$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/68a36804-ee54-38b2-a7cf-771926551b6f.roa File: 68a36804-ee54-38b2-a7cf-771926551b6f.roa (raw, json) Hash identifier: wR8c3RCgoazYCrTNQGNOWENTOUDIiqiCKstZvu5WeeQ= Subject key identifier: 84:12:EB:74:F6:40:48:39:77:09:B9:04:8E:A3:60:1E:52:CE:A9:13 Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584F8B5E7FB89C697D066EDB2E80 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/68a36804-ee54-38b2-a7cf-771926551b6f.roa Signing time: Sun 18 Oct 2026 15:43:13 +0000 ROA not before: Sun 18 Oct 2026 15:43:13 +0000 ROA not after: Sat 16 Jan 2027 16:43:13 +0000 asID: 10977 IP address blocks: 2602:f3ff::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:5e:7f:b8:9c:69:7d:06:6e:db:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: Oct 18 15:43:13 2026 GMT Not After : Jan 16 16:43:13 2027 GMT Subject: CN=4d5fe4f1-2a6e-4ced-8d05-9785ad2c3e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:75:0f:0c:45:66:e1:4b:71:bc:a1:c2:6f: 89:84:b7:c8:43:75:9c:4f:0c:d3:2f:b9:4c:5e:8d: 20:96:9f:74:ed:a0:ff:58:72:83:69:93:64:0d:b6: ea:70:81:49:86:5a:68:51:45:cf:32:13:2e:d4:a4: 60:9d:36:a4:bd:ae:cd:82:4c:fa:70:3c:bb:e7:20: af:e0:32:38:58:f1:ea:01:0b:cd:93:b8:10:8d:0e: 9c:8f:24:0c:e3:1b:ab:ec:95:e2:64:68:ff:5f:07: a5:82:ba:32:0d:05:92:e9:be:13:f4:33:31:3d:28: f1:1b:88:96:33:4c:de:c0:7c:d5:2d:8d:b9:a8:70: 5d:d6:a7:45:1e:a0:7d:33:d7:33:86:45:17:d0:70: 6f:00:1e:2a:63:f0:55:5d:84:d8:7a:85:c6:6e:d7: 2d:1b:d0:df:c2:f2:a4:c2:93:08:a3:a0:df:bf:db: c0:56:96:51:9a:fb:1f:14:1e:ed:94:70:46:0c:e5: 14:8c:73:0b:db:b8:25:4f:03:a8:cc:4d:5e:0e:24: 63:f7:15:c4:9f:75:2c:a7:f3:09:c2:66:77:f5:82: 0c:54:22:36:54:80:53:34:d5:77:b3:a2:93:88:8f: b8:e2:4e:3e:fb:14:3b:e2:00:a4:e5:1c:21:e8:68: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:EB:74:F6:40:48:39:77:09:B9:04:8E:A3:60:1E:52:CE:A9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/68a36804-ee54-38b2-a7cf-771926551b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3ff::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d1:8e:79:05:90:62:fa:14:3d:85:0e:61:11:90:b9:01:7a: 64:60:5f:82:df:fd:8c:78:5a:34:12:d0:c1:a3:e2:cb:7f:c7: de:c7:ee:e8:bd:40:08:53:04:18:d1:37:91:f7:33:4a:6d:53: b6:dd:24:66:31:3a:44:85:2a:04:bd:a4:4a:18:1e:1f:2a:98: 44:70:06:3b:5e:b1:5e:3a:f5:f7:63:fa:0d:c2:3a:b0:66:3e: b5:77:c5:e2:cc:d3:43:1a:21:ec:55:16:d9:5d:a2:38:65:84: 5b:cf:af:a6:e3:1a:96:22:9c:0f:41:ac:5a:4c:16:79:90:62: 51:27:df:80:46:69:d9:82:10:33:e8:e1:b9:fe:39:19:0b:05: c0:ef:e7:26:72:d6:a7:bd:d8:3b:7d:94:af:44:15:3a:bc:bd: b9:17:62:fb:fa:7b:9d:d7:e5:dc:52:77:78:0a:72:21:c9:bd: 09:58:da:1d:e1:9c:84:09:dc:e0:f6:2f:c5:99:d3:ce:fc:bc: 5f:39:2f:1c:31:2d:f1:77:24:c5:59:f8:cd:fe:44:4c:5c:91: cb:94:b0:11:89:27:6f:c9:f1:4c:9b:0f:bf:47:6f:18:26:7d: 08:9e:05:0f:15:0d:cf:0f:c7:51:ac:c8:1a:92:02:c9:37:a0: 14:ea:ad:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+LXn+4nGl9Bm7bLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MTAxODE1NDMxM1oXDTI3MDExNjE2NDMxM1owLzEtMCsGA1UEAxMk NGQ1ZmU0ZjEtMmE2ZS00Y2VkLThkMDUtOTc4NWFkMmMzZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpl1DwxFZuFLcbyhwm+JhLfIQ3WcTwzTL7lM Xo0glp907aD/WHKDaZNkDbbqcIFJhlpoUUXPMhMu1KRgnTakva7Ngkz6cDy75yCv 4DI4WPHqAQvNk7gQjQ6cjyQM4xur7JXiZGj/XwelgroyDQWS6b4T9DMxPSjxG4iW M0zewHzVLY25qHBd1qdFHqB9M9czhkUX0HBvAB4qY/BVXYTYeoXGbtctG9DfwvKk wpMIo6Dfv9vAVpZRmvsfFB7tlHBGDOUUjHML27glTwOozE1eDiRj9xXEn3Usp/MJ wmZ39YIMVCI2VIBTNNV3s6KTiI+44k4++xQ74gCk5Rwh6Gia1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIQS63T2QEg5dwm5BI6jYB5SzqkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvNjhhMzY4MDQtZWU1NC0z OGIyLWE3Y2YtNzcxOTI2NTUxYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLz/wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApNGOeQWQYvoUPYUOYRGQuQF6ZGBfgt/9jHhaNBLQwaPiy3/H3sfu 6L1ACFMEGNE3kfczSm1Ttt0kZjE6RIUqBL2kShgeHyqYRHAGO16xXjr192P6DcI6 sGY+tXfF4szTQxoh7FUW2V2iOGWEW8+vpuMaliKcD0GsWkwWeZBiUSffgEZp2YIQ M+jhuf45GQsFwO/nJnLWp73YO32Ur0QVOry9uRdi+/p7ndfl3FJ3eApyIcm9CVja HeGchAnc4PYvxZnTzvy8XzkvHDEt8XckxVn4zf5ETFyRy5SwEYknb8nxTJsPv0dv GCZ9CJ4FDxUNzw/HUazIGpICyTegFOqt/Q== -----END CERTIFICATE-----Generated at Sat Oct 31 08:39:25 2026 by rpki-client