$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa File: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json) Hash identifier: HcNBi03Z/+fuTljpcKz+Glw630en+pNRswhdUO4jOPg= Subject key identifier: 14:DA:65:1F:36:F1:C9:24:5F:EE:40:72:0A:A7:CC:8D:4C:B5:C0:7C Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584F2D87C712F3D29D52C7B8D280 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 54309 IP address blocks: 2602:fa3c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c7:12:f3:d2:9d:52:c7:b8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=40e3dc91-c2da-4829-a85d-45fa1e018fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:f9:5c:b3:ff:2c:96:73:32:60:0e:b4:54: 33:de:7f:48:48:d1:ca:ce:df:45:59:a0:4d:ca:89: 79:11:ad:75:03:4f:e4:50:82:6f:66:be:b1:25:23: f7:5a:4e:35:ae:2e:ee:9d:a8:6d:35:a9:26:84:5d: 09:0a:70:76:1d:1c:74:67:af:b9:51:a0:d1:1a:be: 84:11:7a:ea:54:6f:28:1e:68:19:86:bf:70:f4:c9: 44:8b:33:f9:28:dd:2f:d7:bc:5d:78:53:15:61:49: a4:1f:4d:d0:f0:13:55:18:3a:9e:8a:92:dd:e7:43: 9c:de:bb:ab:13:54:7a:63:3b:c0:09:bf:d4:a1:96: 4d:c2:e7:04:02:c6:ec:49:c0:16:72:50:a1:d8:24: 91:97:64:4d:9c:49:8d:c7:4d:cd:4f:f9:a8:de:80: 6c:95:cf:6e:d5:dc:0a:1f:d9:24:a2:c5:9f:8b:9b: a3:ac:b4:c4:55:9b:ba:ab:99:f4:81:a8:25:84:4d: 0d:1e:e4:3a:55:66:a6:7d:00:49:ae:40:d5:95:e1: f5:f0:db:e0:32:34:9b:31:cd:87:3a:fc:55:2d:dc: 93:f2:d6:13:a7:d4:81:21:27:39:40:d4:b0:3b:2d: 89:5e:47:56:8a:89:5f:20:24:0a:58:a8:62:93:e9: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DA:65:1F:36:F1:C9:24:5F:EE:40:72:0A:A7:CC:8D:4C:B5:C0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa3c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:56:4e:79:d5:82:3d:05:a6:cd:1a:71:9e:bc:52:de:1e:d1: 79:fa:f0:45:e2:6b:9d:75:4a:c9:a7:46:30:6b:0d:f1:f4:bd: 3b:b8:97:2d:3d:7f:8f:f7:2e:8e:75:f0:96:b8:86:ce:de:22: 5e:df:11:42:00:cf:0f:4f:52:05:cf:fc:de:d0:44:9e:74:02: 14:99:40:e5:cb:96:66:d5:66:7c:c5:07:d6:69:5f:9c:ad:a6: 78:e2:69:51:42:99:2c:be:50:e5:20:1e:c5:67:31:a9:2c:f4: 3c:c5:97:f4:fa:34:63:cc:54:8a:a0:54:d4:3c:8d:1a:dc:6b: 92:c5:00:fe:5c:11:a9:4e:56:50:a3:8d:1c:25:41:7a:79:d2: 0f:d4:ca:a4:64:19:24:2b:f8:c1:f7:e1:2a:f7:07:59:63:fc: 02:1f:54:b6:ce:99:aa:88:b4:3a:8d:f5:45:36:f5:9f:8a:24: e8:c3:a1:e2:51:c7:8c:0c:b9:8e:e4:14:51:50:3a:94:a1:f9: ce:82:4a:50:14:26:e7:5c:9e:05:c3:9e:b8:d1:f7:0c:72:f8: ce:cd:93:3a:20:11:3c:65:93:f7:8c:14:cb:98:2d:50:d2:60: 8e:a3:79:23:1d:8f:9a:e8:bd:d5:cb:a6:92:08:f2:f2:45:ec: d4:bd:d0:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8th8cS89KdUse40oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NDBlM2RjOTEtYzJkYS00ODI5LWE4NWQtNDVmYTFlMDE4ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bX5XLP/LJZzMmAOtFQz3n9ISNHKzt9FWaBN yol5Ea11A0/kUIJvZr6xJSP3Wk41ri7unahtNakmhF0JCnB2HRx0Z6+5UaDRGr6E EXrqVG8oHmgZhr9w9MlEizP5KN0v17xdeFMVYUmkH03Q8BNVGDqeipLd50Oc3rur E1R6YzvACb/UoZZNwucEAsbsScAWclCh2CSRl2RNnEmNx03NT/mo3oBslc9u1dwK H9kkosWfi5ujrLTEVZu6q5n0gaglhE0NHuQ6VWamfQBJrkDVleH18NvgMjSbMc2H OvxVLdyT8tYTp9SBISc5QNSwOy2JXkdWiolfICQKWKhik+k2vQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBTaZR828ckkX+5AcgqnzI1MtcB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZDY2YmEzM2UtMWE4Ny0z ZjdhLWEzY2EtODI5YzIzZGIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh1ZOedWCPQWmzRpxnrxS3h7RefrwReJrnXVKyadGMGsN8fS9O7iX LT1/j/cujnXwlriGzt4iXt8RQgDPD09SBc/83tBEnnQCFJlA5cuWZtVmfMUH1mlf nK2meOJpUUKZLL5Q5SAexWcxqSz0PMWX9Po0Y8xUiqBU1DyNGtxrksUA/lwRqU5W UKONHCVBennSD9TKpGQZJCv4wffhKvcHWWP8Ah9Uts6Zqoi0Oo31RTb1n4ok6MOh 4lHHjAy5juQUUVA6lKH5zoJKUBQm51yeBcOeuNH3DHL4zs2TOiARPGWT94wUy5gt UNJgjqN5Ix2Pmui91cumkgjy8kXs1L3QFA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:21:54 2026 by rpki-client