$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/96c24f96-3b92-3f96-aca8-919610c5cfe2.roa File: 96c24f96-3b92-3f96-aca8-919610c5cfe2.roa (raw, json) Hash identifier: QpmLFjQbsRQfj80rHO16UfHM13Mi48S5PVuGOXE2tuM= Subject key identifier: B9:43:CA:CE:7A:A4:79:46:14:1B:1B:EA:2A:D3:21:62:F9:64:C9:D1 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584F9D6699315D9D971C4EE6BA40 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/96c24f96-3b92-3f96-aca8-919610c5cfe2.roa Signing time: Sun 25 Oct 2026 02:44:05 +0000 ROA not before: Sun 25 Oct 2026 02:44:05 +0000 ROA not after: Sat 23 Jan 2027 02:36:29 +0000 asID: 6589 IP address blocks: 2602:2b7:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:66:99:31:5d:9d:97:1c:4e:e6:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 25 02:44:05 2026 GMT Not After : Jan 23 02:36:29 2027 GMT Subject: CN=8db82b92-c2aa-4bef-8e1e-4ee934400852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:ae:85:a0:2f:55:08:cf:16:1c:d4:1b:68: 36:59:eb:f5:f0:ad:41:90:22:d0:a9:8a:a8:54:3a: ab:f7:24:e3:28:15:a3:c1:d3:3c:dc:dd:3e:bc:44: 13:46:4f:11:35:d7:42:a6:6c:aa:a7:77:7f:6e:a2: 87:eb:09:1b:e1:18:0d:a5:48:16:47:49:fa:5d:88: b1:45:d9:fe:1c:3c:52:0e:ed:92:76:1e:64:7d:a1: 08:06:ea:a0:e3:d7:44:bf:74:f5:68:19:95:e4:be: 3e:18:72:f4:ed:fb:12:b8:7f:96:5d:77:70:9e:26: 75:64:1b:48:97:4d:31:5f:04:09:9c:f6:8e:de:f9: 9c:9c:68:85:99:11:c8:74:ba:5a:7a:de:36:7a:22: 87:28:e0:1f:6c:d1:9d:13:b7:0d:e6:29:24:54:be: 92:19:63:46:1e:df:fe:23:3b:d1:c7:37:4f:85:7c: 5d:04:46:03:25:35:3a:29:d0:fc:8a:f2:9c:86:99: 51:b2:cd:44:c9:fe:19:39:9c:fc:07:a3:bd:23:d4: ab:e7:4e:60:84:cd:3e:4f:69:2e:7a:c3:c2:14:87: 18:69:85:44:26:dd:47:94:cb:d0:3f:77:ad:da:f4: d3:df:64:41:12:e5:a4:7b:13:27:c4:b0:1b:57:57: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:CA:CE:7A:A4:79:46:14:1B:1B:EA:2A:D3:21:62:F9:64:C9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/96c24f96-3b92-3f96-aca8-919610c5cfe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv6: 2602:2b7:c14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bf:49:44:b3:e4:0a:d0:91:36:df:f9:2c:41:56:b1:92:f5: 07:9d:98:d5:c3:f2:59:f7:fb:16:26:36:2b:15:5f:d4:57:24: a6:6c:03:c9:bc:4e:a8:da:bd:39:9d:fc:ec:84:f1:c2:6f:3c: 78:75:3a:75:81:8b:a8:e9:28:63:c6:32:86:6d:e8:ec:f9:9d: d0:14:1e:98:ab:3e:01:9f:9b:98:3e:7d:b3:78:42:d9:74:78: a2:11:ea:64:5c:bd:fa:05:58:b6:a0:38:1e:7f:6c:ed:e3:d4: af:89:01:54:88:9c:b3:1a:f4:65:af:37:69:90:48:e1:5a:93: 5d:7a:79:e6:72:65:43:55:03:7c:be:90:8d:73:c9:0b:09:b0: b5:f1:2a:5f:20:59:aa:ab:09:ba:1c:7a:23:f4:79:0c:69:52: 80:b7:95:bb:ab:5c:56:98:77:42:06:a5:7b:90:ab:13:46:51: 56:4e:05:58:b1:c5:0a:a2:be:3b:29:f3:0e:ea:c2:e2:de:52: a8:5a:5d:a6:79:5a:3e:89:e4:06:ac:d5:66:11:aa:81:be:8b: 53:65:f5:1f:88:dd:a1:e9:28:f6:ab:ea:24:5e:76:26:00:cb: 75:f9:c7:e7:1a:a6:95:32:6f:33:bc:23:d6:d9:a0:a5:22:ba: 4c:c9:67:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+dZpkxXZ2XHE7mukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI2MTAyNTAyNDQwNVoXDTI3MDEyMzAyMzYyOVowLzEtMCsGA1UEAxMk OGRiODJiOTItYzJhYS00YmVmLThlMWUtNGVlOTM0NDAwODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHCuhaAvVQjPFhzUG2g2Wev18K1BkCLQqYqo VDqr9yTjKBWjwdM83N0+vEQTRk8RNddCpmyqp3d/bqKH6wkb4RgNpUgWR0n6XYix Rdn+HDxSDu2Sdh5kfaEIBuqg49dEv3T1aBmV5L4+GHL07fsSuH+WXXdwniZ1ZBtI l00xXwQJnPaO3vmcnGiFmRHIdLpaet42eiKHKOAfbNGdE7cN5ikkVL6SGWNGHt/+ IzvRxzdPhXxdBEYDJTU6KdD8ivKchplRss1Eyf4ZOZz8B6O9I9Sr505ghM0+T2ku esPCFIcYaYVEJt1HlMvQP3et2vTT32RBEuWkexMnxLAbV1clwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLlDys56pHlGFBsb6irTIWL5ZMnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvOTZjMjRmOTYtM2I5Mi0z Zjk2LWFjYTgtOTE5NjEwYzVjZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwwU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIC/SUSz5ArQkTbf+SxBVrGS9QedmNXD8ln3+xYmNisVX9RXJKZs A8m8TqjavTmd/OyE8cJvPHh1OnWBi6jpKGPGMoZt6Oz5ndAUHpirPgGfm5g+fbN4 Qtl0eKIR6mRcvfoFWLagOB5/bO3j1K+JAVSInLMa9GWvN2mQSOFak116eeZyZUNV A3y+kI1zyQsJsLXxKl8gWaqrCboceiP0eQxpUoC3lburXFaYd0IGpXuQqxNGUVZO BVixxQqivjsp8w7qwuLeUqhaXaZ5Wj6J5Aas1WYRqoG+i1Nl9R+I3aHpKPar6iRe diYAy3X5x+cappUybzO8I9bZoKUiukzJZ14= -----END CERTIFICATE-----Generated at Tue Oct 27 20:50:08 2026 by rpki-client