$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa File: 855b63a5-cefe-3157-be0a-9281c2ca43e4.roa (raw, json) Hash identifier: Pzz1J+fWQgv1weTunm3GBueL7tk+e+9MXxNarvg+BjI= Subject key identifier: D5:C8:E4:8B:33:1E:F8:C2:29:CF:4E:60:5F:68:A1:3B:2A:6B:9E:8C Certificate issuer: /CN=dfc88768-1b58-474d-a340-376827992098 Certificate serial: 010D0C9F4328584EED521B43F58020373D28B300 Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 21629 IP address blocks: 2602:f773::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1b:43:f5:80:20:37:3d:28:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc88768-1b58-474d-a340-376827992098 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=bd59b05d-06ed-48a2-88a0-a168bebe662c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:5b:ec:41:0d:c7:b1:8b:6e:6e:9e:3f:f8: 28:b8:4e:59:95:da:72:12:9c:ed:d8:77:d1:75:d4: ef:11:77:d1:3d:5c:d1:4b:3c:b4:04:53:c4:09:61: c4:4c:6d:0e:cb:d7:e1:65:6f:5d:66:4b:4b:ac:5f: c7:54:ef:e5:8a:51:dc:c3:c4:32:e0:e8:50:6d:72: ba:22:3d:ef:f8:84:70:9f:7f:b1:81:70:5b:a3:24: 01:74:03:5b:5a:7b:64:bf:0e:95:d9:27:73:77:eb: c1:a1:39:59:48:38:58:b9:04:56:15:df:68:81:68: f4:c9:d2:16:62:a5:4e:f6:1c:db:db:29:6a:2f:29: 67:40:16:a0:15:ed:e3:7c:ea:c9:6b:62:51:f1:ef: 3d:aa:4b:09:2e:3d:06:53:a1:1e:6c:35:4e:2c:b4: ad:e2:a8:92:fd:dc:49:77:a9:ee:3d:7b:46:54:ea: 81:5d:22:1a:84:ff:2b:a6:76:34:53:e8:17:f8:6c: d9:e3:94:a9:f1:dc:aa:68:58:b5:30:2b:22:37:dd: ac:56:05:b9:82:a3:c3:98:0f:e4:b5:9d:88:7d:e7: 75:be:d4:f2:ca:30:42:0f:a0:fc:e4:3a:8c:07:15: f6:53:27:12:2a:c1:43:18:86:6f:9e:3e:25:21:de: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C8:E4:8B:33:1E:F8:C2:29:CF:4E:60:5F:68:A1:3B:2A:6B:9E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl X509v3 Authority Key Identifier: keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer sbgp-ipAddrBlock: critical IPv6: 2602:f773::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0d:c7:57:18:bb:e4:44:9a:e6:e1:57:16:2d:72:65:5b:f9: 3a:fa:ea:cc:e5:2b:93:51:82:b7:df:00:89:90:73:b3:9c:4f: dd:0f:ea:fd:09:0e:f0:fa:1c:96:cd:87:a0:f6:38:6c:8d:e9: dc:36:52:af:43:fb:9c:3c:42:2a:d2:3a:75:6b:bb:60:6b:16: e1:f1:1e:12:67:94:4c:44:6e:ad:e2:76:40:69:52:9a:86:e1: d1:c4:97:39:48:42:1e:86:69:09:0e:fc:63:01:17:3e:40:79: 54:01:55:dd:ef:1f:cc:71:a6:d9:0e:bd:ac:b2:fa:ed:94:6b: 66:f2:81:08:16:f0:50:eb:04:7f:a1:99:9d:b9:8c:6d:e2:0c: a9:15:8f:5d:2b:e3:1b:77:83:42:fe:db:2b:90:91:d4:c1:26: e3:b0:db:c1:42:e0:52:ea:03:ef:de:1a:55:c9:25:20:3b:31: 9e:d1:2c:77:a5:3a:cd:b3:5e:ff:fc:ce:a5:73:96:54:63:62: 8e:b8:93:39:47:31:a5:0a:0f:0d:c7:04:cd:6e:62:aa:36:69: 05:6f:7c:bc:80:56:5c:94:82:f6:7e:40:4c:6d:74:4d:8a:75: f5:95:aa:92:bc:0d:d5:8f:af:73:33:80:48:7d:a9:09:da:99: 0e:dc:fe:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7tUhtD9YAgNz0oswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjODg3NjgtMWI1OC00NzRkLWEzNDAtMzc2ODI3OTky MDk4MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YmQ1OWIwNWQtMDZlZC00OGEyLTg4YTAtYTE2OGJlYmU2NjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9b7EENx7GLbm6eP/gouE5ZldpyEpzt2HfR ddTvEXfRPVzRSzy0BFPECWHETG0Oy9fhZW9dZktLrF/HVO/lilHcw8Qy4OhQbXK6 Ij3v+IRwn3+xgXBboyQBdANbWntkvw6V2Sdzd+vBoTlZSDhYuQRWFd9ogWj0ydIW YqVO9hzb2ylqLylnQBagFe3jfOrJa2JR8e89qksJLj0GU6EebDVOLLSt4qiS/dxJ d6nuPXtGVOqBXSIahP8rpnY0U+gX+GzZ45Sp8dyqaFi1MCsiN92sVgW5gqPDmA/k tZ2Ifed1vtTyyjBCD6D85DqMBxX2UycSKsFDGIZvnj4lId6BcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNXI5IszHvjCKc9OYF9ooTsqa56MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4 ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4Mjc5OTIwOTgvODU1YjYzYTUtY2VmZS0z MTU3LWJlMGEtOTI4MWMyY2E0M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZjODg3NjgtMWI1OC00NzRkLWEz NDAtMzc2ODI3OTkyMDk4L2RmYzg4NzY4LTFiNTgtNDc0ZC1hMzQwLTM3NjgyNzk5 MjA5OC5jcmwwHwYDVR0jBBgwFoAU9UapEYbSMklkzrvABv6x5EYHaoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4 Mjc5OTIwOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3cwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXg3HVxi75ESa5uFXFi1yZVv5OvrqzOUrk1GCt98AiZBzs5xP3Q/q /QkO8Pocls2HoPY4bI3p3DZSr0P7nDxCKtI6dWu7YGsW4fEeEmeUTERureJ2QGlS mobh0cSXOUhCHoZpCQ78YwEXPkB5VAFV3e8fzHGm2Q69rLL67ZRrZvKBCBbwUOsE f6GZnbmMbeIMqRWPXSvjG3eDQv7bK5CR1MEm47DbwULgUuoD794aVcklIDsxntEs d6U6zbNe//zOpXOWVGNijriTOUcxpQoPDccEzW5iqjZpBW98vIBWXJSC9n5ATG10 TYp19ZWqkrwN1Y+vczOASH2pCdqZDtz+3Q== -----END CERTIFICATE-----Generated at Sun Oct 11 16:35:56 2026 by rpki-client