$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa File: ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa (raw, json) Hash identifier: tVl/bLEDL4GP/uZSgbHBDtTSrkjAWnaudzZfAnByIlg= Subject key identifier: 4D:8F:20:FA:91:20:78:E6:4A:B5:21:30:B3:AB:69:8B:87:F4:0A:79 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584F130240595F2BD192880EC280 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 400556 IP address blocks: 2602:f71e:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:40:59:5f:2b:d1:92:88:0e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=bf2bf5e8-2c2f-436b-a389-a2b345ad1341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:d1:a1:bb:46:90:f6:b8:c2:b6:b2:a8:3d: 43:f9:94:94:39:28:3a:9d:cf:3e:92:09:f2:04:6c: 63:b4:b4:57:2b:eb:4d:12:e4:48:b6:68:89:d5:42: 91:d1:f3:90:45:50:bc:2d:c6:a6:84:02:56:2e:64: b5:b9:b2:7d:08:f1:7f:3f:62:80:bf:12:5a:34:45: 82:03:99:14:4e:9a:da:bc:f3:62:63:e7:f7:5e:84: 4e:0e:6f:1c:3f:da:3b:a7:56:bc:67:49:c5:4c:ac: 86:65:27:96:43:d6:20:7c:6b:f5:17:be:52:7c:11: e4:22:57:ff:f2:3b:04:6c:f4:77:f8:9f:49:65:b4: 30:cf:85:4a:1b:88:56:e4:e9:9f:8a:62:ff:39:1a: aa:38:fc:9c:e8:cc:d9:17:c5:ae:3e:5b:6d:88:57: 23:e0:c1:33:ef:82:7f:4a:e4:d2:45:b7:ed:c8:19: 0d:27:ba:a6:fb:95:7c:74:ac:d5:7b:be:ce:33:74: 96:65:95:5b:32:c5:4c:59:15:c5:d0:5e:8f:cf:ee: 56:69:79:ad:65:bb:bc:43:c2:bf:d0:2b:ff:86:a5: 8c:14:96:65:b4:25:11:3d:c3:b0:76:2a:7b:93:41: 3d:57:e2:ae:7a:94:39:af:9b:04:53:99:0a:49:4a: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:20:FA:91:20:78:E6:4A:B5:21:30:B3:AB:69:8B:87:F4:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f71e:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:09:fd:e0:1f:40:8d:16:05:fe:64:d1:4f:26:74:1f:d4:00: 6f:7d:cc:1b:dc:59:f8:f8:f6:a0:c7:b3:f3:21:17:9e:29:57: 24:52:c1:f6:91:44:5b:a2:80:17:9d:6c:60:c5:61:aa:95:c2: 4f:a8:f2:d5:26:70:34:a4:e0:66:84:1c:96:99:50:c9:f7:04: 55:03:c3:5e:31:0e:1e:3c:47:60:78:89:56:b0:f6:ac:8e:2f: 71:e1:c7:8f:5f:5f:a8:83:76:d0:9b:8f:d9:e3:d4:40:d3:aa: 81:62:d1:8f:26:3d:22:34:60:d0:3c:21:0c:1a:38:a0:19:ac: 58:be:d4:c9:ad:6c:af:65:80:de:19:96:cc:86:c8:15:47:d7: a4:be:a3:f9:01:f3:41:cb:e3:ff:4a:e9:7c:19:e8:4c:89:f9: 6a:33:9f:57:ac:20:9b:e0:86:f0:d5:2f:dc:f9:43:e6:f5:57: 47:ed:00:dc:4c:f5:38:bd:1c:f5:84:b6:6e:d7:0a:d9:50:64: e9:33:74:d4:7e:00:73:0c:d2:34:b3:16:e6:1f:1e:d8:d2:a8: d1:bb:f7:8c:0b:d2:b1:dc:97:15:3b:e1:f0:72:6c:10:2d:d5: 98:8f:dd:03:e5:d4:b2:17:6d:2e:ae:96:7b:cc:f4:63:66:42: d2:1d:e9:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAkBZXyvRkogOwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk YmYyYmY1ZTgtMmMyZi00MzZiLWEzODktYTJiMzQ1YWQxMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjRobtGkPa4wrayqD1D+ZSUOSg6nc8+kgny BGxjtLRXK+tNEuRItmiJ1UKR0fOQRVC8LcamhAJWLmS1ubJ9CPF/P2KAvxJaNEWC A5kUTpravPNiY+f3XoRODm8cP9o7p1a8Z0nFTKyGZSeWQ9YgfGv1F75SfBHkIlf/ 8jsEbPR3+J9JZbQwz4VKG4hW5OmfimL/ORqqOPyc6MzZF8WuPlttiFcj4MEz74J/ SuTSRbftyBkNJ7qm+5V8dKzVe77OM3SWZZVbMsVMWRXF0F6Pz+5WaXmtZbu8Q8K/ 0Cv/hqWMFJZltCURPcOwdip7k0E9V+KuepQ5r5sEU5kKSUoZ7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2PIPqRIHjmSrUhMLOraYuH9Ap5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvYWMyYmMzYmYtYWRmOC0z MmRlLWFlNGQtMGU1ZWRkZmEwZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3HgBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUJ/eAfQI0WBf5k0U8mdB/UAG99zBvcWfj49qDHs/MhF54pVyRS wfaRRFuigBedbGDFYaqVwk+o8tUmcDSk4GaEHJaZUMn3BFUDw14xDh48R2B4iVaw 9qyOL3Hhx49fX6iDdtCbj9nj1EDTqoFi0Y8mPSI0YNA8IQwaOKAZrFi+1MmtbK9l gN4ZlsyGyBVH16S+o/kB80HL4/9K6XwZ6EyJ+Wozn1esIJvghvDVL9z5Q+b1V0ft ANxM9Ti9HPWEtm7XCtlQZOkzdNR+AHMM0jSzFuYfHtjSqNG794wL0rHclxU74fBy bBAt1ZiP3QPl1LIXbS6ulnvM9GNmQtId6bA= -----END CERTIFICATE-----Generated at Mon Sep 21 03:40:47 2026 by rpki-client