$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa File: 3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa (raw, json) Hash identifier: PNBHUpROC2F3/X6VpLf+gigyxrPOQAQX9b3E6ei1OTM= Subject key identifier: BA:A6:C6:3B:65:D9:10:2A:2A:5A:60:73:BC:CB:35:82:33:1E:6A:3F Certificate issuer: /CN=f8e9b39d-7487-4785-9ac4-252370044d7a Certificate serial: 010D0C9F4328584F07D773EC271DD118A0ED2C00 Authority key identifier: 09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 55280 IP address blocks: 2602:f4d3:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:73:ec:27:1d:d1:18:a0:ed:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e9b39d-7487-4785-9ac4-252370044d7a Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=c418e565-1705-48ef-a4ee-31a042ad21d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:d5:3d:b7:41:8a:a7:3f:20:89:a8:3f:4e: b9:52:13:05:03:f2:47:df:e2:e6:96:43:23:61:e0: 32:7e:7a:8d:b2:39:c3:ff:61:9e:7e:95:4c:d8:e1: a8:96:c8:ce:0f:cb:ae:df:0c:37:65:42:98:91:d9: 25:9d:af:1b:ac:03:4b:be:b1:9f:49:28:e2:6b:ce: 3a:39:c4:a9:9f:07:95:05:ea:16:7d:58:67:cd:3e: 3a:ad:be:63:55:49:79:ac:2a:db:88:2f:04:be:8d: c0:ee:53:3c:93:93:a9:74:93:4a:6a:36:cf:52:1a: f4:45:74:32:74:99:1a:a5:48:59:70:17:a1:10:dc: 95:2d:96:5f:1e:0c:89:63:df:ee:9b:c8:be:31:ec: 5a:b3:2b:78:64:55:65:14:02:cd:8c:e2:f9:9e:0f: 0e:e3:4d:24:bc:bf:d4:18:9d:1f:16:8c:7f:7d:37: 1b:ba:b6:b6:88:93:04:60:cd:e5:5e:94:c9:33:e0: fa:cb:4b:b6:b4:41:d9:6d:93:54:c4:a3:0c:84:5f: 55:88:f0:82:66:83:4f:7b:38:aa:95:2b:d9:e9:ae: 8e:e1:31:9b:ea:39:30:08:a8:49:f2:00:2b:11:45: 15:5b:32:c8:cc:56:41:45:90:7e:d9:89:df:bf:89: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:C6:3B:65:D9:10:2A:2A:5A:60:73:BC:CB:35:82:33:1E:6A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/3d5e5cf5-e0e7-3708-9998-b6bafb9761e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.crl X509v3 Authority Key Identifier: keyid:09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4d3:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:84:f5:82:10:c6:ff:d5:c6:62:76:9d:a2:66:56:c1:50:a0: df:85:ca:35:a6:ea:3f:3b:ae:2b:6e:81:0e:a1:f1:e0:76:04: 62:57:65:26:6e:82:4a:a8:09:61:36:13:8b:11:68:81:e1:0f: 2e:f4:ee:26:90:01:f1:fb:40:08:7d:77:bd:89:fe:2c:6c:01: 91:e4:2f:f6:f5:36:e6:8a:0d:2a:ec:fc:dd:6d:80:87:6e:1c: a5:fb:7b:28:b3:6b:18:44:86:27:3f:aa:86:b8:01:0f:c3:ff: 60:01:d5:a9:e0:88:ad:c5:f3:47:0a:f5:bb:74:d8:a6:78:46: c1:81:c8:89:06:cc:2b:14:59:ab:4f:a3:3e:c8:df:1c:7d:61: 9d:28:06:58:34:bf:80:81:53:57:10:46:54:87:29:7b:85:2c: b4:96:05:77:c7:8c:b1:7e:30:21:62:05:7a:47:37:2f:f7:2e: be:67:9d:29:46:dc:0c:fd:fa:65:43:00:bf:6e:8e:38:91:26: 4e:45:0b:c6:ed:f4:9c:46:11:51:59:05:b3:bf:96:9c:46:1d: f9:21:2b:f5:22:d3:17:21:5d:ad:f2:a1:c4:3a:b9:ca:f5:08: b7:d4:0d:dd:40:2f:d3:3a:2e:ef:c5:f4:fb:eb:39:8a:d7:f1: b5:24:01:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8H13PsJx3RGKDtLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlOWIzOWQtNzQ4Ny00Nzg1LTlhYzQtMjUyMzcwMDQ0 ZDdhMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk YzQxOGU1NjUtMTcwNS00OGVmLWE0ZWUtMzFhMDQyYWQyMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglzVPbdBiqc/IImoP065UhMFA/JH3+LmlkMj YeAyfnqNsjnD/2GefpVM2OGolsjOD8uu3ww3ZUKYkdklna8brANLvrGfSSjia846 OcSpnweVBeoWfVhnzT46rb5jVUl5rCrbiC8Evo3A7lM8k5OpdJNKajbPUhr0RXQy dJkapUhZcBehENyVLZZfHgyJY9/um8i+Mexasyt4ZFVlFALNjOL5ng8O400kvL/U GJ0fFox/fTcbura2iJMEYM3lXpTJM+D6y0u2tEHZbZNUxKMMhF9ViPCCZoNPeziq lSvZ6a6O4TGb6jkwCKhJ8gArEUUVWzLIzFZBRZB+2Ynfv4n6MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLqmxjtl2RAqKlpgc7zLNYIzHmo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGU5 YjM5ZC03NDg3LTQ3ODUtOWFjNC0yNTIzNzAwNDRkN2EvM2Q1ZTVjZjUtZTBlNy0z NzA4LTk5OTgtYjZiYWZiOTc2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjhlOWIzOWQtNzQ4Ny00Nzg1LTlh YzQtMjUyMzcwMDQ0ZDdhL2Y4ZTliMzlkLTc0ODctNDc4NS05YWM0LTI1MjM3MDA0 NGQ3YS5jcmwwHwYDVR0jBBgwFoAUCW7D123SaylNtu/kyrshO5OX1bswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOGU5YjM5ZC03NDg3LTQ3ODUtOWFjNC0yNTIz NzAwNDRkN2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL00wAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaE9YIQxv/VxmJ2naJmVsFQoN+FyjWm6j87ritugQ6h8eB2BGJX ZSZugkqoCWE2E4sRaIHhDy707iaQAfH7QAh9d72J/ixsAZHkL/b1NuaKDSrs/N1t gIduHKX7eyizaxhEhic/qoa4AQ/D/2AB1angiK3F80cK9bt02KZ4RsGByIkGzCsU WatPoz7I3xx9YZ0oBlg0v4CBU1cQRlSHKXuFLLSWBXfHjLF+MCFiBXpHNy/3Lr5n nSlG3Az9+mVDAL9ujjiRJk5FC8bt9JxGEVFZBbO/lpxGHfkhK/Ui0xchXa3yocQ6 ucr1CLfUDd1AL9M6Lu/F9PvrOYrX8bUkAdQ= -----END CERTIFICATE-----Generated at Sun Sep 20 12:48:11 2026 by rpki-client