$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa File: d16ffc38-7c25-32e8-be52-77ea562c0470.roa (raw, json) Hash identifier: x+NXaTs5soJi6vqDbo4jT4i9KyX1zd50ju9PcLWHNoQ= Subject key identifier: 6E:B7:A0:E3:34:2B:A8:A5:68:41:47:65:37:23:49:C8:04:1D:E9:7A Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Certificate serial: 010D0C9F4328584F7E7DB70AD83687CA2528B180 Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 213683 IP address blocks: 2602:f700:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b7:0a:d8:36:87:ca:25:28:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=5a4a5169-ec94-40b2-857f-689bef7ab052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:6b:34:9a:29:41:b9:99:c3:80:28:47:e6: a8:22:bf:f1:20:c1:f6:af:0c:fe:fc:a2:c7:9c:a4: 9d:2e:f5:22:4b:0d:09:98:84:27:06:33:76:d9:22: f4:9e:78:1e:c6:c3:57:b5:78:c9:4f:8a:f6:10:a6: 0d:59:38:9e:7e:1b:53:e4:90:e6:3d:e9:da:1f:ae: 9f:b8:b7:31:ca:02:7f:39:a5:42:0f:f4:cc:d4:eb: 01:17:f4:8e:76:55:f3:ad:09:e2:45:be:12:ad:53: 7e:e6:8d:17:7f:0e:dd:9b:09:72:02:ce:69:49:23: e2:d4:bd:59:1a:5e:9f:52:07:d0:57:cf:32:47:8f: dd:a6:58:24:d6:91:68:0b:35:72:c9:f2:bc:b6:58: d0:51:94:1b:34:d2:72:12:dd:83:01:7c:df:c5:ab: f2:89:53:bf:ff:1c:ea:49:39:a2:90:35:1a:84:f7: ec:c3:38:fd:7d:1e:fa:ab:60:1c:2c:b1:d4:f5:e7: a3:48:d9:17:3e:8a:8d:e1:ba:31:77:bd:7a:f7:a8: e0:a6:09:d8:1a:e1:8f:7b:63:a9:4c:43:59:65:ab: 4d:52:73:49:ea:52:20:c6:31:a8:8b:29:cb:08:cf: 0a:6d:42:52:23:28:02:aa:67:56:8b:73:dc:9d:b4: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:A0:E3:34:2B:A8:A5:68:41:47:65:37:23:49:C8:04:1D:E9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/d16ffc38-7c25-32e8-be52-77ea562c0470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl X509v3 Authority Key Identifier: keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer sbgp-ipAddrBlock: critical IPv6: 2602:f700:80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:29:03:98:f1:d3:ce:3d:11:ea:da:51:a5:68:6e:9e:7e:db: 6d:12:d9:9f:d4:f6:1a:d1:99:1e:e0:a4:02:34:3b:27:33:12: 6f:4a:20:a8:15:b9:5b:6e:7b:21:33:17:46:8d:95:35:86:84: 6b:4c:3f:e8:77:46:a5:b1:f6:95:42:34:55:d0:4f:3e:fa:85: 3a:90:2a:fc:9d:96:aa:c5:c8:8e:ff:97:37:c2:e5:a9:4d:59: f9:54:57:f8:b9:a7:4c:1e:04:b0:9d:0e:f8:be:df:b2:23:35: a0:fc:5c:72:dc:a4:b0:e6:72:35:ed:13:ab:1b:b1:9a:90:18: 94:5f:00:a3:e9:48:a0:45:1a:4b:b1:ee:ca:fd:3c:29:dd:4a: ff:1c:6d:4a:10:0a:0c:35:3a:15:de:99:ac:b8:9f:e9:83:a0: de:3e:a7:30:93:a7:77:b0:ea:4a:90:01:02:c5:67:08:56:00: 82:8a:ef:61:23:61:a6:91:51:cd:e2:ea:11:f7:b5:ec:9a:d3: 73:75:b0:cf:3a:77:8a:26:3a:8f:3b:57:e2:43:99:40:54:4a: 6e:bb:5b:6b:37:52:9a:ad:93:22:85:6b:4b:7d:5c:14:73:49: 1b:17:a7:12:13:0c:08:53:3a:f2:67:5a:80:e9:04:0a:73:6d: 54:03:a1:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fbcK2DaHyiUosYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz ZjA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NWE0YTUxNjktZWM5NC00MGIyLTg1N2YtNjg5YmVmN2FiMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A9rNJopQbmZw4AoR+aoIr/xIMH2rwz+/KLH nKSdLvUiSw0JmIQnBjN22SL0nngexsNXtXjJT4r2EKYNWTiefhtT5JDmPenaH66f uLcxygJ/OaVCD/TM1OsBF/SOdlXzrQniRb4SrVN+5o0Xfw7dmwlyAs5pSSPi1L1Z Gl6fUgfQV88yR4/dplgk1pFoCzVyyfK8tljQUZQbNNJyEt2DAXzfxavyiVO//xzq STmikDUahPfswzj9fR76q2AcLLHU9eejSNkXPoqN4boxd71696jgpgnYGuGPe2Op TENZZatNUnNJ6lIgxjGoiynLCM8KbUJSIygCqmdWi3PcnbRCvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG63oOM0K6ilaEFHZTcjScgEHel6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1 ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvZDE2ZmZjMzgtN2MyNS0z MmU4LWJlNTItNzdlYTU2MmMwNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw M2M4YjNmMDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL3AACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkpA5jx0849EeraUaVobp5+220S2Z/U9hrRmR7gpAI0OyczEm9K IKgVuVtueyEzF0aNlTWGhGtMP+h3RqWx9pVCNFXQTz76hTqQKvydlqrFyI7/lzfC 5alNWflUV/i5p0weBLCdDvi+37IjNaD8XHLcpLDmcjXtE6sbsZqQGJRfAKPpSKBF Gkux7sr9PCndSv8cbUoQCgw1OhXemay4n+mDoN4+pzCTp3ew6kqQAQLFZwhWAIKK 72EjYaaRUc3i6hH3teya03N1sM86d4omOo87V+JDmUBUSm67W2s3UpqtkyKFa0t9 XBRzSRsXpxITDAhTOvJnWoDpBApzbVQDoWs= -----END CERTIFICATE-----Generated at Sun Nov 15 11:17:37 2026 by rpki-client