C9F4328584F4C3D569F8B7830215DC2C2C0 Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/8839d93f-9dc7-3932-a981-8acccc9c3c31.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 402279 IP address blocks: 2602:f486:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:56:9f:8b:78:30:21:5d:c2:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4e97cebe-fce2-4f0b-8582-2cda39c9dd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:3f:ac:c2:dd:b5:af:72:68:2e:32:35:69: 90:a5:be:ce:68:d5:fe:2c:b7:51:69:38:0d:24:b7: 4e:10:a9:6c:81:4e:fa:35:f4:f5:e0:1c:f0:81:d7: 46:02:2e:c8:7a:0f:ca:96:68:04:f9:bd:22:47:ac: 55:9b:ad:df:a1:65:12:02:b3:4b:96:a9:1d:7b:e7: 16:bd:f6:11:5a:3f:f0:07:a9:78:3b:7b:f6:cf:8b: 4d:5f:0e:c2:86:58:24:9f:9b:85:69:e0:0f:af:11: 98:c7:f1:d0:3e:1f:62:2b:d0:22:81:e6:3e:bb:a4: 9c:4c:e7:d1:c4:6b:ac:2f:75:a0:e5:7a:95:77:e4: 00:59:ff:08:63:4a:38:27:11:05:70:e5:39:b0:7d: 35:09:c4:7f:eb:15:13:8d:af:aa:7f:89:a9:8e:fb: aa:80:90:48:79:8f:84:ac:e1:7b:e4:9d:ac:ff:c2: 45:5f:7c:05:7b:ae:63:27:7c:fc:44:33:26:bb:45: d3:8f:47:9b:fa:e4:78:ba:83:29:c5:2f:98:70:4a: b9:d7:3b:18:fc:71:09:85:ac:ae:20:45:66:27:37: 1b:cb:3e:c3:fc:e1:49:22:90:a9:73:ee:49:93:74: 87:9d:e6:9f:5c:67:9a:29:97:32:e4:e5:38:bd:d7: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C5:9A:DB:D1:3A:39:E9:20:27:7B:1F:EF:0B:D3:7C:5E:96:B8:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/8839d93f-9dc7-3932-a981-8acccc9c3c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl X509v3 Authority Key Identifier: keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer sbgp-ipAddrBlock: critical IPv6: 2602:f486:fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1f:27:4a:c9:76:aa:24:c1:a1:b1:00:9e:59:ab:80:b0:98: dd:71:27:d8:52:19:e5:f0:30:f0:1a:65:4e:b2:60:d9:5d:8c: c9:54:cb:52:34:89:e0:60:1b:cd:51:63:0a:fa:0c:d9:38:f1: 4b:81:16:cc:18:75:0f:1a:37:87:5f:95:5b:a7:26:1d:45:ad: dd:18:d8:96:24:db:2a:cb:1b:97:ee:0e:b7:60:84:65:c7:34: b7:b3:a3:e2:a5:3a:58:d5:66:af:ce:43:a0:06:0b:24:33:8e: 07:4b:75:11:e7:f2:5b:c6:11:89:9f:21:81:b8:a6:fa:9f:98: 34:67:56:2b:f5:58:d4:e8:3b:3f:bb:72:29:53:b9:89:58:22: 0c:34:19:cf:11:dc:7c:7e:bd:07:33:53:87:ae:29:f7:32:e4: 38:4d:e7:eb:fb:22:c8:e9:e4:8e:7d:8f:fa:5c:69:a4:cd:a7: f8:4c:03:bd:f4:32:21:f8:11:c3:8a:db:98:bb:49:ac:21:8c: ca:25:c9:3f:4e:2b:8b:d4:8e:e0:4e:1b:82:03:1e:92:c8:21: 1d:2e:b0:fd:25:cc:f9:db:5d:85:e8:db:40:1a:31:f4:ca:9b: e9:be:dd:de:d1:c9:54:1f:41:5e:f8:6b:f6:41:46:a9:e6:a9: 72:ba:91:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVafi3gwIV3CwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1 NjM3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGU5N2NlYmUtZmNlMi00ZjBiLTg1ODItMmNkYTM5YzlkZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspI/rMLdta9yaC4yNWmQpb7OaNX+LLdRaTgN JLdOEKlsgU76NfT14BzwgddGAi7Ieg/KlmgE+b0iR6xVm63foWUSArNLlqkde+cW vfYRWj/wB6l4O3v2z4tNXw7Chlgkn5uFaeAPrxGYx/HQPh9iK9AigeY+u6ScTOfR xGusL3Wg5XqVd+QAWf8IY0o4JxEFcOU5sH01CcR/6xUTja+qf4mpjvuqgJBIeY+E rOF75J2s/8JFX3wFe65jJ3z8RDMmu0XTj0eb+uR4uoMpxS+YcEq51zsY/HEJhayu IEVmJzcbyz7D/OFJIpCpc+5Jk3SHneafXGeaKZcy5OU4vdcRJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfFmtvROjnpICd7H+8L03xelriKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvODgzOWQ5M2YtOWRjNy0z OTMyLWE5ODEtOGFjY2NjOWMzYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2 NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi YjFhNjU2MzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0hgD9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEfJ0rJdqokwaGxAJ5Zq4CwmN1xJ9hSGeXwMPAaZU6yYNldjMlU y1I0ieBgG81RYwr6DNk48UuBFswYdQ8aN4dflVunJh1Frd0Y2JYk2yrLG5fuDrdg hGXHNLezo+KlOljVZq/OQ6AGCyQzjgdLdRHn8lvGEYmfIYG4pvqfmDRnViv1WNTo Oz+7cilTuYlYIgw0Gc8R3Hx+vQczU4euKfcy5DhN5+v7Isjp5I59j/pcaaTNp/hM A730MiH4EcOK25i7SawhjMolyT9OK4vUjuBOG4IDHpLIIR0usP0lzPnbXYXo20Aa MfTKm+m+3d7RyVQfQV74a/ZBRqnmqXK6kaM= -----END CERTIFICATE-----Generated at Sat Oct 24 20:45:14 2026 by rpki-client