$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa File: 06a378f5-3b42-3d66-bdd7-278251c6fa98.roa (raw, json) Hash identifier: 7OqysUYZ1NiUXWRcOrpeNmqVFWmuCvdLfdQMmfu1eI0= Subject key identifier: D4:F1:B9:FE:60:DE:52:DB:F1:4C:5D:3D:2F:FD:BF:5F:23:06:FA:CE Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584F8F3DC7F2B92021989A35E630 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8111 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c7:f2:b9:20:21:98:9a:35:e6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=6aaef15b-b752-4365-a467-a23b45e3c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:8d:d4:c1:e1:d0:24:70:a1:69:00:7e:23: 31:7b:96:ac:0f:2c:53:93:de:8a:bc:17:44:8e:b6: cf:a5:d1:bd:01:68:e4:7d:75:ce:58:a7:17:f3:d5: 52:e4:81:70:cc:7b:c1:7c:92:f6:a0:cf:d6:e2:7a: 1e:69:eb:fe:7b:9c:ef:61:32:9a:23:57:a6:a4:1a: 44:9c:bf:ca:1d:75:27:8d:1a:eb:65:4a:05:53:54: 16:87:63:bd:d1:70:2c:97:9c:68:93:b0:c2:30:01: c6:1c:09:bf:be:fc:3c:70:ce:c6:84:bf:3a:00:ed: 49:a2:e5:29:cc:d0:0a:03:0d:0e:4d:b1:03:5f:63: 72:8d:a1:8a:f9:23:67:34:e0:bb:a0:32:01:36:31: bc:fc:95:70:bb:cf:54:96:bc:36:df:ee:ec:82:61: e3:5e:5f:0b:2f:c1:a5:08:0d:40:67:13:5f:49:c1: 38:13:fa:d6:cc:ff:2f:f4:53:d6:5d:8e:16:81:35: 56:44:fc:c8:c9:dd:9e:35:e2:66:c3:5c:9d:c0:94: f3:90:ec:cb:5c:07:56:d4:a9:92:f9:73:2f:84:ec: b2:7f:7f:a6:a5:aa:33:68:17:aa:ad:21:6b:a3:ad: 06:0e:b9:ff:09:31:f4:55:b4:05:35:79:7b:03:93: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F1:B9:FE:60:DE:52:DB:F1:4C:5D:3D:2F:FD:BF:5F:23:06:FA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:82:3d:9f:8a:35:4b:7a:61:89:f2:90:8b:41:a7:b2:3b:45: 60:cd:c9:eb:ea:ec:c1:73:0a:46:59:cc:05:3d:77:d1:e6:63: 69:c8:d2:72:00:e1:15:71:a0:f7:90:63:2c:97:75:af:18:d1: de:fd:dd:1f:c6:8d:77:61:9c:e1:24:d6:dd:b3:d0:6c:32:59: 42:72:4a:d9:eb:d2:e6:7c:48:11:57:a1:5f:98:d7:5d:e5:88: 29:6f:ca:ec:ed:c5:6c:51:e9:59:48:e8:3d:60:aa:60:e1:89: 0f:6d:18:0d:2b:57:d8:8b:2e:5a:0a:59:92:2e:eb:b2:d8:90: c3:3e:e6:9b:9b:5d:7d:66:5e:5a:0b:f5:bf:e0:bc:19:8f:3b: fd:23:96:5f:f6:9d:26:da:40:26:0e:3a:99:af:2a:53:19:6c: d0:7b:8b:6f:25:23:62:2f:8a:dd:84:c7:ab:37:0e:40:de:30: 4a:83:60:0c:59:bd:fd:8a:7f:c0:e5:4c:ec:26:97:8e:6b:8f: 4e:ed:b6:de:2b:fb:b9:6b:3e:0d:55:14:d9:bb:09:a3:e5:ae: 39:67:55:3b:2c:68:29:86:66:00:e8:b7:4a:fb:1a:44:cc:48: c3:2c:68:55:1b:4a:61:ba:3b:9c:18:09:f5:17:bd:54:fd:dc: 96:6b:1b:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+PPcfyuSAhmJo15jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NmFhZWYxNWItYjc1Mi00MzY1LWE0NjctYTIzYjQ1ZTNjNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwCN1MHh0CRwoWkAfiMxe5asDyxTk96KvBdE jrbPpdG9AWjkfXXOWKcX89VS5IFwzHvBfJL2oM/W4noeaev+e5zvYTKaI1empBpE nL/KHXUnjRrrZUoFU1QWh2O90XAsl5xok7DCMAHGHAm/vvw8cM7GhL86AO1JouUp zNAKAw0OTbEDX2NyjaGK+SNnNOC7oDIBNjG8/JVwu89Ulrw23+7sgmHjXl8LL8Gl CA1AZxNfScE4E/rWzP8v9FPWXY4WgTVWRPzIyd2eNeJmw1ydwJTzkOzLXAdW1KmS +XMvhOyyf3+mpaozaBeqrSFro60GDrn/CTH0VbQFNXl7A5Pt1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTxuf5g3lLb8UxdPS/9v18jBvrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMDZhMzc4ZjUtM2I0Mi0z ZDY2LWJkZDctMjc4MjUxYzZmYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFeCPZ+KNUt6YYnykItBp7I7RWDNyevq7MFzCkZZzAU9d9HmY2nI 0nIA4RVxoPeQYyyXda8Y0d793R/GjXdhnOEk1t2z0GwyWUJyStnr0uZ8SBFXoV+Y 113liClvyuztxWxR6VlI6D1gqmDhiQ9tGA0rV9iLLloKWZIu67LYkMM+5pubXX1m XloL9b/gvBmPO/0jll/2nSbaQCYOOpmvKlMZbNB7i28lI2Ivit2Ex6s3DkDeMEqD YAxZvf2Kf8DlTOwml45rj07ttt4r+7lrPg1VFNm7CaPlrjlnVTssaCmGZgDot0r7 GkTMSMMsaFUbSmG6O5wYCfUXvVT93JZrG2I= -----END CERTIFICATE-----Generated at Sun Nov 1 14:40:21 2026 by rpki-client