$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa File: 09f0dca4-7037-3620-9a0d-95fbf887be2d.roa (raw, json) Hash identifier: 65qAByMekyj67QAEzCvzduE2sfVq2xLWbK1hNDLwris= Subject key identifier: B2:C0:F6:DA:3D:B0:85:E7:FD:B6:AB:84:8D:6D:43:76:F1:7B:A0:D3 Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F4328584F4976B402A59D44E9BD09E100 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 2602:f972:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:b4:02:a5:9d:44:e9:bd:09:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1640675a-e726-4f2d-a2c9-caae5751b262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:ee:78:6a:7f:84:2a:e7:fb:14:a7:bc:9a: 09:ee:11:37:ed:54:d9:20:bd:c2:73:85:cd:b0:34: e0:fd:64:ac:54:ed:6c:f8:f8:0d:a4:0c:94:32:12: 5f:f7:1f:df:c2:7d:8d:3b:da:c9:44:7a:d7:74:52: e3:10:9a:44:59:38:f2:82:ef:bf:f8:53:a7:63:d1: 60:94:d6:e2:99:f5:88:e9:fa:56:1b:9a:d1:32:3d: 05:5d:45:95:8e:37:6f:b6:ac:25:29:d1:f2:78:3a: 8d:be:a1:2c:00:c0:42:f7:d6:59:c7:e5:2d:f2:60: 7c:99:0a:54:52:49:ae:32:fe:c0:fe:cd:47:44:16: f6:0c:fc:2c:4f:5e:d1:96:96:d0:e9:9b:29:5c:94: d6:0b:6a:6c:ad:c3:78:85:18:13:23:b1:79:49:20: cd:3c:51:17:6c:16:a7:9a:5b:23:81:9e:f5:f8:33: 5f:75:c5:a6:b7:ad:3e:84:3c:63:3e:ad:28:67:44: d2:4a:86:bf:41:78:78:1b:20:d7:6b:04:1d:a6:36: 9a:12:f1:63:3a:39:59:ec:e9:ac:73:1e:ce:1d:e4: 4c:64:e8:bb:99:89:c0:8b:80:56:83:84:1b:e3:5d: f1:4c:85:8b:bf:2b:b7:56:35:3d:90:e9:0f:2b:e3: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C0:F6:DA:3D:B0:85:E7:FD:B6:AB:84:8D:6D:43:76:F1:7B:A0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:16:f0:cb:f2:92:c4:a3:6e:1e:81:83:0c:d2:b2:f4:db:c8: 5c:29:1f:68:b2:70:a7:54:a6:b5:ca:d7:86:fd:24:eb:fe:1a: 65:d7:85:60:c1:e9:b1:aa:42:f1:5e:1b:32:e0:14:45:71:48: 18:2f:b6:87:ff:a8:fc:76:86:c8:94:38:5c:74:31:22:72:91: 60:6b:98:e2:46:aa:c8:c0:27:a0:f2:0a:bb:b9:74:7d:63:c6: bf:97:5f:ec:06:86:02:db:6b:5e:18:e1:fb:7d:69:e6:ae:6d: 50:81:94:15:77:8d:3d:ac:83:72:89:b1:f1:25:c9:35:1f:1b: c7:9b:25:e4:7d:ba:95:dc:2c:f1:84:95:40:2d:bc:0b:f5:b9: 41:66:c2:06:fa:77:08:0f:b8:2e:b7:ae:c1:83:b6:6c:16:d5: c1:ee:9d:89:33:e5:40:43:c1:ed:f9:43:75:b9:f3:19:e4:64: a7:7d:8c:b5:01:b2:f7:ad:16:ed:56:e9:3b:ee:5a:08:70:39: 0e:a1:50:85:56:5f:5f:4e:41:31:97:6c:b0:96:a4:92:4f:d0: 24:a1:cd:33:2c:b9:1d:d6:c5:48:15:f4:94:8b:7f:78:da:e2: 6e:19:29:fd:35:53:56:cd:98:3d:4c:d0:e2:75:5d:47:b9:bd: 62:8f:e7:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdrQCpZ1E6b0J4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTY0MDY3NWEtZTcyNi00ZjJkLWEyYzktY2FhZTU3NTFiMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmjueGp/hCrn+xSnvJoJ7hE37VTZIL3Cc4XN sDTg/WSsVO1s+PgNpAyUMhJf9x/fwn2NO9rJRHrXdFLjEJpEWTjygu+/+FOnY9Fg lNbimfWI6fpWG5rRMj0FXUWVjjdvtqwlKdHyeDqNvqEsAMBC99ZZx+Ut8mB8mQpU UkmuMv7A/s1HRBb2DPwsT17RlpbQ6ZspXJTWC2psrcN4hRgTI7F5SSDNPFEXbBan mlsjgZ71+DNfdcWmt60+hDxjPq0oZ0TSSoa/QXh4GyDXawQdpjaaEvFjOjlZ7Oms cx7OHeRMZOi7mYnAi4BWg4Qb413xTIWLvyu3VjU9kOkPK+PoBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLA9to9sIXn/barhI1tQ3bxe6DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMDlmMGRjYTQtNzAzNy0z NjIwLTlhMGQtOTVmYmY4ODdiZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4W8MvyksSjbh6BgwzSsvTbyFwpH2iycKdUprXK14b9JOv+GmXX hWDB6bGqQvFeGzLgFEVxSBgvtof/qPx2hsiUOFx0MSJykWBrmOJGqsjAJ6DyCru5 dH1jxr+XX+wGhgLba14Y4ft9aeaubVCBlBV3jT2sg3KJsfElyTUfG8ebJeR9upXc LPGElUAtvAv1uUFmwgb6dwgPuC63rsGDtmwW1cHunYkz5UBDwe35Q3W58xnkZKd9 jLUBsvetFu1W6TvuWghwOQ6hUIVWX19OQTGXbLCWpJJP0CShzTMsuR3WxUgV9JSL f3ja4m4ZKf01U1bNmD1M0OJ1XUe5vWKP55o= -----END CERTIFICATE-----Generated at Tue Sep 29 13:25:57 2026 by rpki-client