$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa File: 99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa (raw, json) Hash identifier: fYjxaGiVetbcatIE6kwRTpIRBEcMaV8gonceY3Dei2Q= Subject key identifier: 68:29:FA:A9:CA:BC:8C:D8:26:5F:04:32:B0:E3:DD:EB:29:2F:D4:25 Certificate issuer: /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Certificate serial: 010D0C9F4328584F480D4499AA9727EF934F7900 Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 14432 IP address blocks: 2602:f965:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:44:99:aa:97:27:ef:93:4f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=2c0e3415-98f5-4af1-8b40-8ffedc3ec3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:e9:44:14:34:21:9c:a1:eb:fe:da:78:fb: 9a:d8:5d:1f:dc:2a:0b:eb:48:66:f2:d8:aa:23:2f: dd:cf:a9:2c:63:3f:71:a7:78:1c:2c:57:0f:21:8e: a3:55:63:0f:02:dd:fb:8e:b0:20:5d:87:de:21:70: 66:9b:b2:c4:ea:21:b2:52:43:11:eb:b9:d3:50:cb: 88:66:5c:b7:c4:51:ce:09:19:e4:a9:d3:4a:44:21: 2e:98:1f:04:d2:09:4a:ac:3c:10:28:7f:d1:e2:6c: aa:20:ad:cc:e9:c6:c2:5a:7d:c6:77:d0:f2:98:7e: 18:26:b5:39:55:f7:99:2f:cd:77:ac:1d:5c:38:49: 5f:db:33:37:4b:fb:d6:0d:a5:63:0e:bd:d1:ff:fe: 9d:a5:2b:62:21:81:5e:dd:9a:26:48:74:40:91:6b: 76:33:3a:6f:a6:df:8b:3a:5f:71:fd:df:d5:7b:e1: ac:8b:33:55:f4:ca:50:33:8e:35:bc:45:0b:ca:20: a5:2e:2b:be:b5:9e:df:aa:8b:3f:78:ec:cd:2c:e6: c1:0a:af:c8:d0:ae:94:dc:15:69:8a:a3:d5:77:82: 49:f1:66:ff:fc:4e:8d:4c:79:a3:fd:ae:af:a4:be: c5:f9:9e:0b:ff:04:29:49:d0:ca:c6:a4:7f:e0:b0: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:29:FA:A9:CA:BC:8C:D8:26:5F:04:32:B0:E3:DD:EB:29:2F:D4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl X509v3 Authority Key Identifier: keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f965:80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:96:88:2c:cf:c7:2d:d6:01:17:63:b3:9c:60:12:b4:86:b3: 4e:35:78:16:59:18:da:e5:55:84:2d:59:00:3e:a4:f6:bf:71: 37:15:6c:71:44:4c:2d:7d:ac:52:4f:f2:29:1d:42:10:93:af: 0d:06:1d:2a:46:c5:87:08:b4:91:7f:06:9d:62:23:2d:77:48: 1f:10:cb:80:52:75:55:9e:7f:1e:d4:c4:2b:61:26:12:5f:70: fa:f6:bc:ec:e1:20:67:88:a0:b8:23:fe:2a:82:5d:6f:8e:76: 38:79:0c:d8:ef:54:e0:bf:d0:b2:69:f1:7c:a1:a0:cd:db:b0: 5b:f3:64:02:ae:af:3d:59:ef:63:07:ae:08:59:6a:0b:5b:11: 86:d7:6b:cc:26:a4:e9:a8:fa:33:39:76:60:c9:19:95:cd:9a: 79:cf:ad:45:34:c8:d7:90:f3:08:03:d0:65:f4:df:7f:05:a0: 49:02:bb:8d:1e:e2:3b:74:2d:27:40:0d:51:af:83:40:41:7a: e7:b1:c4:55:68:52:02:6f:7a:7b:ce:e7:5e:67:d8:9a:88:09: 46:1e:8b:dd:23:9a:dd:25:54:20:c5:26:4e:e3:af:71:b8:ef: 7a:ec:4c:0d:3e:24:07:2c:eb:b2:35:a1:04:09:23:b2:3a:cc: a6:76:e2:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDUSZqpcn75NPeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFhOGUwMTgtODhmNC00MDY3LTkzNWUtZWY4ZTIwYTU1 M2M1MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MmMwZTM0MTUtOThmNS00YWYxLThiNDAtOGZmZWRjM2VjM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJzpRBQ0IZyh6/7aePua2F0f3CoL60hm8tiq Iy/dz6ksYz9xp3gcLFcPIY6jVWMPAt37jrAgXYfeIXBmm7LE6iGyUkMR67nTUMuI Zly3xFHOCRnkqdNKRCEumB8E0glKrDwQKH/R4myqIK3M6cbCWn3Gd9DymH4YJrU5 VfeZL813rB1cOElf2zM3S/vWDaVjDr3R//6dpStiIYFe3ZomSHRAkWt2Mzpvpt+L Ol9x/d/Ve+GsizNV9MpQM441vEULyiClLiu+tZ7fqos/eOzNLObBCq/I0K6U3BVp iqPVd4JJ8Wb//E6NTHmj/a6vpL7F+Z4L/wQpSdDKxqR/4LB3qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgp+qnKvIzYJl8EMrDj3espL9QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4 ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhlMjBhNTUzYzUvOTljMzQxMzktYTFkMi0z MmRkLWI1ZjQtMmFhOTYzMTU4NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTFhOGUwMTgtODhmNC00MDY3LTkz NWUtZWY4ZTIwYTU1M2M1L2ExYThlMDE4LTg4ZjQtNDA2Ny05MzVlLWVmOGUyMGE1 NTNjNS5jcmwwHwYDVR0jBBgwFoAUdezwcZfkdSWR6NkbnryrZ+1adSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMWE4ZTAxOC04OGY0LTQwNjctOTM1ZS1lZjhl MjBhNTUzYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5ZQCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCWiCzPxy3WARdjs5xgErSGs041eBZZGNrlVYQtWQA+pPa/cTcV bHFETC19rFJP8ikdQhCTrw0GHSpGxYcItJF/Bp1iIy13SB8Qy4BSdVWefx7UxCth JhJfcPr2vOzhIGeIoLgj/iqCXW+Odjh5DNjvVOC/0LJp8XyhoM3bsFvzZAKurz1Z 72MHrghZagtbEYbXa8wmpOmo+jM5dmDJGZXNmnnPrUU0yNeQ8wgD0GX0338FoEkC u40e4jt0LSdADVGvg0BBeuexxFVoUgJvenvO515n2JqICUYei90jmt0lVCDFJk7j r3G473rsTA0+JAcs67I1oQQJI7I6zKZ24r4= -----END CERTIFICATE-----Generated at Sat Sep 26 04:07:58 2026 by rpki-client