$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/0be212df-51b1-3300-8849-b1f1f84491e4.roa File: 0be212df-51b1-3300-8849-b1f1f84491e4.roa (raw, json) Hash identifier: sX5Z8DND/ysdggP5/OP19KaMQudKdmaW61Vlq+V7KU4= Subject key identifier: 29:60:D2:2F:30:4F:3C:2D:D4:3F:4C:B8:DE:7C:E9:EB:FE:B4:02:60 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584F498BD8C6FDA39DE36FCFBE98 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/0be212df-51b1-3300-8849-b1f1f84491e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400556 IP address blocks: 2602:f71e:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d8:c6:fd:a3:9d:e3:6f:cf:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca4fee4e-d6f7-44e4-a5de-35c5ef1bb599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:e0:35:a3:ab:a2:5c:fa:4e:c7:ce:ea:96: d5:fa:a2:bc:3d:4e:41:5c:e7:b1:8f:83:ce:c0:7f: 57:85:ab:2a:7a:f3:ea:bf:24:69:0d:dc:57:ad:1e: 01:12:3f:44:6d:cc:ab:5c:d2:fa:ca:79:1e:2b:23: 74:e1:8a:78:f0:ad:8a:18:00:2e:0f:eb:f8:1e:e2: c9:2f:e4:ba:8b:8e:23:ea:99:7c:15:b5:e1:5f:bf: 8b:73:c6:5e:8a:cb:c3:c1:21:78:3e:10:3e:e3:a1: 28:0d:87:60:41:1f:ab:56:3c:ce:85:0a:9d:14:e1: 9e:1b:d1:48:d0:79:cd:24:22:06:fb:ac:bf:cb:3d: 94:ff:63:31:95:cb:e9:88:d4:a4:23:31:16:a9:bd: 8c:72:83:88:66:d8:ad:7e:cc:9e:55:1e:8d:6c:ed: a9:a6:0a:5a:27:28:c1:28:02:f4:3a:d8:51:48:53: 5e:e4:90:ae:91:3a:2a:6c:51:c0:0f:46:be:c4:cb: 4b:d6:e1:36:e4:0c:09:8d:31:00:d0:a0:4a:d2:65: 63:94:30:60:30:f4:10:61:f2:8e:6a:68:84:58:c3: df:5a:ac:a9:92:18:97:f2:7e:5c:0b:a8:36:15:7c: 87:d7:2f:30:94:be:77:86:dd:96:72:0a:f8:33:20: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:60:D2:2F:30:4F:3C:2D:D4:3F:4C:B8:DE:7C:E9:EB:FE:B4:02:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/0be212df-51b1-3300-8849-b1f1f84491e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:5e:72:f9:c8:33:c8:99:5b:ce:02:3b:a0:ba:5f:ec:7d:68: 2a:22:40:fa:ad:31:f3:6b:19:6e:73:08:13:47:71:70:7b:a7: 63:90:de:22:a3:95:60:56:fb:5f:55:c5:3d:a9:bc:19:18:31: 99:ac:34:6b:42:76:80:cb:fc:6d:8f:0f:5c:29:f3:2a:8c:16: 64:b9:2a:fb:3d:15:83:4c:2f:e0:9f:24:0d:2c:59:bc:27:ed: 7d:9d:1c:32:cb:dc:4c:e2:54:42:90:a9:9c:33:71:f3:73:c1: dd:ad:98:a9:4f:c2:89:6e:a1:38:0d:e3:da:a4:5e:86:15:41: 11:52:cd:9c:15:ec:e4:db:e1:63:13:cc:6b:45:d3:63:b4:63: 3d:3e:03:a8:c8:6d:10:fb:1a:4c:3c:38:9a:23:68:82:6f:35: d0:2a:ad:3f:3a:22:25:4c:c3:53:cc:76:44:7a:39:a1:9f:6f: 49:f1:7d:e2:62:09:88:17:44:b5:6d:79:99:ea:99:4b:6d:2a: 9d:97:87:d3:be:4c:d6:86:15:41:42:27:6f:e3:2f:ca:ec:8f: 3d:a9:5a:09:d8:60:a5:88:8f:66:04:c7:bc:cd:56:ee:aa:34: 57:06:ad:e0:bb:15:39:f1:e4:06:00:9f:88:0a:53:c3:47:23: 39:ad:01:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji9jG/aOd42/PvpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E0ZmVlNGUtZDZmNy00NGU0LWE1ZGUtMzVjNWVmMWJiNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eXgNaOrolz6TsfO6pbV+qK8PU5BXOexj4PO wH9XhasqevPqvyRpDdxXrR4BEj9EbcyrXNL6ynkeKyN04Yp48K2KGAAuD+v4HuLJ L+S6i44j6pl8FbXhX7+Lc8ZeisvDwSF4PhA+46EoDYdgQR+rVjzOhQqdFOGeG9FI 0HnNJCIG+6y/yz2U/2MxlcvpiNSkIzEWqb2McoOIZtitfsyeVR6NbO2ppgpaJyjB KAL0OthRSFNe5JCukToqbFHAD0a+xMtL1uE25AwJjTEA0KBK0mVjlDBgMPQQYfKO amiEWMPfWqypkhiX8n5cC6g2FXyH1y8wlL53ht2Wcgr4MyC2jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFClg0i8wTzwt1D9MuN586ev+tAJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMGJlMjEyZGYtNTFiMS0z MzAwLTg4NDktYjFmMWY4NDQ5MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL3HgMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMxecvnIM8iZW84CO6C6X+x9aCoiQPqtMfNrGW5zCBNHcXB7p2OQ 3iKjlWBW+19VxT2pvBkYMZmsNGtCdoDL/G2PD1wp8yqMFmS5Kvs9FYNML+CfJA0s Wbwn7X2dHDLL3EziVEKQqZwzcfNzwd2tmKlPwoluoTgN49qkXoYVQRFSzZwV7OTb 4WMTzGtF02O0Yz0+A6jIbRD7Gkw8OJojaIJvNdAqrT86IiVMw1PMdkR6OaGfb0nx feJiCYgXRLVteZnqmUttKp2Xh9O+TNaGFUFCJ2/jL8rsjz2pWgnYYKWIj2YEx7zN Vu6qNFcGreC7FTnx5AYAn4gKU8NHIzmtAac= -----END CERTIFICATE-----Generated at Sat Oct 3 23:20:18 2026 by rpki-client