$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/d12f17e3-bb1d-3e83-8ea4-138b21a6005b.roa File: d12f17e3-bb1d-3e83-8ea4-138b21a6005b.roa (raw, json) Hash identifier: 5oQ+ANUPWdU8QTYEOX8dM1l0KhnsexH4u6o3P0urqyY= Subject key identifier: 8C:E2:31:30:E6:83:83:1A:D0:BC:2F:C5:D5:31:78:3F:20:51:3E:8B Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584FA05D7235F9F919A0C3064000 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/d12f17e3-bb1d-3e83-8ea4-138b21a6005b.roa Signing time: Mon 26 Oct 2026 04:13:04 +0000 ROA not before: Mon 26 Oct 2026 04:13:04 +0000 ROA not after: Sun 24 Jan 2027 05:13:04 +0000 asID: 153391 IP address blocks: 2602:f791::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:5d:72:35:f9:f9:19:a0:c3:06:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Oct 26 04:13:04 2026 GMT Not After : Jan 24 05:13:04 2027 GMT Subject: CN=20c6c4fe-98bb-4519-bb6f-fc415e7d80e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:95:68:be:08:48:0b:48:e2:7d:fd:5d:c9: 99:7f:2c:2c:f0:e2:ec:64:e3:30:dd:32:e8:82:1a: 9d:01:86:df:37:eb:52:d8:39:1c:74:75:ca:da:65: ec:88:64:bf:f5:fe:dc:ce:d5:6a:57:98:d4:ca:28: bf:1e:42:56:1e:b0:91:32:70:52:20:c6:5e:d5:d9: 5d:b2:a9:11:c2:9d:1b:bb:2f:33:c2:e5:14:fa:45: a7:23:48:a1:d3:e0:61:97:96:b1:25:33:98:69:be: 2c:75:8e:34:69:06:1e:cc:a0:ee:15:c0:aa:4b:6a: eb:0f:4d:04:31:c9:4c:17:e7:2f:6d:4b:55:b3:85: c8:d7:f1:be:f0:64:ab:79:b7:8d:42:f9:db:c0:2e: 6b:46:19:b3:ad:46:92:8b:4b:2c:a9:c8:0d:6a:c6: 7c:dd:6e:b8:7a:9b:0a:50:82:fc:72:37:25:86:86: 86:8d:3d:da:d7:b3:00:a8:87:74:3a:0c:fb:7b:76: ee:63:c1:d2:0f:5b:af:9d:0d:fa:65:dd:93:4e:57: cf:50:ca:81:20:f4:ad:4d:ed:9e:20:44:80:59:d6: df:24:09:3a:0e:ef:00:44:9b:7e:bf:f8:62:11:bb: 1b:e2:cd:87:ee:29:4b:de:db:01:a8:34:dd:e6:08: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E2:31:30:E6:83:83:1A:D0:BC:2F:C5:D5:31:78:3F:20:51:3E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/d12f17e3-bb1d-3e83-8ea4-138b21a6005b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f791::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:e1:e2:73:a1:ff:73:c7:6b:52:1e:ae:65:92:6b:82:fe: 93:06:cd:4b:ee:59:2c:f9:f9:fc:6b:57:be:8c:3b:bb:47:d6: 2b:6e:65:02:16:6c:5f:5f:51:57:48:79:e9:fc:23:9b:08:23: 9e:46:8e:6f:84:03:7d:68:9e:4d:71:cd:37:8d:41:de:07:e4: da:af:fa:4c:e0:5b:e3:e1:c4:b2:51:b3:64:96:e0:59:05:db: 41:ca:a4:60:9e:a6:24:77:be:23:5f:76:8c:7d:c8:a4:61:e4: 20:3c:3f:db:07:6d:ce:78:4b:15:fb:bb:1c:95:5d:8d:30:18: cc:00:24:29:e0:59:b0:2d:c5:f0:7e:25:22:1d:1d:e2:71:62: 7d:3b:ff:cf:13:48:b5:f8:9e:18:a1:e8:c5:e6:96:98:99:4c: ec:53:d5:c4:c2:10:cb:00:62:27:3d:0d:1a:9d:0f:cc:b4:f1: 1b:c0:a0:45:25:6d:ff:92:7d:4b:42:cd:bb:89:95:5b:37:ad: a4:7e:df:e4:cb:9a:7c:29:ee:5a:69:95:32:18:bb:ff:57:65: 77:c6:a5:4f:c9:ca:0e:98:b3:da:94:7c:33:d1:f7:80:ab:44: 68:95:0d:21:8c:aa:4f:64:a7:22:22:0c:0d:88:95:d7:88:3d: 10:0b:97:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+gXXI1+fkZoMMGQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MTAyNjA0MTMwNFoXDTI3MDEyNDA1MTMwNFowLzEtMCsGA1UEAxMk MjBjNmM0ZmUtOThiYi00NTE5LWJiNmYtZmM0MTVlN2Q4MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv2VaL4ISAtI4n39XcmZfyws8OLsZOMw3TLo ghqdAYbfN+tS2DkcdHXK2mXsiGS/9f7cztVqV5jUyii/HkJWHrCRMnBSIMZe1dld sqkRwp0buy8zwuUU+kWnI0ih0+Bhl5axJTOYab4sdY40aQYezKDuFcCqS2rrD00E MclMF+cvbUtVs4XI1/G+8GSrebeNQvnbwC5rRhmzrUaSi0ssqcgNasZ83W64epsK UIL8cjclhoaGjT3a17MAqId0Ogz7e3buY8HSD1uvnQ36Zd2TTlfPUMqBIPStTe2e IESAWdbfJAk6Du8ARJt+v/hiEbsb4s2H7ilL3tsBqDTd5gjxTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIziMTDmg4Ma0LwvxdUxeD8gUT6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvZDEyZjE3ZTMtYmIxZC0z ZTgzLThlYTQtMTM4YjIxYTYwMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3kQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXDXh4nOh/3PHa1IermWSa4L+kwbNS+5ZLPn5/GtXvow7u0fWK25l AhZsX19RV0h56fwjmwgjnkaOb4QDfWieTXHNN41B3gfk2q/6TOBb4+HEslGzZJbg WQXbQcqkYJ6mJHe+I192jH3IpGHkIDw/2wdtznhLFfu7HJVdjTAYzAAkKeBZsC3F 8H4lIh0d4nFifTv/zxNItfieGKHoxeaWmJlM7FPVxMIQywBiJz0NGp0PzLTxG8Cg RSVt/5J9S0LNu4mVWzetpH7f5MuafCnuWmmVMhi7/1dld8alT8nKDpiz2pR8M9H3 gKtEaJUNIYyqT2SnIiIMDYiV14g9EAuXoQ== -----END CERTIFICATE-----Generated at Sun Nov 15 14:34:55 2026 by rpki-client