$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: XNMDwGoPmbINnROOKM/OhSKLgLPDjLYoOtLSJmcWNms= Subject key identifier: 4F:E2:40:CE:05:D6:08:FF:B0:88:EC:0D:72:FC:54:02:22:6D:4F:67 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F4328584F71ED9FE8BE8CA51391C32C00 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:e8:be:8c:a5:13:91:c3:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=cf00ef00-2646-4024-ac74-b5a09f1e6267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:32:97:19:3c:32:e8:6e:17:6f:e4:21:27: 2f:22:a9:3c:42:b0:4d:09:7b:85:9e:ee:af:b5:df: ad:04:5f:17:42:1a:1f:9d:e5:fa:36:bc:57:2c:c1: 39:b0:bb:2e:91:c9:d9:59:b0:af:ea:3e:5a:93:ac: f1:e2:1a:d3:fa:eb:2a:df:f6:36:6f:d0:20:cb:18: b7:37:43:7f:df:5c:e2:e3:70:c7:69:df:ca:5e:9b: 59:21:78:d8:a6:86:15:1a:30:3d:ae:5c:46:fb:2c: 22:2a:22:50:5e:ea:b9:65:d1:aa:28:80:96:bf:47: dc:16:bf:47:a1:b1:50:0c:61:cd:11:40:12:94:3a: da:f8:2f:94:dc:4e:44:7a:34:e7:6c:55:73:a8:b5: ce:5d:07:a1:fd:18:e6:10:6e:53:6a:a7:55:ab:59: 10:2b:a5:36:2c:59:97:8c:f7:93:8e:07:c1:64:55: 95:8b:66:19:21:ca:19:a2:e7:93:ea:83:3a:1b:05: e4:4f:54:1a:78:ca:68:12:af:1f:30:85:45:65:b5: 01:42:f1:50:1c:0e:78:fe:56:61:f5:d0:87:eb:98: ef:cf:65:63:e2:f9:37:ba:c7:50:f6:90:96:5a:47: 9d:f8:a1:7e:31:e6:fd:0c:cb:5e:f7:16:52:84:fe: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E2:40:CE:05:D6:08:FF:B0:88:EC:0D:72:FC:54:02:22:6D:4F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c6:e3:91:c0:57:55:96:af:2e:33:98:59:5e:a0:76:cd:04: eb:bb:23:0e:c5:d7:e2:c2:c3:0d:b4:19:2d:7c:4e:b8:19:49: c6:56:fa:9a:be:66:1d:15:ce:10:38:4b:5b:30:a9:00:00:cb: da:f5:f2:24:d4:ac:c4:97:de:b7:8b:99:25:80:fd:54:90:d6: 0e:5e:42:d9:77:87:a2:60:7a:48:85:2f:a7:82:6d:d1:78:a1: 99:03:6b:29:09:f7:e4:7d:30:41:dc:fe:8b:e7:e4:f1:00:1d: 23:c3:18:55:bd:12:83:13:12:66:4c:32:24:59:42:b1:f0:39: 27:91:5a:c6:e6:2d:f9:f5:64:3e:04:72:37:81:cc:fc:bf:0e: 24:27:bc:c0:11:3b:2e:d3:6e:34:3b:96:9f:78:fa:75:d4:05: ef:fa:10:10:27:19:3d:98:0e:b9:48:96:b2:06:d7:ad:6d:27: 76:75:9b:ef:11:58:63:a0:b8:a2:8e:3a:ed:70:45:cf:8f:2d: ff:15:74:33:00:1a:4f:bf:95:5b:03:02:dd:72:52:06:a5:cd: 65:f0:74:f5:a0:56:1e:fb:fc:d0:78:cf:74:b9:27:5d:3c:15: a7:66:e7:4e:6e:a4:0d:48:99:cd:63:e8:57:0c:a9:74:99:5d: 89:83:40:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9x7Z/ovoylE5HDLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk Y2YwMGVmMDAtMjY0Ni00MDI0LWFjNzQtYjVhMDlmMWU2MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cgylxk8MuhuF2/kIScvIqk8QrBNCXuFnu6v td+tBF8XQhofneX6NrxXLME5sLsukcnZWbCv6j5ak6zx4hrT+usq3/Y2b9Agyxi3 N0N/31zi43DHad/KXptZIXjYpoYVGjA9rlxG+ywiKiJQXuq5ZdGqKICWv0fcFr9H obFQDGHNEUASlDra+C+U3E5EejTnbFVzqLXOXQeh/RjmEG5TaqdVq1kQK6U2LFmX jPeTjgfBZFWVi2YZIcoZoueT6oM6GwXkT1QaeMpoEq8fMIVFZbUBQvFQHA54/lZh 9dCH65jvz2Vj4vk3usdQ9pCWWked+KF+Meb9DMte9xZShP7QlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE/iQM4F1gj/sIjsDXL8VAIibU9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAexuORwFdVlq8uM5hZXqB2zQTruyMOxdfiwsMNtBktfE64GUnGVvqa vmYdFc4QOEtbMKkAAMva9fIk1KzEl963i5klgP1UkNYOXkLZd4eiYHpIhS+ngm3R eKGZA2spCffkfTBB3P6L5+TxAB0jwxhVvRKDExJmTDIkWUKx8DknkVrG5i359WQ+ BHI3gcz8vw4kJ7zAETsu0240O5afePp11AXv+hAQJxk9mA65SJayBtetbSd2dZvv EVhjoLiijjrtcEXPjy3/FXQzABpPv5VbAwLdclIGpc1l8HT1oFYe+/zQeM90uSdd PBWnZudObqQNSJnNY+hXDKl0mV2Jg0DQ -----END CERTIFICATE-----Generated at Sun Oct 25 23:09:36 2026 by rpki-client