$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa File: c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa (raw, json) Hash identifier: wGml7UDiTNoAe3YLUWKWZy+qumlD+Susnjmwwk2gUnc= Subject key identifier: 86:56:9C:34:64:65:96:2C:85:AF:21:79:1B:CB:F0:C3:40:36:0D:A5 Certificate issuer: /CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Certificate serial: 010D0C9F4328584F549D5AFACF2A9D2726A31E40 Authority key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 2602:f64d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5a:fa:cf:2a:9d:27:26:a3:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8f0cbcf4-3ff7-49d1-9511-c383e7bac51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:e6:ba:d4:eb:f3:6c:03:bd:71:9c:06:7e: 35:40:3c:f8:0b:ef:01:62:c4:96:d5:d7:27:1e:07: b7:aa:61:9c:5f:97:08:8e:32:1d:1f:a1:ee:93:9d: 2d:3b:57:c2:08:3d:5a:ba:9a:bc:d1:8a:04:98:bf: 47:21:bd:fc:dd:6a:5b:96:d1:43:65:dc:a3:0b:87: 4b:6a:0f:91:9a:5e:5a:c5:92:af:5b:ed:c4:5c:27: 97:79:e5:45:83:cd:b5:dd:38:a6:f8:1f:33:cd:c2: 01:ee:16:86:be:06:98:4f:68:18:c1:f6:d8:ec:c1: 94:aa:e8:92:1b:bd:20:89:df:49:25:bd:33:81:a5: 2a:55:66:f5:81:b3:35:1a:fb:f0:3e:8e:21:7e:54: 9e:80:aa:c0:a3:65:48:87:1a:47:fb:d9:a4:b6:a2: 58:96:e4:b5:1d:4b:37:cc:1f:81:9e:b3:62:b5:96: 86:31:e8:2b:1b:9b:36:6a:32:34:67:ae:46:b3:3a: 56:a7:99:ec:07:f2:df:af:68:fd:07:9a:93:8c:36: 55:3e:61:36:90:5f:0c:7f:f6:0d:5c:f1:16:cc:1a: d3:87:44:50:4c:f5:cd:8d:20:3d:66:51:02:f2:ad: a7:0d:ed:b9:3b:50:d8:e1:8f:70:94:69:bc:89:f2: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:9C:34:64:65:96:2C:85:AF:21:79:1B:CB:F0:C3:40:36:0D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/c5a41330-8548-3c78-bf7a-1429d1e6cb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl X509v3 Authority Key Identifier: keyid:1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f64d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:67:a2:c1:27:30:68:ba:07:93:1e:eb:e8:97:11:45:91:eb: 5a:45:e9:e9:4d:c3:03:cc:80:ea:7a:52:d8:6b:03:5b:14:fd: d1:1e:6a:29:1e:8a:f5:94:54:9a:c9:7f:70:a4:ab:c3:6d:ea: 51:53:31:06:6b:b3:24:87:e9:64:1b:24:a7:fe:73:a8:f6:f9: fd:1f:47:cb:b8:6c:b3:7a:40:72:78:22:39:c9:6b:b2:cc:ef: 0c:25:2d:12:6d:c4:ff:a9:41:12:99:fd:7c:01:fa:82:dd:d1: 38:a4:ef:cf:c9:8e:31:47:61:a3:56:ad:53:e2:68:ad:bf:63: 1d:6e:0e:57:5b:90:f1:50:70:e4:e6:e4:50:07:b7:7b:71:d1: dc:56:ab:d2:ff:4a:44:40:0b:81:02:27:79:61:68:a4:11:b0: e3:56:26:3d:fa:49:53:bf:c2:ad:5c:59:e5:cd:2e:f3:74:62: 97:08:00:7a:66:5a:00:f7:f9:a9:31:1b:76:e7:da:ab:68:4e: 98:c8:f6:b3:b8:44:bf:d4:65:c6:b2:36:1e:e2:77:d5:3a:19: 15:55:88:7f:95:ff:42:eb:00:a9:e8:d5:0c:bd:09:6f:54:9b: c7:46:e5:74:fd:c1:b8:10:91:e3:42:52:cc:0e:d3:c3:9c:c4: b2:24:5d:e2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9UnVr6zyqdJyajHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlNDAzYTEtOTE4NS00ZjVhLTk5MTAtNTA4OWM1MWY5 ZmMzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGYwY2JjZjQtM2ZmNy00OWQxLTk1MTEtYzM4M2U3YmFjNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbmutTr82wDvXGcBn41QDz4C+8BYsSW1dcn Hge3qmGcX5cIjjIdH6Huk50tO1fCCD1aupq80YoEmL9HIb383WpbltFDZdyjC4dL ag+Rml5axZKvW+3EXCeXeeVFg8213Tim+B8zzcIB7haGvgaYT2gYwfbY7MGUquiS G70gid9JJb0zgaUqVWb1gbM1GvvwPo4hflSegKrAo2VIhxpH+9mktqJYluS1HUs3 zB+BnrNitZaGMegrG5s2ajI0Z65GszpWp5nsB/Lfr2j9B5qTjDZVPmE2kF8Mf/YN XPEWzBrTh0RQTPXNjSA9ZlEC8q2nDe25O1DY4Y9wlGm8ifL6XwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIZWnDRkZZYsha8heRvL8MNANg2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82N2U0 MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5YzUxZjlmYzMvYzVhNDEzMzAtODU0OC0z Yzc4LWJmN2EtMTQyOWQxZTZjYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjdlNDAzYTEtOTE4NS00ZjVhLTk5 MTAtNTA4OWM1MWY5ZmMzLzY3ZTQwM2ExLTkxODUtNGY1YS05OTEwLTUwODljNTFm OWZjMy5jcmwwHwYDVR0jBBgwFoAUGlhOohDs22cDKHUDC8dgEqODgM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82N2U0MDNhMS05MTg1LTRmNWEtOTkxMC01MDg5 YzUxZjlmYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2TQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKmeiwScwaLoHkx7r6JcRRZHrWkXp6U3DA8yA6npS2GsDWxT90R5q KR6K9ZRUmsl/cKSrw23qUVMxBmuzJIfpZBskp/5zqPb5/R9Hy7hss3pAcngiOclr sszvDCUtEm3E/6lBEpn9fAH6gt3ROKTvz8mOMUdho1atU+Jorb9jHW4OV1uQ8VBw 5ObkUAe3e3HR3Far0v9KREALgQIneWFopBGw41YmPfpJU7/CrVxZ5c0u83RilwgA emZaAPf5qTEbdufaq2hOmMj2s7hEv9RlxrI2HuJ31ToZFVWIf5X/QusAqejVDL0J b1Sbx0bldP3BuBCR40JSzA7Tw5zEsiRd4g== -----END CERTIFICATE-----Generated at Sat Oct 10 14:20:33 2026 by rpki-client