$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa File: 861d8358-f133-3906-ac78-912037ba237c.roa (raw, json) Hash identifier: on94hW/2mHqptP7N0HIHzCzm4dylhVm4puVlk796meo= Subject key identifier: 88:0D:1D:67:7E:85:20:89:09:95:6F:6E:23:1E:ED:AA:A1:F6:67:BB Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584EF44CCCF7C9F8C6BC63C74380 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 215172 IP address blocks: 2602:f3ff::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cc:f7:c9:f8:c6:bc:63:c7:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=4a6cdcf3-e0e1-47b6-855f-1c2d89e491be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:23:00:6a:6b:3e:2d:eb:e3:8d:a6:36:91: 46:db:b4:c9:5a:73:15:aa:5d:b5:36:cd:ac:5f:c5: 23:7b:9a:18:89:b3:01:98:7f:f4:69:a1:d7:7c:e0: a3:17:3c:fd:92:b3:3e:83:61:8d:b7:f0:99:97:f2: 28:10:52:f9:61:a7:c6:2e:3e:b1:f9:b2:6c:a6:46: ff:83:24:36:cd:bc:87:74:74:01:29:89:43:7e:20: bc:00:98:69:d6:fa:9f:8f:a4:de:5f:6b:bc:94:b5: 04:f6:4b:6c:4e:63:b7:3b:7e:f3:c6:46:49:ec:8a: c7:c9:69:31:16:51:62:5f:56:4c:78:72:0c:34:02: 05:40:7f:49:60:a7:2c:0c:62:0e:c8:cd:fd:57:6b: 16:ca:45:c1:e3:0f:72:1c:6c:21:ff:ad:b2:88:08: 38:6d:89:8b:da:9f:a0:66:7d:6a:1f:66:57:d3:b7: ad:86:66:60:de:cb:89:45:60:b5:ba:17:22:31:14: 96:73:5b:e2:3a:cf:02:bf:23:07:89:5d:8e:8a:52: 05:ad:b7:37:eb:37:c6:5f:9a:59:64:08:79:13:a5: 31:5f:1e:74:90:1f:4a:42:e0:2a:1e:c3:8d:49:37: 2c:54:92:cc:c7:f1:40:1f:df:cb:98:ca:a1:f5:3b: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:1D:67:7E:85:20:89:09:95:6F:6E:23:1E:ED:AA:A1:F6:67:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3ff::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:38:2e:e2:ac:3b:02:95:09:59:0d:e9:ea:a4:31:9c:2e:2f: ce:d4:15:95:2f:dd:79:74:b4:b1:5e:06:2b:17:df:37:b0:68: d5:cf:08:09:d3:84:e2:11:3d:4d:d8:1a:20:3e:00:e2:bd:70: d2:1b:65:54:97:f5:19:0d:81:9b:19:5f:87:21:14:ea:ce:54: 30:f3:01:02:52:6a:e6:86:49:da:85:0c:fd:9e:7c:75:81:4d: 09:2f:8a:05:97:b1:67:b8:3d:e9:03:00:d3:5a:ac:e9:bc:9a: e3:5b:7f:0d:6b:df:02:fc:5f:5a:59:50:d7:60:c9:5f:ea:3d: e0:03:15:37:fd:02:41:4a:05:ba:7d:41:32:b9:2b:d6:84:5e: 8e:b1:80:3d:8b:1e:a5:27:b0:99:8f:c5:cd:29:07:6a:ac:ea: c7:a5:9f:d8:f1:df:04:4c:03:69:e5:0e:54:2f:7b:a5:bd:ce: 99:ce:a1:1d:f6:e7:32:47:f3:e9:96:61:9b:b2:75:69:3d:ec: 75:3c:2a:ba:9c:3c:f7:11:c5:b4:e0:09:78:07:40:06:66:df: a0:b7:23:59:d8:23:4d:f3:14:f9:b6:2f:ea:11:bc:94:29:c3: 37:04:6b:81:fe:29:c7:c3:1f:00:a4:cf:07:6e:af:5d:35:b1: b3:a3:4f:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TMz3yfjGvGPHQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NGE2Y2RjZjMtZTBlMS00N2I2LTg1NWYtMWMyZDg5ZTQ5MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyMjAGprPi3r442mNpFG27TJWnMVql21Ns2s X8Uje5oYibMBmH/0aaHXfOCjFzz9krM+g2GNt/CZl/IoEFL5YafGLj6x+bJspkb/ gyQ2zbyHdHQBKYlDfiC8AJhp1vqfj6TeX2u8lLUE9ktsTmO3O37zxkZJ7IrHyWkx FlFiX1ZMeHIMNAIFQH9JYKcsDGIOyM39V2sWykXB4w9yHGwh/62yiAg4bYmL2p+g Zn1qH2ZX07ethmZg3suJRWC1uhciMRSWc1viOs8CvyMHiV2OilIFrbc36zfGX5pZ ZAh5E6UxXx50kB9KQuAqHsONSTcsVJLMx/FAH9/LmMqh9TsZwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgNHWd+hSCJCZVvbiMe7aqh9me7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvODYxZDgzNTgtZjEzMy0z OTA2LWFjNzgtOTEyMDM3YmEyMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgLz/wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGs4LuKsOwKVCVkN6eqkMZwuL87UFZUv3Xl0tLFeBisX3zewaNXP CAnThOIRPU3YGiA+AOK9cNIbZVSX9RkNgZsZX4chFOrOVDDzAQJSauaGSdqFDP2e fHWBTQkvigWXsWe4PekDANNarOm8muNbfw1r3wL8X1pZUNdgyV/qPeADFTf9AkFK Bbp9QTK5K9aEXo6xgD2LHqUnsJmPxc0pB2qs6seln9jx3wRMA2nlDlQve6W9zpnO oR325zJH8+mWYZuydWk97HU8KrqcPPcRxbTgCXgHQAZm36C3I1nYI03zFPm2L+oR vJQpwzcEa4H+KcfDHwCkzwdur101sbOjT/s= -----END CERTIFICATE-----Generated at Mon Aug 31 10:38:45 2026 by rpki-client