$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa File: d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa (raw, json) Hash identifier: cRJZ1rFTNu/WEqLld287Q1mqaKfygJeTeCwK/2etLy8= Subject key identifier: 43:F8:10:EE:F7:B8:EC:4C:33:0E:23:C6:14:D3:3F:B4:B4:02:B4:99 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584EFCACCFA524FD16368CAA64A0 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2602:fdaa:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cf:a5:24:fd:16:36:8c:aa:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=c529a9f6-0d24-48f0-aa55-c7321dedff81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:de:0c:14:63:6b:41:68:79:a5:77:af:a9: 8f:13:c3:a2:59:66:b7:93:24:ae:6b:55:db:60:4d: 74:7c:b2:af:9e:ef:d7:11:09:cc:e9:7e:d1:8f:4e: aa:af:80:65:95:c0:27:a9:f0:8f:6f:09:b1:e7:a6: 5b:93:a4:bf:3c:a2:4b:48:ba:8c:82:16:8c:ba:95: 7e:89:f9:46:04:a0:ca:11:1a:a9:a7:33:bc:d2:cd: 25:14:b8:3d:be:ed:8d:de:1b:21:e2:b2:c0:f8:dd: 19:d1:f5:e5:92:bf:6d:19:b5:55:71:a1:a8:0d:a9: dc:da:3d:65:54:a7:26:fd:7a:66:13:f7:a1:93:d9: 6e:df:43:3f:8a:22:6e:1a:cc:c0:ec:d0:81:46:b0: 34:54:0f:4a:55:d4:1e:5b:c7:7f:41:c5:7a:c4:1e: 91:32:91:45:6e:fa:1d:5d:a2:42:f9:66:7e:c2:61: 3f:50:ab:5e:93:00:92:b5:69:f7:50:98:cd:d0:8f: 31:ce:38:d4:ab:5c:97:30:d3:6a:05:2c:2d:ec:22: 6b:04:13:98:9e:b2:d8:43:a4:fb:26:55:2c:95:09: ea:cb:4c:d9:28:a7:80:4e:4f:96:f8:e2:b3:95:af: c0:eb:4d:d9:0b:f6:58:ae:a2:0b:d0:2b:bc:2e:85: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F8:10:EE:F7:B8:EC:4C:33:0E:23:C6:14:D3:3F:B4:B4:02:B4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b7:84:14:32:f2:01:a7:05:82:6d:a0:63:bf:0e:5b:90:2e: 51:f6:4d:bc:fc:12:f2:b1:2d:c7:cb:ab:e0:f2:77:38:51:ea: 0b:a2:d5:03:c2:db:1a:a8:59:61:64:3a:13:7e:1a:d9:22:64: 9d:6a:22:aa:77:48:b0:70:44:af:54:60:9b:7b:ff:36:d1:f5: ad:1d:38:a8:85:a4:55:f3:17:c3:7b:1f:1b:f0:7d:1f:ef:f1: 30:11:62:c1:07:5c:98:87:1a:ed:9c:ef:2b:45:7b:2d:2b:6b: aa:ef:ff:36:39:d9:85:cc:72:77:c8:23:30:87:91:ba:0e:fc: bd:45:14:80:71:e4:de:9f:8a:ed:53:79:ab:fb:dd:3e:72:36: f1:be:af:a3:74:7a:1a:be:c4:5e:30:85:18:9d:80:aa:2c:26: 35:64:36:43:fd:3c:b0:f6:b6:1f:9d:7f:a5:dd:d5:0c:8b:e2: f8:7e:63:1a:62:6b:cb:36:92:b1:78:c1:20:7a:16:89:2f:be: f1:10:75:23:28:20:a2:c5:9b:be:1a:f6:1d:52:8d:6a:79:6a: f1:cb:72:8c:17:9c:63:48:7e:bd:c0:63:30:7e:15:59:b6:92: d1:22:18:92:4c:72:f3:ae:54:37:42:a4:9f:4b:14:14:c6:5e: 0d:9b:79:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rM+lJP0WNoyqZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzUyOWE5ZjYtMGQyNC00OGYwLWFhNTUtYzczMjFkZWRmZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zfeDBRja0FoeaV3r6mPE8OiWWa3kySua1Xb YE10fLKvnu/XEQnM6X7Rj06qr4BllcAnqfCPbwmx56Zbk6S/PKJLSLqMghaMupV+ iflGBKDKERqppzO80s0lFLg9vu2N3hsh4rLA+N0Z0fXlkr9tGbVVcaGoDanc2j1l VKcm/XpmE/ehk9lu30M/iiJuGszA7NCBRrA0VA9KVdQeW8d/QcV6xB6RMpFFbvod XaJC+WZ+wmE/UKtekwCStWn3UJjN0I8xzjjUq1yXMNNqBSwt7CJrBBOYnrLYQ6T7 JlUslQnqy0zZKKeATk+W+OKzla/A603ZC/ZYrqIL0Cu8LoVoJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEP4EO73uOxMMw4jxhTTP7S0ArSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZDdkNmQ2MWItMDcwNS0z YzIyLThjY2MtN2Y2ZDM4ZDdlZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+3hBQy8gGnBYJtoGO/DluQLlH2Tbz8EvKxLcfLq+DydzhR6gui 1QPC2xqoWWFkOhN+GtkiZJ1qIqp3SLBwRK9UYJt7/zbR9a0dOKiFpFXzF8N7Hxvw fR/v8TARYsEHXJiHGu2c7ytFey0ra6rv/zY52YXMcnfIIzCHkboO/L1FFIBx5N6f iu1Teav73T5yNvG+r6N0ehq+xF4whRidgKosJjVkNkP9PLD2th+df6Xd1QyL4vh+ Yxpia8s2krF4wSB6FokvvvEQdSMoIKLFm74a9h1SjWp5avHLcowXnGNIfr3AYzB+ FVm2ktEiGJJMcvOuVDdCpJ9LFBTGXg2beZg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:27:39 2026 by rpki-client