$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa File: 89c120a2-1e35-30da-aab6-fe65c9e52460.roa (raw, json) Hash identifier: HixstqS7RpQk4zIZDu8+zWrCcwJWvyqXUT0EHRj/jqU= Subject key identifier: AE:D5:5F:AA:33:AD:F0:D2:A8:FF:DF:30:F4:67:E6:74:B8:07:50:50 Certificate issuer: /CN=45c9903a-58e9-4d12-b429-df86258726e0 Certificate serial: 010D0C9F4328584F0D6CFF18529634F013C79D00 Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2602:f387:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ff:18:52:96:34:f0:13:c7:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=f8177356-f1a4-4d4b-9849-d212457e10c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:c5:f4:9a:98:34:01:b6:75:57:80:bb:a6: 24:c4:e5:ac:2d:cc:4a:04:a8:4a:4d:fd:55:d3:20: cd:62:15:13:8c:71:fb:c8:d9:5d:42:49:c8:c5:38: 86:7f:4e:0d:d2:b0:9c:e9:08:3a:94:01:d2:58:ed: 46:39:a4:92:3e:88:50:19:3e:5a:bf:90:ec:1b:15: b6:ed:5b:c8:01:96:51:ad:a1:5e:ad:09:85:fa:08: d6:ee:75:42:0c:2e:0d:c3:2d:34:f6:01:19:69:be: 2f:3c:15:f2:60:0e:64:20:5b:9b:71:ec:77:6d:e0: b2:ef:40:75:77:1f:fc:d0:7b:d1:f3:79:10:d0:77: 05:bd:76:10:5c:c4:97:4f:bc:db:10:28:be:07:49: 67:bc:36:9b:f7:86:56:aa:4e:9d:c1:85:b3:fa:0f: 04:63:f2:33:99:4f:a8:7b:ea:97:86:d6:c6:15:73: fe:fb:f5:60:03:fc:0d:d4:e1:58:4f:04:51:fd:8f: 17:f6:99:92:2a:3f:e6:ec:ea:e4:ca:7e:96:ee:32: 70:9a:c4:47:a3:64:d3:aa:db:6d:df:10:5b:14:3b: 3f:23:72:4c:99:fe:69:b0:54:c5:7f:14:43:7b:3d: cb:00:b5:3f:53:9c:f2:0b:14:30:2e:ba:dc:e2:8d: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:5F:AA:33:AD:F0:D2:A8:FF:DF:30:F4:67:E6:74:B8:07:50:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/89c120a2-1e35-30da-aab6-fe65c9e52460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl X509v3 Authority Key Identifier: keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f387:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d8:28:4c:6d:55:44:cc:00:a7:c3:0b:a5:9c:28:bf:70:c2: 7e:dd:bd:28:6e:fc:2f:b0:8c:2d:f2:ce:87:90:3b:5d:b6:68: 2d:4a:96:3c:c2:9f:d3:2f:86:b7:fb:b7:01:77:bb:62:dd:0f: 7b:36:04:8a:0d:cd:75:bd:22:84:9e:33:4c:ef:c7:3e:57:ae: 44:76:73:ac:2e:fc:8d:41:26:35:a7:34:41:a5:9d:e9:c7:22: 81:ba:c4:b8:7d:07:aa:fb:43:af:ac:6b:d8:9f:a0:ec:df:e6: 5c:9e:f4:07:eb:6e:79:d6:f3:90:ca:e3:38:66:d2:16:97:c5: fe:58:03:9f:68:d2:78:e6:92:b7:43:b7:23:76:36:59:d9:ed: 83:6a:f0:c7:9a:1a:d5:88:cd:c6:32:8c:f7:26:b4:80:4a:e4: c5:d1:ef:61:cc:4c:40:a1:ae:70:49:4f:07:e5:f2:d8:3f:85: a6:07:e0:17:9f:87:9c:2f:42:c9:5c:79:0e:16:7c:b1:e7:02: 6c:89:06:43:e0:8d:dd:77:62:cc:75:53:cd:06:18:c4:48:db: cb:fc:3a:20:db:6e:ea:a4:03:30:fc:a3:c8:50:91:33:ad:f6: 5c:51:7f:ff:61:67:74:e1:93:4c:60:d1:2e:67:f8:eb:10:e6: c2:67:d7:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbP8YUpY08BPHnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy NmUwMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjgxNzczNTYtZjFhNC00ZDRiLTk4NDktZDIxMjQ1N2UxMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+vF9JqYNAG2dVeAu6YkxOWsLcxKBKhKTf1V 0yDNYhUTjHH7yNldQknIxTiGf04N0rCc6Qg6lAHSWO1GOaSSPohQGT5av5DsGxW2 7VvIAZZRraFerQmF+gjW7nVCDC4Nwy009gEZab4vPBXyYA5kIFubcex3beCy70B1 dx/80HvR83kQ0HcFvXYQXMSXT7zbECi+B0lnvDab94ZWqk6dwYWz+g8EY/IzmU+o e+qXhtbGFXP++/VgA/wN1OFYTwRR/Y8X9pmSKj/m7Orkyn6W7jJwmsRHo2TTqttt 3xBbFDs/I3JMmf5psFTFfxRDez3LALU/U5zyCxQwLrrc4o2YWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK7VX6ozrfDSqP/fMPRn5nS4B1BQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5 OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvODljMTIwYTItMWUzNS0z MGRhLWFhYjYtZmU2NWM5ZTUyNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0 MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3 MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2 MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfYKExtVUTMAKfDC6WcKL9wwn7dvShu/C+wjC3yzoeQO122aC1K ljzCn9Mvhrf7twF3u2LdD3s2BIoNzXW9IoSeM0zvxz5XrkR2c6wu/I1BJjWnNEGl nenHIoG6xLh9B6r7Q6+sa9ifoOzf5lye9AfrbnnW85DK4zhm0haXxf5YA59o0njm krdDtyN2NlnZ7YNq8MeaGtWIzcYyjPcmtIBK5MXR72HMTEChrnBJTwfl8tg/haYH 4Befh5wvQslceQ4WfLHnAmyJBkPgjd13Ysx1U80GGMRI28v8OiDbbuqkAzD8o8hQ kTOt9lxRf/9hZ3Thk0xg0S5n+OsQ5sJn12M= -----END CERTIFICATE-----Generated at Sun Sep 20 14:47:35 2026 by rpki-client