$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/bae2a900-bc0a-31d8-b025-2810d10372ad.roa File: bae2a900-bc0a-31d8-b025-2810d10372ad.roa (raw, json) Hash identifier: Qu/VknDG1lQFhMmNq+JNvg4/X9x29R/kz46Au/T74EY= Subject key identifier: 22:5F:B6:33:14:B9:BC:B9:74:EE:22:0D:C1:6A:54:E7:E8:AE:2B:55 Certificate issuer: /CN=5135604a-70f4-4d84-a94f-422b1c172046 Certificate serial: 010D0C9F4328584EF9E20C06B27B88A1BF2F8500 Authority key identifier: 66:23:4E:AF:C9:9D:E6:E0:08:2E:37:B1:7C:39:7D:9B:DC:AF:5C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/bae2a900-bc0a-31d8-b025-2810d10372ad.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 59730 IP address blocks: 2602:f4cb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0c:06:b2:7b:88:a1:bf:2f:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5135604a-70f4-4d84-a94f-422b1c172046 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=d941e628-c731-4a75-8f79-7cb9d50d2c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:ca:3f:0b:e8:59:db:ba:65:b6:c6:ab:7c: 65:47:5a:09:a7:c4:82:c7:af:b7:39:28:8e:c4:75: b0:ef:10:6a:a0:7f:c3:17:35:42:19:74:f2:c3:b1: 3b:40:24:47:7d:07:26:c9:cd:da:84:b9:6a:d7:51: 34:17:e4:c2:ae:b3:f8:18:98:a6:9a:69:04:7d:b3: b0:0b:ad:01:be:a8:e1:7b:05:bd:59:07:51:11:43: fd:c4:bf:7d:f3:4d:33:56:02:ec:a9:12:2b:98:4d: d8:4e:46:fd:fe:cf:34:7b:63:23:ab:5f:d5:e9:24: 38:ba:b6:35:55:13:bd:e4:3d:f3:72:dd:23:32:e9: ad:dd:00:94:d0:cd:26:d5:bd:87:80:85:45:6a:ae: 60:d6:73:39:ac:1e:6f:a5:5b:ba:be:7e:38:39:df: e4:4e:f5:df:0e:f8:2a:17:6c:b2:54:78:20:cc:56: 9f:3a:11:8b:b3:cd:d6:40:bc:99:71:42:88:ae:7f: 2e:5b:da:6d:92:00:17:c0:37:26:7f:da:28:26:d6: dc:10:b6:17:58:98:a4:9f:8a:3a:92:03:ba:27:4e: 19:e8:b2:7b:cf:22:03:06:9b:5f:6e:69:21:6a:03: 0b:25:24:01:04:ba:78:72:dd:09:b4:6f:76:1c:c7: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:B6:33:14:B9:BC:B9:74:EE:22:0D:C1:6A:54:E7:E8:AE:2B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/bae2a900-bc0a-31d8-b025-2810d10372ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.crl X509v3 Authority Key Identifier: keyid:66:23:4E:AF:C9:9D:E6:E0:08:2E:37:B1:7C:39:7D:9B:DC:AF:5C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4cb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6d:74:72:f3:76:f9:f7:b5:a2:44:fe:58:10:69:7a:3f:b2: 07:45:a4:b5:88:24:88:dd:5d:36:e9:2f:74:8b:fb:76:e9:a5: 1d:4f:fe:09:b3:99:f3:18:bc:73:4b:b9:c3:6c:f3:e7:0d:08: 92:47:da:14:28:3c:37:66:73:dd:61:b0:8a:5d:b1:b1:01:21: 63:95:5b:b4:b9:22:c6:e3:ca:20:7e:50:31:70:70:91:e3:4c: 1c:41:45:6f:f6:af:03:67:11:a9:ca:3a:51:b9:72:92:74:7a: 8d:d6:65:4a:09:5c:43:f4:af:31:ef:a3:d7:9e:71:d1:c8:f0: 8c:5e:f6:8b:16:a2:5a:97:51:95:0a:e1:3b:12:fe:fb:03:65: 20:31:1e:8f:e6:81:ee:2a:4f:a4:2d:3d:6b:21:57:6f:97:80: e8:c1:b5:90:8f:d8:82:c4:53:5d:d2:41:6d:8d:31:86:b2:03: 76:79:94:a2:49:08:68:28:16:14:95:79:90:87:d1:e2:97:e9: 7a:4d:2d:56:ad:af:92:42:91:92:8f:a5:fc:5e:39:8d:52:1e: d5:40:a1:7a:20:46:4c:1e:cf:43:0a:9b:13:6b:d7:de:8f:88: 21:ef:bd:d8:a2:99:bd:da:3d:11:f5:b0:1c:af:2a:bf:8c:1b: e1:9d:38:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE754gwGsnuIob8vhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTEzNTYwNGEtNzBmNC00ZDg0LWE5NGYtNDIyYjFjMTcy MDQ2MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDk0MWU2MjgtYzczMS00YTc1LThmNzktN2NiOWQ1MGQyYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMjKPwvoWdu6ZbbGq3xlR1oJp8SCx6+3OSiO xHWw7xBqoH/DFzVCGXTyw7E7QCRHfQcmyc3ahLlq11E0F+TCrrP4GJimmmkEfbOw C60BvqjhewW9WQdREUP9xL99800zVgLsqRIrmE3YTkb9/s80e2Mjq1/V6SQ4urY1 VRO95D3zct0jMumt3QCU0M0m1b2HgIVFaq5g1nM5rB5vpVu6vn44Od/kTvXfDvgq F2yyVHggzFafOhGLs83WQLyZcUKIrn8uW9ptkgAXwDcmf9ooJtbcELYXWJikn4o6 kgO6J04Z6LJ7zyIDBptfbmkhagMLJSQBBLp4ct0JtG92HMdMuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCJftjMUuby5dO4iDcFqVOforitVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81MTM1 NjA0YS03MGY0LTRkODQtYTk0Zi00MjJiMWMxNzIwNDYvYmFlMmE5MDAtYmMwYS0z MWQ4LWIwMjUtMjgxMGQxMDM3MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTEzNTYwNGEtNzBmNC00ZDg0LWE5 NGYtNDIyYjFjMTcyMDQ2LzUxMzU2MDRhLTcwZjQtNGQ4NC1hOTRmLTQyMmIxYzE3 MjA0Ni5jcmwwHwYDVR0jBBgwFoAUZiNOr8md5uAILjexfDl9m9yvXHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81MTM1NjA0YS03MGY0LTRkODQtYTk0Zi00MjJi MWMxNzIwNDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0ywAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGm10cvN2+fe1okT+WBBpej+yB0WktYgkiN1dNukvdIv7dumlHU/+ CbOZ8xi8c0u5w2zz5w0IkkfaFCg8N2Zz3WGwil2xsQEhY5VbtLkixuPKIH5QMXBw keNMHEFFb/avA2cRqco6UblyknR6jdZlSglcQ/SvMe+j155x0cjwjF72ixaiWpdR lQrhOxL++wNlIDEej+aB7ipPpC09ayFXb5eA6MG1kI/YgsRTXdJBbY0xhrIDdnmU okkIaCgWFJV5kIfR4pfpek0tVq2vkkKRko+l/F45jVIe1UCheiBGTB7PQwqbE2vX 3o+IIe+92KKZvdo9EfWwHK8qv4wb4Z04jA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:00:11 2026 by rpki-client