$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/42518578-9cf1-33b1-9b7b-7efe3fd8db61.roa File: 42518578-9cf1-33b1-9b7b-7efe3fd8db61.roa (raw, json) Hash identifier: H4XPA0oyfRt+FoHyQLEOsewNoN3RAuAgeQxGzFeBu0E= Subject key identifier: D0:B9:C4:AC:81:9A:FF:44:C6:72:AA:57:9A:D9:DC:87:06:87:5B:9D Certificate issuer: /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Certificate serial: 010D0C9F4328584F075B44ECD68BC51716CAB700 Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/42518578-9cf1-33b1-9b7b-7efe3fd8db61.roa Signing time: Tue 01 Sep 2026 08:50:00 +0000 ROA not before: Tue 01 Sep 2026 08:50:00 +0000 ROA not after: Mon 30 Nov 2026 09:50:00 +0000 asID: 401450 IP address blocks: 2602:fa1c:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:5b:44:ec:d6:8b:c5:17:16:ca:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Validity Not Before: Sep 1 08:50:00 2026 GMT Not After : Nov 30 09:50:00 2026 GMT Subject: CN=9feb95fc-1979-4120-b5ed-3d52e44b3c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:32:92:57:c8:57:56:a1:92:23:31:07:3f: 44:05:40:80:e8:c9:33:4e:9f:33:ab:b3:48:6b:9e: 28:77:30:b1:d0:67:1a:9a:dd:2a:34:ac:6d:95:91: 63:71:20:c0:79:5a:86:f6:44:4f:4b:3f:96:db:27: 09:1d:30:a9:cc:17:e9:f8:d3:0d:58:7c:d7:b4:4b: 02:9c:24:03:1b:c2:39:79:0a:d5:f1:d3:bf:0b:3d: 01:f3:a0:15:71:1b:47:eb:57:50:01:b3:92:af:c3: e3:de:fb:2b:89:67:2d:ca:09:99:5b:9a:7d:e2:38: c1:a5:f5:71:7a:89:bb:4e:b3:41:72:6a:9b:0c:8b: 43:2a:db:ef:c6:cb:71:5a:ae:92:42:7d:26:18:ee: 6e:86:82:c7:f4:24:af:ca:8c:d7:cd:e1:7d:50:88: ef:1c:ec:b1:f7:6d:49:85:d0:9f:bf:5d:d1:58:fb: ac:05:77:21:cf:4b:e2:95:0a:38:f8:bb:d1:8c:83: c5:37:03:69:e9:3d:c2:75:3f:30:d6:5f:c0:4d:3c: 54:05:43:bf:12:6b:eb:29:5e:9d:b5:95:eb:12:13: e1:ff:89:21:65:2b:21:f3:7a:4b:10:29:d3:43:98: 9c:df:22:b2:3f:05:6d:4c:2c:95:fd:c5:da:3e:db: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:C4:AC:81:9A:FF:44:C6:72:AA:57:9A:D9:DC:87:06:87:5B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/42518578-9cf1-33b1-9b7b-7efe3fd8db61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl X509v3 Authority Key Identifier: keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa1c:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:19:ac:ea:78:82:79:fc:53:b3:74:4a:0c:95:d9:eb:4f:98: e2:3e:78:62:8a:df:59:3c:c8:c3:04:d7:63:c6:c5:4b:77:8a: e7:37:73:84:f3:31:12:cb:8f:7c:b9:04:7d:64:26:00:ad:a6: 56:eb:97:a5:83:46:6d:56:45:ed:1c:6e:2b:a5:f2:12:0d:2b: 66:41:28:d4:0b:03:79:f4:42:b9:af:6a:0f:5d:6d:98:fd:04: d6:a7:30:0a:63:a7:81:e4:cc:60:4a:ca:6a:08:34:57:c9:a3: 0c:db:af:9a:6f:d4:4f:25:5c:a1:b1:32:d4:9b:1b:f8:b7:84: 1b:37:15:a7:b3:e1:7b:f0:85:2b:34:e1:da:95:a5:ae:f1:a3: 3e:1e:7e:fa:9b:66:2a:8f:90:e6:6d:6b:83:b9:3e:b3:ba:b4: ad:1d:6b:93:69:32:7b:1b:4a:4a:62:21:4d:dd:d8:d0:38:00: 0c:9e:c9:20:31:35:b3:8d:62:c7:3e:ea:b6:dd:73:7b:0d:e4: bf:cf:9b:a0:bf:1e:d0:ee:24:54:a0:99:70:32:dc:a0:d2:a3: b7:04:e7:7b:50:50:2a:c8:c3:fd:99:42:7f:5a:d4:62:73:94: ce:3e:79:49:47:3c:e1:9b:3b:b1:77:00:be:14:63:59:18:e3: a5:e3:aa:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8HW0Ts1ovFFxbKtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiZDFhYTAtMmI0ZS00MzQ4LThmNTgtOGE5NGU0YmYx OGJmMB4XDTI2MDkwMTA4NTAwMFoXDTI2MTEzMDA5NTAwMFowLzEtMCsGA1UEAxMk OWZlYjk1ZmMtMTk3OS00MTIwLWI1ZWQtM2Q1MmU0NGIzYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEgyklfIV1ahkiMxBz9EBUCA6MkzTp8zq7NI a54odzCx0Gcamt0qNKxtlZFjcSDAeVqG9kRPSz+W2ycJHTCpzBfp+NMNWHzXtEsC nCQDG8I5eQrV8dO/Cz0B86AVcRtH61dQAbOSr8Pj3vsriWctygmZW5p94jjBpfVx eom7TrNBcmqbDItDKtvvxstxWq6SQn0mGO5uhoLH9CSvyozXzeF9UIjvHOyx921J hdCfv13RWPusBXchz0vilQo4+LvRjIPFNwNp6T3CdT8w1l/ATTxUBUO/EmvrKV6d tZXrEhPh/4khZSsh83pLECnTQ5ic3yKyPwVtTCyV/cXaPtuQcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNC5xKyBmv9ExnKqV5rZ3IcGh1udMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJk MWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0ZTRiZjE4YmYvNDI1MTg1NzgtOWNmMS0z M2IxLTliN2ItN2VmZTNmZDhkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTFiZDFhYTAtMmI0ZS00MzQ4LThm NTgtOGE5NGU0YmYxOGJmLzExYmQxYWEwLTJiNGUtNDM0OC04ZjU4LThhOTRlNGJm MThiZi5jcmwwHwYDVR0jBBgwFoAUCOxAAPxxyUvyfMvqGuWuxFpLbQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJkMWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0 ZTRiZjE4YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQZrOp4gnn8U7N0SgyV2etPmOI+eGKK31k8yMME12PGxUt3iuc3 c4TzMRLLj3y5BH1kJgCtplbrl6WDRm1WRe0cbiul8hINK2ZBKNQLA3n0Qrmvag9d bZj9BNanMApjp4HkzGBKymoINFfJowzbr5pv1E8lXKGxMtSbG/i3hBs3Faez4Xvw hSs04dqVpa7xoz4efvqbZiqPkOZta4O5PrO6tK0da5NpMnsbSkpiIU3d2NA4AAye ySAxNbONYsc+6rbdc3sN5L/Pm6C/HtDuJFSgmXAy3KDSo7cE53tQUCrIw/2ZQn9a 1GJzlM4+eUlHPOGbO7F3AL4UY1kY46XjqgE= -----END CERTIFICATE-----Generated at Tue Sep 22 12:02:47 2026 by rpki-client