$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa File: 643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json) Hash identifier: Ncnp3Mijso/ONRjeYXZHSE3lXsv5CJz2WXcB7+3YxkI= Subject key identifier: 4D:2B:13:17:B4:2F:96:B8:F1:31:56:C3:2C:7B:8F:CF:79:5D:10:0B Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584F374D1E7ECAD46AB2405F8980 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 40249 IP address blocks: 2602:fb78:10::/44 maxlen: 48 2602:fb78:20::/44 maxlen: 48 2602:fb78:30::/44 maxlen: 48 2602:fb78:40::/44 maxlen: 48 2602:fb78:50::/44 maxlen: 48 2602:fb78:60::/44 maxlen: 48 2602:fb78:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1e:7e:ca:d4:6a:b2:40:5f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=9a848eee-70ed-4f76-81db-2d4b4e46f0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:58:f9:15:64:15:75:c4:c4:53:2b:df:e5: 55:c5:58:44:53:a5:1b:c7:aa:09:5e:87:8d:80:b2: 0b:60:9f:d4:cb:8a:00:9c:8f:2e:5e:1b:cd:33:b4: fe:14:fb:27:5e:07:82:9a:7e:04:3a:54:ff:cb:9e: 1f:ec:81:8d:e8:cf:68:44:42:d5:2a:a9:46:7e:cb: 1b:92:3b:03:88:13:24:1c:d7:0d:81:96:dd:6c:40: 11:e3:84:f9:e0:f5:d3:1b:8b:aa:f3:9d:73:38:45: be:00:74:6d:16:7a:0d:ca:96:33:44:5b:0c:30:70: 49:69:6c:2e:7c:87:c7:30:c6:6c:90:fe:6a:35:48: 52:41:18:8a:b0:f2:e8:c4:5a:4c:f6:e1:53:ac:3d: 23:c6:9a:5d:1d:32:01:b1:e6:0f:8d:19:a0:45:dc: e7:4a:2d:ce:35:c3:fa:f7:4a:ab:78:c0:b5:ab:ff: 9c:a1:d0:47:09:40:9c:ee:d1:6e:e6:4e:bd:27:3b: e5:ee:45:5d:77:f0:94:5d:44:27:14:ee:ec:fe:fc: d3:cf:09:ab:41:ec:81:b7:a9:06:b5:a0:9c:2c:88: 96:b1:a4:71:d6:65:bd:68:28:21:25:81:98:c7:3b: ee:38:4a:89:d2:2e:37:66:bf:ca:62:76:b1:11:57: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2B:13:17:B4:2F:96:B8:F1:31:56:C3:2C:7B:8F:CF:79:5D:10:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ba:f7:ec:da:0d:11:c7:54:ac:79:24:d1:55:5b:f0:29:97: cf:38:2a:c8:14:77:e1:09:f4:33:4d:cf:26:cd:7a:16:10:ee: 34:d2:b4:c8:2c:46:31:c0:2a:d3:74:62:82:af:ba:ee:c7:e6: 86:84:11:49:30:2f:2c:b8:81:e7:95:4e:8e:a2:92:2c:32:8a: 81:32:a7:f8:22:4b:b1:43:bc:07:c3:27:7f:48:c7:fe:8e:90: 9a:3b:94:34:f5:76:38:97:ba:c5:8f:13:49:3c:e2:12:22:6f: 7b:20:f3:ae:e8:f4:1b:40:ce:bb:4f:b8:42:95:15:84:b0:e9: 47:86:1b:d5:7a:2f:5b:60:12:57:8b:04:b0:2e:13:96:fd:fe: f9:d7:11:26:6e:25:e0:26:54:26:9d:b7:4b:b5:3d:fc:c6:7d: 03:60:e3:84:86:79:b0:81:e9:5b:0c:e0:cb:ba:c9:f0:cc:b3: 21:fc:e2:4a:ad:67:c1:44:c8:8e:47:4e:23:c9:c9:c4:e5:5a: 6a:1a:4f:02:bd:50:5c:b8:cf:f9:60:99:f1:95:e0:c9:8a:43: 53:77:14:5e:e7:0c:98:4a:c2:4c:69:8b:f7:92:c1:f3:1c:88: fe:35:dc:d0:1c:16:ba:68:a5:3e:80:9c:2b:ce:27:6c:9b:9c: 98:a9:2b:f9 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE83TR5+ytRqskBfiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk OWE4NDhlZWUtNzBlZC00Zjc2LTgxZGItMmQ0YjRlNDZmMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitlY+RVkFXXExFMr3+VVxVhEU6Ubx6oJXoeN gLILYJ/Uy4oAnI8uXhvNM7T+FPsnXgeCmn4EOlT/y54f7IGN6M9oRELVKqlGfssb kjsDiBMkHNcNgZbdbEAR44T54PXTG4uq851zOEW+AHRtFnoNypYzRFsMMHBJaWwu fIfHMMZskP5qNUhSQRiKsPLoxFpM9uFTrD0jxppdHTIBseYPjRmgRdznSi3ONcP6 90qreMC1q/+codBHCUCc7tFu5k69Jzvl7kVdd/CUXUQnFO7s/vzTzwmrQeyBt6kG taCcLIiWsaRx1mW9aCghJYGYxzvuOEqJ0i43Zr/KYnaxEVev9QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFE0rExe0L5a48TFWwyx7j895XRALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNjQzZGVhMzItYWQ5NC0z NmQ5LWE2YzUtOTAzNjZhZjQ3OGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQmAvt4 ABADBwcmAvt4AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAU7r37NoNEcdUrHkk0VVb8CmXzzgqyBR34Qn0 M03PJs16FhDuNNK0yCxGMcAq03Rigq+67sfmhoQRSTAvLLiB55VOjqKSLDKKgTKn +CJLsUO8B8Mnf0jH/o6QmjuUNPV2OJe6xY8TSTziEiJveyDzruj0G0DOu0+4QpUV hLDpR4Yb1XovW2ASV4sEsC4Tlv3++dcRJm4l4CZUJp23S7U9/MZ9A2DjhIZ5sIHp Wwzgy7rJ8MyzIfziSq1nwUTIjkdOI8nJxOVaahpPAr1QXLjP+WCZ8ZXgyYpDU3cU XucMmErCTGmL95LB8xyI/jXc0BwWumilPoCcK84nbJucmKkr+Q== -----END CERTIFICATE-----Generated at Thu Sep 24 23:04:43 2026 by rpki-client