$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/dff4ddb4-ea75-37d6-a383-9a7782522ff8.roa File: dff4ddb4-ea75-37d6-a383-9a7782522ff8.roa (raw, json) Hash identifier: ZXFm/EEVlRo1x3pE+PsIZkp6OpSpJhOTecaTjHzPcV8= Subject key identifier: BE:D2:CF:08:76:C1:EF:EE:41:37:86:90:44:A6:3C:CA:FA:07:35:22 Certificate issuer: /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07 Certificate serial: 010D0C9F4328584F374D2EF14E5C5FA2876F3280 Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/dff4ddb4-ea75-37d6-a383-9a7782522ff8.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2602:819:f000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2e:f1:4e:5c:5f:a2:87:6f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=fb1082f3-3838-4918-8336-e3c455c7d070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:9b:52:ac:27:90:52:f2:42:9b:85:2b:39: c4:26:d5:87:81:bf:21:36:d5:04:79:07:a0:b4:de: cd:7c:91:db:4f:73:a0:80:4f:ab:31:09:42:ab:19: dd:2a:84:7b:6e:98:8d:f9:92:0e:e2:20:d6:bb:33: fa:56:2d:83:f7:54:98:c5:bb:dc:d5:d2:e7:3c:22: f2:ec:95:6f:ba:a4:9f:01:45:1a:c3:25:99:9f:4e: b3:e6:98:f8:ac:46:50:f2:99:48:b1:4e:98:44:68: 33:9e:d5:74:97:d5:56:8d:2f:4a:7b:a7:2e:d0:5a: 32:78:34:1a:c3:21:d4:ac:d2:ae:6f:66:c0:72:1e: 1b:ab:25:7c:91:ee:c9:1a:45:e6:83:f9:1f:49:6d: 41:5a:37:b8:3e:1b:b9:15:f9:f3:91:1a:c0:e3:88: a5:32:fa:dd:08:74:19:bb:53:52:45:f0:d7:71:b0: 23:18:cd:48:e5:33:b5:56:dc:a6:36:29:25:49:8b: aa:b0:23:a1:18:12:a7:78:83:92:9e:ef:67:42:73: b0:c3:ea:0e:c0:cc:a0:fc:5f:8f:e2:bf:ce:16:1d: 3f:16:bb:76:97:d4:81:ad:16:36:5f:ba:2e:ae:af: a6:5e:11:4f:5d:a9:fa:91:ba:8f:55:10:86:ae:61: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:CF:08:76:C1:EF:EE:41:37:86:90:44:A6:3C:CA:FA:07:35:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/dff4ddb4-ea75-37d6-a383-9a7782522ff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl X509v3 Authority Key Identifier: keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer sbgp-ipAddrBlock: critical IPv6: 2602:819:f000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:55:61:75:a6:67:c8:35:fa:72:8d:fa:ae:8a:7e:02:d1:c5: 03:e0:e3:58:9c:f6:bd:6b:32:8d:cd:39:6a:53:6b:07:49:87: ad:fa:8b:91:7f:c6:5f:3a:95:4c:70:13:9e:73:7d:c7:d2:6f: 59:63:68:95:8c:20:32:f8:b9:72:10:5a:87:16:5b:c5:f3:7e: be:d1:39:42:03:0b:8c:c1:18:63:b1:bf:ca:c4:0b:f0:a3:2e: 2d:a9:29:eb:b4:94:ce:88:5d:6c:52:f1:2d:99:22:c7:24:ad: 9d:2d:0a:c3:03:98:76:01:45:ac:e1:d8:b7:c8:91:82:c1:87: 38:e5:06:b3:39:97:30:17:8c:18:4e:c9:4b:a6:28:de:52:c5: 5e:ec:e4:7d:a9:4a:85:92:3b:6a:85:15:f9:16:d4:ac:e5:52: df:b7:42:82:c4:42:c8:27:7b:be:0c:73:a7:0e:06:c7:15:07: db:08:cc:1c:60:2d:2b:5c:ef:bb:ed:84:c8:7f:b3:13:b4:21: d0:c2:cb:e4:a0:f9:3c:d5:cb:4a:4b:d7:b1:78:c4:06:36:65: cd:a0:b6:91:34:ac:3c:e8:e6:0d:84:10:1f:6a:a5:da:d0:e4: 21:14:da:e8:84:40:8d:a5:fc:40:4d:9f:2f:34:4f:eb:91:04: e1:4c:b7:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE83TS7xTlxfoodvMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVmMzdkOWUtNGYwYS00MTdjLWJiOGQtYTAzM2UxYjcy ZTA3MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZmIxMDgyZjMtMzgzOC00OTE4LTgzMzYtZTNjNDU1YzdkMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCWbUqwnkFLyQpuFKznEJtWHgb8hNtUEeQeg tN7NfJHbT3OggE+rMQlCqxndKoR7bpiN+ZIO4iDWuzP6Vi2D91SYxbvc1dLnPCLy 7JVvuqSfAUUawyWZn06z5pj4rEZQ8plIsU6YRGgzntV0l9VWjS9Ke6cu0FoyeDQa wyHUrNKub2bAch4bqyV8ke7JGkXmg/kfSW1BWje4Phu5FfnzkRrA44ilMvrdCHQZ u1NSRfDXcbAjGM1I5TO1VtymNiklSYuqsCOhGBKneIOSnu9nQnOww+oOwMyg/F+P 4r/OFh0/Frt2l9SBrRY2X7ourq+mXhFPXan6kbqPVRCGrmHIMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL7Szwh2we/uQTeGkESmPMr6BzUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mZWYz N2Q5ZS00ZjBhLTQxN2MtYmI4ZC1hMDMzZTFiNzJlMDcvZGZmNGRkYjQtZWE3NS0z N2Q2LWEzODMtOWE3NzgyNTIyZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmVmMzdkOWUtNGYwYS00MTdjLWJi OGQtYTAzM2UxYjcyZTA3L2ZlZjM3ZDllLTRmMGEtNDE3Yy1iYjhkLWEwMzNlMWI3 MmUwNy5jcmwwHwYDVR0jBBgwFoAU59j31rxzq7Znl02eZKNC0wBbFXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mZWYzN2Q5ZS00ZjBhLTQxN2MtYmI4ZC1hMDMz ZTFiNzJlMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIGfAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZVYXWmZ8g1+nKN+q6KfgLRxQPg41ic9r1rMo3NOWpTawdJh636 i5F/xl86lUxwE55zfcfSb1ljaJWMIDL4uXIQWocWW8Xzfr7ROUIDC4zBGGOxv8rE C/CjLi2pKeu0lM6IXWxS8S2ZIsckrZ0tCsMDmHYBRazh2LfIkYLBhzjlBrM5lzAX jBhOyUumKN5SxV7s5H2pSoWSO2qFFfkW1KzlUt+3QoLEQsgne74Mc6cOBscVB9sI zBxgLStc77vthMh/sxO0IdDCy+Sg+TzVy0pL17F4xAY2Zc2gtpE0rDzo5g2EEB9q pdrQ5CEU2uiEQI2l/EBNny80T+uRBOFMt9Y= -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:06 2026 by rpki-client