$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa File: 558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa (raw, json) Hash identifier: yDpDiFqQ82Sv0wS15oIS+VZRjMzCbvAWoroTQK2LZZQ= Subject key identifier: 99:2F:B9:64:4F:23:9A:6C:6E:2D:E0:8E:8D:B0:CF:49:69:FF:87:C2 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EF2E76CD0787F5EDDEC0DF180 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 2602:816:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:6c:d0:78:7f:5e:dd:ec:0d:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=fa7195fe-8e9b-4677-b9ed-2ebde1bb1165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:f6:e6:44:8d:8a:62:e7:34:a1:a1:67:9c: 1b:41:f6:bc:3d:ae:69:d2:97:34:a6:5a:5f:27:df: 80:c5:24:fc:3f:e1:84:89:62:a6:40:ca:d2:a0:2c: 9a:95:8f:63:fe:b8:cf:67:18:29:c5:c7:e5:dc:13: b0:35:e6:18:14:36:a4:5b:33:eb:73:c8:5c:ce:7d: d8:7b:e3:6e:65:1f:77:d7:cf:5e:60:8e:30:1b:27: 7d:ec:d0:35:c3:82:db:7a:f5:58:be:9e:8d:41:f4: 94:88:56:5c:84:dc:0d:75:b3:05:62:de:f7:08:8b: 1a:5f:73:0d:2a:99:25:25:d9:d3:19:41:2a:66:e1: 0a:6f:b9:06:02:c1:53:cd:ee:9e:df:7a:6a:28:96: f2:f9:1f:ea:da:91:bc:ba:f1:14:2b:e8:14:7e:ea: c1:fb:85:05:e0:ec:9e:56:ea:c9:77:15:46:a1:28: 86:5f:61:ad:83:8f:de:df:e7:9c:89:14:ab:25:a2: 22:98:a0:27:0d:0d:43:4e:d4:91:0f:ec:78:34:fd: f9:5e:2d:b6:17:3c:cd:be:45:89:97:ac:32:2e:89: eb:17:a7:34:cd:75:e3:c2:2a:ee:68:0a:e1:71:5a: 28:88:03:99:fe:f2:76:d0:59:67:9f:fd:55:e3:39: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:B9:64:4F:23:9A:6C:6E:2D:E0:8E:8D:B0:CF:49:69:FF:87:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f4:4a:1c:7b:93:5d:dc:71:ed:a5:a9:ce:e7:ce:a7:e2:ca: a7:d2:db:91:99:fd:48:96:a8:03:a9:80:34:60:f3:cb:a3:c6: 14:a4:d5:9b:9a:cd:66:2b:b5:dd:35:fb:3e:cf:fa:6b:78:3a: e2:56:33:c8:c2:ec:30:0a:ad:68:3e:23:0c:58:e4:90:c6:70: 90:6f:fc:f1:ac:42:72:c2:61:48:1f:23:2a:aa:37:ea:6e:38: 8e:52:e5:6b:d0:de:94:1e:f6:6d:29:35:5d:6a:76:ef:a7:32: 97:0e:98:aa:73:0f:d9:5d:54:2a:a0:46:05:51:45:b3:24:83: eb:98:ec:52:74:e5:95:39:46:dc:38:83:dd:cc:5c:61:e5:c5: 65:4c:02:ff:05:2a:48:91:ad:71:a2:4c:f8:87:fc:e5:ac:a6: 53:4a:75:35:d3:84:16:26:1a:8d:8e:a0:4e:bc:c1:e5:2b:e5: d6:a0:3c:29:02:9a:a6:2c:bc:e3:b9:47:b4:3b:bd:73:94:73: a7:6b:5c:b2:cf:45:c5:86:04:fe:3e:98:ff:4c:fb:b2:d7:1c: 89:2e:96:d2:79:2b:ad:2c:86:80:a2:b2:3f:cd:f8:a6:4d:f0: 2c:7c:b4:b6:ab:99:05:42:47:8c:c2:97:2d:cc:05:50:08:7b: 9e:8e:d5:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7y52zQeH9e3ewN8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZmE3MTk1ZmUtOGU5Yi00Njc3LWI5ZWQtMmViZGUxYmIxMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogz25kSNimLnNKGhZ5wbQfa8Pa5p0pc0plpf J9+AxST8P+GEiWKmQMrSoCyalY9j/rjPZxgpxcfl3BOwNeYYFDakWzPrc8hczn3Y e+NuZR93189eYI4wGyd97NA1w4LbevVYvp6NQfSUiFZchNwNdbMFYt73CIsaX3MN KpklJdnTGUEqZuEKb7kGAsFTze6e33pqKJby+R/q2pG8uvEUK+gUfurB+4UF4Oye VurJdxVGoSiGX2Gtg4/e3+eciRSrJaIimKAnDQ1DTtSRD+x4NP35Xi22FzzNvkWJ l6wyLonrF6c0zXXjwiruaArhcVooiAOZ/vJ20Flnn/1V4zlZQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkvuWRPI5psbi3gjo2wz0lp/4fCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTU4YTJlNjItZWMzMi0z ZWVkLWFjMzUtYjU0YjhmMGZjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKv0Shx7k13cce2lqc7nzqfiyqfS25GZ/UiWqAOpgDRg88ujxhSk 1ZuazWYrtd01+z7P+mt4OuJWM8jC7DAKrWg+IwxY5JDGcJBv/PGsQnLCYUgfIyqq N+puOI5S5WvQ3pQe9m0pNV1qdu+nMpcOmKpzD9ldVCqgRgVRRbMkg+uY7FJ05ZU5 Rtw4g93MXGHlxWVMAv8FKkiRrXGiTPiH/OWsplNKdTXThBYmGo2OoE68weUr5dag PCkCmqYsvOO5R7Q7vXOUc6drXLLPRcWGBP4+mP9M+7LXHIkultJ5K60shoCisj/N +KZN8Cx8tLarmQVCR4zCly3MBVAIe56O1dg= -----END CERTIFICATE-----Generated at Tue Sep 22 05:58:43 2026 by rpki-client