$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/86ae0f9f-8781-32b9-a9ca-a10fa8de70e5.roa File: 86ae0f9f-8781-32b9-a9ca-a10fa8de70e5.roa (raw, json) Hash identifier: nizVjoIzu6DLKZhYRn05Q030Ql4ToznMAJaUAKDkxUM= Subject key identifier: 39:5D:09:45:50:1F:A3:DA:1C:88:82:98:E1:77:77:DF:61:01:C5:91 Certificate issuer: /CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Certificate serial: 010D0C9F4328584FA6F87B1784913B81F6E7B680 Authority key identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/86ae0f9f-8781-32b9-a9ca-a10fa8de70e5.roa Signing time: Wed 28 Oct 2026 13:00:13 +0000 ROA not before: Wed 28 Oct 2026 13:00:13 +0000 ROA not after: Tue 26 Jan 2027 14:00:13 +0000 asID: 15312 IP address blocks: 2602:f503::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f8:7b:17:84:91:3b:81:f6:e7:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Validity Not Before: Oct 28 13:00:13 2026 GMT Not After : Jan 26 14:00:13 2027 GMT Subject: CN=3be7420f-8390-4781-a780-3639d78a9d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:d7:6d:b1:52:aa:0e:75:f7:76:60:c0:c3: 4c:b0:7e:5a:19:e7:43:a0:2a:c5:c5:7c:8f:bc:40: 1b:13:b1:ce:15:96:58:8c:de:16:64:4b:81:10:28: 34:7e:e3:73:94:7b:73:93:60:a8:18:12:31:71:2e: 80:9c:11:2a:0b:b0:ac:f8:94:50:64:2b:6c:b4:b8: 2c:30:c2:d3:19:50:8d:0e:29:48:85:b1:bc:7d:e3: c9:b6:06:98:ac:55:cf:b2:ca:89:c6:96:61:80:79: 00:d2:9a:4d:4c:7c:ba:2a:56:9c:1a:35:d0:d0:a9: 9e:f7:97:23:20:2a:ac:98:22:f7:2f:53:18:9c:e3: 0c:80:bf:d7:f4:fa:50:76:2f:7c:91:6a:86:31:28: 54:b6:8e:85:e5:19:16:ba:59:cc:3d:d0:45:c7:13: b9:ee:4f:48:e7:ad:84:a0:72:3c:d7:67:d9:e7:28: f4:35:0a:c8:ed:62:1b:d7:29:d3:32:3e:b4:87:7c: a8:46:c1:d0:15:26:e5:fa:90:c1:eb:cd:f9:57:0a: 64:96:09:10:ee:11:4d:7a:b8:08:14:20:c3:0e:0d: 0e:2b:68:49:aa:dd:54:c5:2b:cc:c1:57:27:89:36: e7:8f:71:c5:89:64:c9:1f:c6:96:e3:9b:48:08:8d: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:09:45:50:1F:A3:DA:1C:88:82:98:E1:77:77:DF:61:01:C5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/86ae0f9f-8781-32b9-a9ca-a10fa8de70e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl X509v3 Authority Key Identifier: keyid:41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer sbgp-ipAddrBlock: critical IPv6: 2602:f503::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9e:43:41:c7:8c:d2:30:7d:76:b3:eb:80:54:b9:cf:91:07: 11:ff:90:ea:04:cc:a2:0b:90:02:f4:54:a5:ac:ed:9a:7e:9d: 5f:27:a4:96:ca:5b:ce:ed:8a:dc:05:0a:25:d2:76:28:57:fe: e1:a4:de:8a:cb:33:86:3b:c8:b1:70:e5:5b:65:70:17:65:9d: 4a:08:5b:54:60:e2:0a:3a:3b:05:4a:92:e2:28:09:ba:5d:29: 03:be:31:0b:23:70:af:40:cc:d1:d1:ba:89:a9:e9:c8:02:0b: df:00:4a:b3:45:c6:65:2e:8d:b0:2b:1f:6c:b6:b6:0c:0e:a2: da:dd:55:c7:42:cf:a7:6b:e5:02:f1:2b:63:86:64:bc:8a:f0: d1:cb:59:2e:22:7a:29:ba:93:9d:c7:31:e5:e6:60:95:2d:45: 8a:3f:32:e9:72:4f:b0:46:fe:3e:95:b2:76:aa:5e:d4:64:3a: 23:4a:31:29:2d:82:94:e8:6f:ae:d9:03:3c:6c:b1:4a:70:f8: 15:2e:d0:e7:24:0c:87:39:15:d3:45:ca:8b:55:68:3d:9d:44: 15:77:db:e0:60:1d:86:73:ed:ea:69:ba:82:5e:1b:6b:7d:f5: 28:f6:99:23:d3:ba:5e:34:ab:3a:78:41:af:60:3a:45:6d:28: 59:81:45:d8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+m+HsXhJE7gfbntoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmMmY5ZDQtNjkyZC00ZmJmLTliNjktN2NhMjE2MmJl OTQ3MB4XDTI2MTAyODEzMDAxM1oXDTI3MDEyNjE0MDAxM1owLzEtMCsGA1UEAxMk M2JlNzQyMGYtODM5MC00NzgxLWE3ODAtMzYzOWQ3OGE5ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh/XbbFSqg5193ZgwMNMsH5aGedDoCrFxXyP vEAbE7HOFZZYjN4WZEuBECg0fuNzlHtzk2CoGBIxcS6AnBEqC7Cs+JRQZCtstLgs MMLTGVCNDilIhbG8fePJtgaYrFXPssqJxpZhgHkA0ppNTHy6KlacGjXQ0Kme95cj ICqsmCL3L1MYnOMMgL/X9PpQdi98kWqGMShUto6F5RkWulnMPdBFxxO57k9I562E oHI812fZ5yj0NQrI7WIb1ynTMj60h3yoRsHQFSbl+pDB6835VwpklgkQ7hFNergI FCDDDg0OK2hJqt1UxSvMwVcniTbnj3HFiWTJH8aW45tICI0f5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDldCUVQH6PaHIiCmOF3d99hAcWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYy ZjlkNC02OTJkLTRmYmYtOWI2OS03Y2EyMTYyYmU5NDcvODZhZTBmOWYtODc4MS0z MmI5LWE5Y2EtYTEwZmE4ZGU3MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNWRmMmY5ZDQtNjkyZC00ZmJmLTli NjktN2NhMjE2MmJlOTQ3LzVkZjJmOWQ0LTY5MmQtNGZiZi05YjY5LTdjYTIxNjJi ZTk0Ny5jcmwwHwYDVR0jBBgwFoAUQcJyVYnU/0273jNdjvHovfZaq8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYyZjlkNC02OTJkLTRmYmYtOWI2OS03Y2Ey MTYyYmU5NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1AwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANp5DQceM0jB9drPrgFS5z5EHEf+Q6gTMoguQAvRUpaztmn6dXyek lspbzu2K3AUKJdJ2KFf+4aTeisszhjvIsXDlW2VwF2WdSghbVGDiCjo7BUqS4igJ ul0pA74xCyNwr0DM0dG6ianpyAIL3wBKs0XGZS6NsCsfbLa2DA6i2t1Vx0LPp2vl AvErY4ZkvIrw0ctZLiJ6KbqTnccx5eZglS1Fij8y6XJPsEb+PpWydqpe1GQ6I0ox KS2ClOhvrtkDPGyxSnD4FS7Q5yQMhzkV00XKi1VoPZ1EFXfb4GAdhnPt6mm6gl4b a331KPaZI9O6XjSrOnhBr2A6RW0oWYFF2A== -----END CERTIFICATE-----Generated at Sun Nov 15 18:36:00 2026 by rpki-client