$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa File: 870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa (raw, json) Hash identifier: 5nC4GSYiXW36qFn5jFynrm9WBIIqWBZ/duvb2AzGVnM= Subject key identifier: FC:FE:36:9A:2B:CC:4E:0A:89:58:41:6E:68:58:42:68:00:4E:CB:B1 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584F49753805DC5FBFAC9F780580 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5744 IP address blocks: 2602:810:d000::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:38:05:dc:5f:bf:ac:9f:78:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35f5077c-3d13-4cc8-9266-e17db286f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:73:c5:8e:21:30:4b:f0:6c:b0:7a:c9:4e: a1:1c:4c:10:3f:5b:1c:20:82:c0:20:19:5a:8a:f3: c8:9d:c4:1c:3c:8b:70:fc:81:d5:c8:79:ff:e5:7a: 0d:88:6a:c4:be:53:d0:e7:c2:87:8b:9e:e5:0f:93: b9:aa:be:11:ad:cf:8a:1f:38:70:0d:bb:76:8e:97: 53:c6:ac:34:f9:51:94:81:71:4e:69:63:61:67:e0: 91:af:16:68:d4:07:3c:0f:96:c6:da:7c:52:f6:fe: 2b:bc:94:09:bf:33:bb:82:e9:af:05:15:e1:35:df: 69:48:bf:10:0e:ce:5a:c1:07:47:79:6c:a3:f7:39: 78:47:70:d2:e2:07:94:78:e4:fa:5d:38:9c:28:cd: 0b:11:62:71:8a:5d:c3:6c:77:de:e1:ba:18:7b:e8: a0:7e:a6:1b:97:07:cd:f9:31:76:04:74:7a:a4:41: 1f:8e:6f:51:6e:b4:a5:61:f5:9e:1e:2f:f4:0d:22: 8c:71:82:e7:32:05:16:82:2d:f0:08:13:bf:9e:fd: 9d:f8:d9:6d:8a:50:d3:85:57:74:02:68:35:95:41: a2:c9:b7:9d:2e:b9:2c:ab:9b:f9:77:1a:52:ee:ed: 35:89:9f:a8:ea:8b:5f:2e:cd:eb:b4:4b:9a:5e:e5: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FE:36:9A:2B:CC:4E:0A:89:58:41:6E:68:58:42:68:00:4E:CB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:df:ed:b7:6e:d8:a4:c4:50:a3:1e:9b:1a:e1:bd:a0:cb:5f: a4:7a:98:6c:65:c8:c6:64:fe:14:a1:f8:cb:f9:c5:e3:e6:dc: 6a:77:84:5c:e8:51:6e:ee:e1:87:05:18:d4:87:ff:3f:31:95: 71:ea:b9:50:38:fb:ab:90:89:76:80:f1:ce:ac:69:68:2d:74: 71:e4:6e:d9:c3:a5:0f:05:07:ba:a2:f9:08:7c:3f:a1:2e:68: 81:66:ee:b9:9b:a9:50:2f:2c:9f:f9:6e:b2:0e:f0:b9:24:f4: 10:57:12:a9:8e:ae:48:cb:ae:b8:21:57:16:ee:24:7b:cd:12: af:3d:45:69:81:a9:0e:72:90:ad:3c:7a:ea:33:89:57:ee:b1: 11:37:2a:6d:f2:63:2c:98:d6:67:c9:51:d7:21:b8:e6:87:b8: b7:cc:89:70:4b:ad:f5:54:6a:74:c8:e9:6a:e5:b7:4e:e8:b4: 5f:ca:ea:e5:85:d4:79:1a:83:61:82:df:e4:30:84:95:d1:da: 0b:b2:4e:a0:6b:9f:b5:c4:43:3e:47:4c:76:06:c5:b7:71:7d: 0f:8e:41:8b:c5:cc:1b:09:95:77:62:2c:91:80:8d:9d:32:aa: 3c:7d:7b:b7:a7:bd:79:1d:9c:e4:4c:6c:3f:3c:c7:bc:fd:85: 7b:80:02:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdTgF3F+/rJ94BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVmNTA3N2MtM2QxMy00Y2M4LTkyNjYtZTE3ZGIyODZmMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQdzxY4hMEvwbLB6yU6hHEwQP1scIILAIBla ivPIncQcPItw/IHVyHn/5XoNiGrEvlPQ58KHi57lD5O5qr4Rrc+KHzhwDbt2jpdT xqw0+VGUgXFOaWNhZ+CRrxZo1Ac8D5bG2nxS9v4rvJQJvzO7gumvBRXhNd9pSL8Q Ds5awQdHeWyj9zl4R3DS4geUeOT6XTicKM0LEWJxil3DbHfe4boYe+igfqYblwfN +TF2BHR6pEEfjm9RbrSlYfWeHi/0DSKMcYLnMgUWgi3wCBO/nv2d+NltilDThVd0 Amg1lUGiybedLrksq5v5dxpS7u01iZ+o6otfLs3rtEuaXuVyqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPz+NporzE4KiVhBbmhYQmgATsuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvODcwZDlkMDEtNmRmOS0z NWMxLWE0MWItMjhkNjBmNmNiMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPf7bdu2KTEUKMemxrhvaDLX6R6mGxlyMZk/hSh+Mv5xePm3Gp3 hFzoUW7u4YcFGNSH/z8xlXHquVA4+6uQiXaA8c6saWgtdHHkbtnDpQ8FB7qi+Qh8 P6EuaIFm7rmbqVAvLJ/5brIO8Lkk9BBXEqmOrkjLrrghVxbuJHvNEq89RWmBqQ5y kK08euoziVfusRE3Km3yYyyY1mfJUdchuOaHuLfMiXBLrfVUanTI6Wrlt07otF/K 6uWF1Hkag2GC3+QwhJXR2guyTqBrn7XEQz5HTHYGxbdxfQ+OQYvFzBsJlXdiLJGA jZ0yqjx9e7envXkdnORMbD88x7z9hXuAAso= -----END CERTIFICATE-----Generated at Mon Sep 28 22:58:02 2026 by rpki-client