$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa File: 606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa (raw, json) Hash identifier: MiivHzHXOaHowWl+Rcm2284alWLE/PDC9DY2DwVL6bI= Subject key identifier: 89:2F:E6:31:D0:85:B9:08:F1:E4:83:0F:59:03:54:05:A0:58:02:5C Certificate issuer: /CN=481fd97a-d501-4297-871e-0024fbe50fc6 Certificate serial: 010D0C9F4328584F5E62EB5AFCEBAA3FF9D8B640 Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 35866 IP address blocks: 2602:f9ff::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:eb:5a:fc:eb:aa:3f:f9:d8:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=56a3f02d-ab8c-4c96-bafc-45634e4333ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:dc:26:9f:49:47:a4:4f:97:da:5c:6a:f5: 37:d6:f6:ab:fa:3e:65:32:00:c9:b9:a1:30:d7:d5: 46:8d:8a:22:94:c6:b3:d6:16:f6:2d:34:ef:71:23: 20:ee:7e:5f:f1:c3:41:75:25:51:e1:92:2b:00:ec: 17:65:ce:1f:62:cd:b6:e4:fc:d0:7f:57:88:4b:6b: 14:0e:89:5a:4f:37:37:98:dc:b7:40:bc:a8:21:b2: ae:86:9b:e6:55:a7:02:d4:e6:9f:ff:53:64:d2:21: e4:14:f6:fc:12:68:2f:dd:b9:b3:5f:89:dd:f1:8d: 78:c1:f8:ca:c7:25:0c:9f:b2:28:9a:f9:9c:fe:e1: e9:3d:74:f0:12:3d:a0:91:5c:db:fa:44:b7:34:2e: c7:2b:dd:ff:85:9c:a3:15:17:9e:ef:8a:03:ef:10: bd:12:f0:6d:29:c2:ff:61:88:c0:6a:fd:c8:52:48: ad:09:db:31:e3:28:1c:89:64:b9:6c:8c:c8:5e:8b: f0:25:f0:c9:aa:a0:1e:f1:8a:a5:c4:5b:51:c7:e6: d3:22:1e:8c:82:31:e1:c2:28:ca:6c:73:0e:f3:c4: 5f:49:b3:55:3b:7d:ac:17:df:3c:1f:88:f8:3e:99: b7:d8:26:e3:ed:5f:1c:4d:d9:f7:84:ae:55:28:a4: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:E6:31:D0:85:B9:08:F1:E4:83:0F:59:03:54:05:A0:58:02:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/606eaf22-49d7-3b2f-8b55-bea54ec3f0a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl X509v3 Authority Key Identifier: keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ff::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d2:19:e2:c4:0a:95:df:8f:12:26:9f:fd:ee:84:02:fb:6c: 41:21:0f:ca:98:be:24:6f:76:83:d4:4f:4e:02:84:1d:b3:36: 62:51:6a:cc:6d:30:22:7b:1a:d8:ba:11:f3:2c:08:cb:56:88: fb:54:19:fe:de:19:91:9f:39:9f:33:69:f3:c6:c9:74:62:6f: 9f:b6:80:e9:8e:10:f4:cf:91:d2:d5:ba:b8:b2:88:e1:28:20: c3:cd:89:51:97:97:b6:35:0b:ed:17:7d:29:33:f2:1f:b8:91: 1e:36:9c:9c:8b:07:b4:4a:41:61:d4:df:2b:19:2f:8b:d3:27: 78:6d:28:50:1a:28:0d:64:42:7f:99:b6:04:14:69:c3:a8:87: 79:5b:ec:72:3d:51:ba:64:cf:69:6a:28:69:3e:79:00:c3:77: 98:1e:02:d5:85:5c:32:b8:6f:5c:21:f8:ad:70:72:43:2d:10: 60:97:47:d8:e3:a8:74:11:e4:2f:aa:b4:77:a4:6b:31:af:99: 8b:11:a0:cb:25:e5:5c:9b:7e:9c:18:66:26:a1:20:ed:23:55: ad:0f:47:1f:40:51:89:46:63:18:87:22:73:37:3f:f8:90:ef: 1e:ec:63:7e:2f:cb:48:33:d3:0f:a1:e9:3b:25:77:02:4b:68: 7f:6f:58:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9eYuta/OuqP/nYtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxZmQ5N2EtZDUwMS00Mjk3LTg3MWUtMDAyNGZiZTUw ZmM2MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NTZhM2YwMmQtYWI4Yy00Yzk2LWJhZmMtNDU2MzRlNDMzM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhncJp9JR6RPl9pcavU31var+j5lMgDJuaEw 19VGjYoilMaz1hb2LTTvcSMg7n5f8cNBdSVR4ZIrAOwXZc4fYs225PzQf1eIS2sU DolaTzc3mNy3QLyoIbKuhpvmVacC1Oaf/1Nk0iHkFPb8Emgv3bmzX4nd8Y14wfjK xyUMn7Iomvmc/uHpPXTwEj2gkVzb+kS3NC7HK93/hZyjFRee74oD7xC9EvBtKcL/ YYjAav3IUkitCdsx4ygciWS5bIzIXovwJfDJqqAe8YqlxFtRx+bTIh6MgjHhwijK bHMO88RfSbNVO32sF988H4j4Ppm32Cbj7V8cTdn3hK5VKKQ+QwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIkv5jHQhbkI8eSDD1kDVAWgWAJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFm ZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0ZmJlNTBmYzYvNjA2ZWFmMjItNDlkNy0z YjJmLThiNTUtYmVhNTRlYzNmMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDgxZmQ5N2EtZDUwMS00Mjk3LTg3 MWUtMDAyNGZiZTUwZmM2LzQ4MWZkOTdhLWQ1MDEtNDI5Ny04NzFlLTAwMjRmYmU1 MGZjNi5jcmwwHwYDVR0jBBgwFoAU4H/Ea/sb8xfc3el0UXeyEUjLHxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFmZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0 ZmJlNTBmYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5/wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAp9IZ4sQKld+PEiaf/e6EAvtsQSEPypi+JG92g9RPTgKEHbM2YlFq zG0wInsa2LoR8ywIy1aI+1QZ/t4ZkZ85nzNp88bJdGJvn7aA6Y4Q9M+R0tW6uLKI 4Sggw82JUZeXtjUL7Rd9KTPyH7iRHjacnIsHtEpBYdTfKxkvi9MneG0oUBooDWRC f5m2BBRpw6iHeVvscj1RumTPaWooaT55AMN3mB4C1YVcMrhvXCH4rXByQy0QYJdH 2OOodBHkL6q0d6RrMa+ZixGgyyXlXJt+nBhmJqEg7SNVrQ9HH0BRiUZjGIciczc/ +JDvHuxjfi/LSDPTD6HpOyV3Aktof29Ymw== -----END CERTIFICATE-----Generated at Sun Oct 11 17:46:08 2026 by rpki-client