$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa File: c02aa951-1a2e-31b7-abaf-e129c4b52433.roa (raw, json) Hash identifier: 1X1DtdJu6Gwm6im2TB0Y3gFEa/facDZ7NI9q+0R78Vk= Subject key identifier: 10:B7:5C:83:54:67:6C:64:13:61:A7:15:DA:B1:94:28:0E:C1:37:3C Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584F2957BBDC7AEBE6D340AC1980 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14618 IP address blocks: 2602:28c:2659::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bb:dc:7a:eb:e6:d3:40:ac:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=6da0822a-1c61-472a-81eb-c53130e28e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:27:b3:f7:62:a5:ed:15:86:bf:f5:5e:de: 93:28:79:d3:ca:fe:55:ea:f7:ab:f6:04:f0:5e:10: dd:fb:eb:92:22:06:a6:7c:87:2d:83:aa:2e:3d:9a: 88:dc:15:af:8c:ca:83:68:1e:a3:6e:38:98:50:bc: aa:71:a8:0c:a9:1b:cc:47:09:4d:3e:57:de:5f:e2: 22:e7:a3:ec:c5:83:78:dd:83:55:2c:98:46:ef:5b: 74:72:b9:34:34:10:d0:97:ef:04:f7:05:e0:1c:4b: d8:28:ed:bb:5e:25:d7:b4:36:df:22:8f:50:2e:56: 36:70:6e:4c:ee:3f:73:24:0a:ae:2b:28:c1:ad:86: e9:08:38:ae:ca:6b:aa:2a:8c:1a:a9:04:41:97:fb: dc:5b:7c:b5:6f:a9:f6:1c:29:c9:39:b8:37:7f:74: 47:16:15:b7:a7:be:8c:58:12:0a:07:d5:28:34:8b: 24:8d:be:9e:80:e9:53:6b:6e:8c:5c:23:92:72:02: e8:5b:69:84:8f:11:7f:f8:e5:fa:97:ce:73:77:94: 3e:91:ac:4a:c2:c4:1d:cf:0b:ac:5c:ea:a2:19:95: 7e:a8:69:74:e3:18:98:1e:34:6a:9a:07:91:34:58: e2:16:3b:ed:cd:49:19:d2:8e:1c:63:23:21:da:45: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B7:5C:83:54:67:6C:64:13:61:A7:15:DA:B1:94:28:0E:C1:37:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:28c:2659::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:54:6e:6a:f1:53:5c:47:54:de:8a:c0:25:60:41:ec:88:0f: 64:46:61:c1:3d:8f:3e:57:b5:3f:e4:e4:33:43:97:73:1e:f6: b3:fc:8b:59:64:cd:a9:bd:13:8c:09:57:02:75:c4:26:e9:0b: 02:9d:7c:78:d1:29:1e:f5:24:9e:da:94:01:7d:b4:89:89:72: 9e:bb:68:6d:da:53:e9:64:71:04:4a:bf:78:b7:c0:52:e9:00: c9:62:3d:fa:ca:6c:10:b0:b0:a8:df:29:d2:95:1e:95:aa:1e: e0:34:57:39:80:28:75:e4:76:35:c2:0a:74:78:f3:4e:41:a2: 9f:d1:21:3e:4f:ed:a5:e5:3e:fd:68:e6:34:00:ca:47:19:09: 4b:b9:52:e9:17:40:9b:ec:0f:3e:e1:71:7b:5f:d1:f3:2a:df: 4b:bc:93:10:4d:e4:d7:b2:dc:54:21:39:08:41:77:e2:d3:1e: 0c:86:b0:c6:3d:64:82:3c:00:58:96:a6:5a:14:a9:ae:48:a7: 8d:56:67:c5:05:08:06:d7:6e:c7:c2:31:b9:19:c2:9f:55:75: 74:5a:b9:8c:86:b4:82:ea:28:9f:92:84:0c:82:fa:ef:53:42: 36:ca:e2:2c:18:d4:d9:b0:dd:76:a1:a5:58:6c:d4:aa:f5:90: c8:1d:3f:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV7vceuvm00CsGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NmRhMDgyMmEtMWM2MS00NzJhLTgxZWItYzUzMTMwZTI4ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRUns/dipe0Vhr/1Xt6TKHnTyv5V6ver9gTw XhDd++uSIgamfIctg6ouPZqI3BWvjMqDaB6jbjiYULyqcagMqRvMRwlNPlfeX+Ii 56PsxYN43YNVLJhG71t0crk0NBDQl+8E9wXgHEvYKO27XiXXtDbfIo9QLlY2cG5M 7j9zJAquKyjBrYbpCDiuymuqKowaqQRBl/vcW3y1b6n2HCnJObg3f3RHFhW3p76M WBIKB9UoNIskjb6egOlTa26MXCOScgLoW2mEjxF/+OX6l85zd5Q+kaxKwsQdzwus XOqiGZV+qGl04xiYHjRqmgeRNFjiFjvtzUkZ0o4cYyMh2kVMYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBC3XINUZ2xkE2GnFdqxlCgOwTc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzAyYWE5NTEtMWEyZS0z MWI3LWFiYWYtZTEyOWM0YjUyNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCZZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChUbmrxU1xHVN6KwCVgQeyID2RGYcE9jz5XtT/k5DNDl3Me9rP8 i1lkzam9E4wJVwJ1xCbpCwKdfHjRKR71JJ7alAF9tImJcp67aG3aU+lkcQRKv3i3 wFLpAMliPfrKbBCwsKjfKdKVHpWqHuA0VzmAKHXkdjXCCnR4805Bop/RIT5P7aXl Pv1o5jQAykcZCUu5UukXQJvsDz7hcXtf0fMq30u8kxBN5Ney3FQhOQhBd+LTHgyG sMY9ZII8AFiWploUqa5Ip41WZ8UFCAbXbsfCMbkZwp9VdXRauYyGtILqKJ+ShAyC +u9TQjbK4iwY1Nmw3XahpVhs1Kr1kMgdP64= -----END CERTIFICATE-----Generated at Sun Sep 20 20:52:59 2026 by rpki-client