$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa File: e6589685-287e-39e0-a7eb-0aa709e301c6.roa (raw, json) Hash identifier: Ku9EutKrrg+tnzrwKeXtPrIGF+mzm6MdqiKY62cHf8s= Subject key identifier: 9E:7A:BB:06:3C:8F:0E:92:D1:CB:A0:4A:9A:62:89:63:18:28:84:38 Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F4328584F9BCDF459385605739D0A9580 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 21790 IP address blocks: 2602:81a:4000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f4:59:38:56:05:73:9d:0a:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=ba308739-88ca-4ba0-a481-c8d53da5c91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:eb:2e:22:3c:f5:a0:0e:63:a6:ea:f1:b7: 30:96:9f:50:cb:84:fb:2a:35:fd:09:62:f4:ce:aa: 31:90:1e:95:93:bc:d6:b4:dd:d0:62:64:69:71:91: dd:3f:0a:cc:02:df:4b:1b:dc:98:2b:5f:de:12:80: bb:6e:79:90:2c:e1:ea:8f:68:72:13:9b:94:5b:24: 5c:ff:f4:70:31:5a:57:04:05:d0:6c:fd:21:ce:8e: f0:c4:49:2e:f3:ed:09:8a:12:c6:aa:45:eb:54:d1: d9:2c:50:7b:f8:6a:8a:43:ea:f9:ee:d6:13:5a:f3: e4:f7:89:55:0c:3d:e2:87:78:bd:f1:e2:63:18:ac: 73:fe:ad:2e:b7:c9:15:6f:b6:5a:21:74:9c:71:64: 89:08:ef:d1:fa:73:07:a4:bd:19:57:37:7a:53:74: 51:00:35:e0:84:dc:dc:f8:d3:ff:09:40:88:5e:a2: 5f:d6:0b:aa:89:dc:24:6e:02:bd:e6:9c:9e:3c:dd: a1:83:59:c1:4c:b3:20:ae:98:90:7e:51:81:5c:8b: a9:7e:c6:7b:83:a5:9d:dc:cd:50:9e:43:fe:a3:da: 3d:11:50:f9:22:93:e8:d3:08:99:e4:f4:c0:ad:70: 46:0e:a2:64:96:eb:a4:09:f6:8e:d8:b1:79:84:e0: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:BB:06:3C:8F:0E:92:D1:CB:A0:4A:9A:62:89:63:18:28:84:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv6: 2602:81a:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:53:c4:86:67:81:35:d0:bf:e6:d2:38:a5:58:f1:6a:bf:ec: 73:0f:47:45:d7:a4:8d:da:64:ae:45:a1:d6:67:33:81:db:0a: 42:35:8f:6a:93:ff:5f:a2:ec:d5:ed:7a:49:6d:f0:22:00:7f: 85:b6:3b:21:ca:37:f0:71:eb:c4:f3:20:31:72:78:c7:e0:7e: 71:e9:d3:6b:85:e0:df:c9:64:c3:4e:f5:36:85:76:14:d2:66: bb:71:d5:78:34:25:e3:23:13:0f:b1:23:37:81:1b:19:c6:c7: 5e:37:e5:50:53:a5:b1:a1:17:e1:79:63:c1:25:3f:3f:13:34: 33:d8:26:30:37:2f:c0:1a:27:3a:4a:ff:12:c5:b5:e6:d9:2b: 41:1b:77:8c:f8:52:74:11:96:8b:64:c0:59:5b:f8:69:81:75: dc:4e:4f:0e:50:ce:5e:b5:ae:03:02:05:ae:aa:57:3c:98:9e: 34:a3:83:c2:2c:1a:09:92:30:ec:9a:76:93:d3:c3:45:52:71: 63:c9:4b:af:dc:12:d3:98:5b:b9:c1:2b:ec:42:b2:42:4c:ca: 68:b7:28:cf:4c:68:8c:8c:c8:76:b8:7f:d4:58:66:9b:67:44: 23:3c:8f:89:1e:89:e6:17:cf:c0:f0:6a:fa:52:90:38:2f:33: e5:56:96:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzfRZOFYFc50KlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YmEzMDg3MzktODhjYS00YmEwLWE0ODEtYzhkNTNkYTVjOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndrrLiI89aAOY6bq8bcwlp9Qy4T7KjX9CWL0 zqoxkB6Vk7zWtN3QYmRpcZHdPwrMAt9LG9yYK1/eEoC7bnmQLOHqj2hyE5uUWyRc //RwMVpXBAXQbP0hzo7wxEku8+0JihLGqkXrVNHZLFB7+GqKQ+r57tYTWvPk94lV DD3ih3i98eJjGKxz/q0ut8kVb7ZaIXSccWSJCO/R+nMHpL0ZVzd6U3RRADXghNzc +NP/CUCIXqJf1guqidwkbgK95pyePN2hg1nBTLMgrpiQflGBXIupfsZ7g6Wd3M1Q nkP+o9o9EVD5IpPo0wiZ5PTArXBGDqJkluukCfaO2LF5hOC0ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ56uwY8jw6S0cugSppiiWMYKIQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvZTY1ODk2ODUtMjg3ZS0z OWUwLWE3ZWItMGFhNzA5ZTMwMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVTxIZngTXQv+bSOKVY8Wq/7HMPR0XXpI3aZK5FodZnM4HbCkI1 j2qT/1+i7NXteklt8CIAf4W2OyHKN/Bx68TzIDFyeMfgfnHp02uF4N/JZMNO9TaF dhTSZrtx1Xg0JeMjEw+xIzeBGxnGx1435VBTpbGhF+F5Y8ElPz8TNDPYJjA3L8Aa JzpK/xLFtebZK0Ebd4z4UnQRlotkwFlb+GmBddxOTw5Qzl61rgMCBa6qVzyYnjSj g8IsGgmSMOyadpPTw0VScWPJS6/cEtOYW7nBK+xCskJMymi3KM9MaIyMyHa4f9RY ZptnRCM8j4keieYXz8DwavpSkDgvM+VWlgk= -----END CERTIFICATE-----Generated at Sun Nov 15 17:35:12 2026 by rpki-client