$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa File: f598f20c-69c9-3772-916d-a8890b5243c8.roa (raw, json) Hash identifier: /DiGkQNBw9O4KKMV3GOp01nzY8byqUv/yAgXf+CkYn8= Subject key identifier: B2:9A:37:1C:18:E1:D4:D5:D8:C8:E4:BB:DC:91:EC:5C:03:76:AB:37 Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F4328584F2D87BD5E7C0E77CD3503FEB0 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 1007 IP address blocks: 2602:fb4a::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:bd:5e:7c:0e:77:cd:35:03:fe:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=f8aa4c00-d0ed-42ad-a485-a1711d4bd103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:7e:12:ff:92:f5:49:60:2c:37:70:61:fd: 8a:96:14:a2:be:6f:b2:e8:01:15:46:68:88:67:07: 84:1b:c6:31:0e:c8:94:d0:66:55:0a:a0:2c:67:53: 39:82:2f:c1:a6:1f:6d:24:e9:00:50:c5:61:81:70: 6d:3c:60:98:fc:39:79:f0:29:f8:39:9f:4c:77:12: e9:7a:3d:fb:2c:c9:ff:89:e3:f9:e4:5e:a6:07:c1: dd:48:96:18:5f:f9:7a:e7:a3:db:6d:62:71:78:be: b5:90:e3:cc:19:f9:b0:8e:c3:f2:b9:b9:a5:81:18: 3c:e0:38:c0:aa:3a:8d:22:47:90:b7:47:32:9f:c2: 46:2b:eb:2c:e5:c8:ce:10:73:de:7d:48:89:6e:58: 98:14:ea:3a:7f:9a:db:5a:94:59:60:77:71:9a:a9: aa:08:7b:94:40:02:f5:48:12:fb:96:b2:25:06:64: 0f:79:5f:fa:e6:c7:90:12:40:06:ce:36:1c:a8:14: 47:50:9e:8a:17:08:fe:c2:62:24:c1:ee:e8:14:82: cb:96:23:97:de:d6:59:35:c4:12:4b:5e:fa:7d:84: fc:4b:fe:43:ec:e1:70:38:5d:0c:49:4b:e7:c3:b5: ae:6f:0e:f5:9f:ad:9d:d6:74:3c:df:d4:84:29:80: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:37:1C:18:E1:D4:D5:D8:C8:E4:BB:DC:91:EC:5C:03:76:AB:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/f598f20c-69c9-3772-916d-a8890b5243c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb4a::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b0:fb:e6:8e:5c:64:0a:f7:4d:6c:e6:9f:6a:df:2d:11:b2: b1:08:97:e9:d6:56:78:c4:c0:47:54:ed:ed:90:04:3c:be:77: 8d:0c:e4:43:0e:e5:ae:04:b9:20:a7:0c:39:90:c0:a9:9d:31: b2:28:81:ca:13:d8:92:cf:10:28:0c:3b:0d:e7:6c:1d:be:e0: fd:60:b2:aa:5d:4a:76:36:e7:b3:86:07:f7:3e:2e:23:0e:db: 39:13:62:4b:18:95:38:11:a9:d0:18:a2:a9:42:1a:9d:aa:33: c3:44:da:fb:dd:b1:53:48:32:87:78:4d:46:ee:02:dc:31:20: 76:04:dc:a2:b9:77:23:cd:90:4b:fc:65:1c:93:0e:40:78:2e: 81:a9:91:26:f7:8b:4e:cd:cc:06:3f:f7:19:e7:88:62:20:7f: 4e:bb:71:6d:fc:cc:27:dd:0a:6b:66:a8:2f:b2:56:10:26:89: 98:36:18:21:dc:ba:1f:0d:a6:4d:cf:8c:5c:3e:28:78:3f:b4: 80:dc:5e:cd:f2:f4:c7:0c:f4:65:92:8a:18:9a:d2:80:fd:1f: 5e:e4:85:1e:d8:58:65:07:d3:b8:6a:34:e8:b0:de:69:7b:d3: e7:94:89:1a:95:83:fe:3d:25:6b:4b:38:b8:23:79:87:f5:3d: 82:63:1d:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th71efA53zTUD/rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhhYTRjMDAtZDBlZC00MmFkLWE0ODUtYTE3MTFkNGJkMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIR+Ev+S9UlgLDdwYf2KlhSivm+y6AEVRmiI ZweEG8YxDsiU0GZVCqAsZ1M5gi/Bph9tJOkAUMVhgXBtPGCY/Dl58Cn4OZ9MdxLp ej37LMn/ieP55F6mB8HdSJYYX/l656PbbWJxeL61kOPMGfmwjsPyubmlgRg84DjA qjqNIkeQt0cyn8JGK+ss5cjOEHPefUiJbliYFOo6f5rbWpRZYHdxmqmqCHuUQAL1 SBL7lrIlBmQPeV/65seQEkAGzjYcqBRHUJ6KFwj+wmIkwe7oFILLliOX3tZZNcQS S176fYT8S/5D7OFwOF0MSUvnw7Wubw71n62d1nQ839SEKYCMtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKaNxwY4dTV2Mjku9yR7FwDdqs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvZjU5OGYyMGMtNjljOS0z NzcyLTkxNmQtYTg4OTBiNTI0M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7SgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaw++aOXGQK901s5p9q3y0RsrEIl+nWVnjEwEdU7e2QBDy+d40M 5EMO5a4EuSCnDDmQwKmdMbIogcoT2JLPECgMOw3nbB2+4P1gsqpdSnY257OGB/c+ LiMO2zkTYksYlTgRqdAYoqlCGp2qM8NE2vvdsVNIMod4TUbuAtwxIHYE3KK5dyPN kEv8ZRyTDkB4LoGpkSb3i07NzAY/9xnniGIgf067cW38zCfdCmtmqC+yVhAmiZg2 GCHcuh8Npk3PjFw+KHg/tIDcXs3y9McM9GWSihia0oD9H17khR7YWGUH07hqNOiw 3ml70+eUiRqVg/49JWtLOLgjeYf1PYJjHYw= -----END CERTIFICATE-----Generated at Wed Oct 7 07:31:38 2026 by rpki-client