$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa File: 843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa (raw, json) Hash identifier: gSKKaneCe+nosCRGlVqSQNafXR+g/NoQG0ErkQjXHCo= Subject key identifier: 70:FB:A5:FB:34:30:EF:FB:13:1D:7D:36:F5:C3:47:CE:48:DF:B9:32 Certificate issuer: /CN=cd7304e1-3bc1-43c1-b035-93ee027063db Certificate serial: 010D0C9F4328584F31B7BE72807B5CC7A6FD2880 Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 62925 IP address blocks: 2602:fa93:ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:be:72:80:7b:5c:c7:a6:fd:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=b1ff571f-9ce9-4273-a4bd-d5bda20fbdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:28:45:5b:8b:6c:bc:33:48:7a:7d:f5:48: 7b:92:c6:82:65:67:33:5b:65:73:67:9e:a0:f0:f8: 67:fc:29:65:42:b0:fc:69:ef:f3:62:a0:3e:85:9d: 26:06:72:82:85:e0:24:22:79:03:93:fb:96:42:da: 1f:fd:1c:e5:32:05:5e:5f:54:66:b0:19:54:0a:fd: 2e:67:ba:a5:a5:3d:f7:13:b6:cc:13:93:ee:30:d6: ed:24:85:5c:f4:47:fc:d7:e5:41:28:38:16:e6:c6: 0a:d7:ed:29:6a:13:0b:ea:9d:b3:8f:8a:4b:db:b1: 8e:b0:5d:a4:d0:e9:04:b9:69:1c:47:1e:08:83:e3: ae:c2:70:a7:cf:4b:ae:e0:f4:18:15:f9:46:3f:6c: d3:e3:7c:ba:ad:18:cf:06:e1:0e:61:b6:14:c4:1f: 6a:37:86:cd:12:5a:88:6d:da:f8:82:cf:f4:5a:4e: 73:7e:15:ec:f9:d8:41:6a:28:db:20:ce:a7:47:1f: 25:0d:5e:74:df:94:3b:af:63:28:2a:bf:30:85:fb: ba:3a:c2:bc:5f:56:cc:72:c8:ea:43:ac:ac:7b:dc: 8e:9a:07:d4:c0:ee:4b:42:bf:9a:e9:dc:4a:d1:b6: e5:dd:46:fc:4e:82:6c:0e:51:08:f6:fd:00:86:fb: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:A5:FB:34:30:EF:FB:13:1D:7D:36:F5:C3:47:CE:48:DF:B9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl X509v3 Authority Key Identifier: keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa93:ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a2:16:84:f6:ed:03:eb:29:09:ff:b0:01:3b:66:18:79:81: 23:d2:4d:28:1e:9a:66:75:93:16:c2:a9:e8:82:75:71:1b:58: ca:6b:6d:d8:9e:5d:73:32:81:37:77:e4:e0:ec:e8:9d:44:b8: 3b:a4:f5:55:57:20:2e:74:b8:d3:1e:32:f1:ac:ec:89:09:c5: 16:5a:89:42:4f:6d:37:f5:1b:af:16:4d:b6:1e:12:d4:1c:36: 81:77:ee:75:30:fa:85:3d:14:aa:73:04:bf:5e:32:a6:b0:b8: 88:99:46:ec:c7:b8:de:55:29:97:97:f0:10:43:ca:47:fd:8d: 10:1b:be:56:2f:d5:fa:aa:7b:13:29:32:2c:85:0f:45:25:c3: b3:0a:8a:94:57:4b:2e:e7:45:67:91:b8:7c:4c:2c:60:3b:2e: 39:ae:71:e8:35:09:e7:6c:2b:91:9d:e0:1d:a4:2c:49:a4:68: 9a:68:1a:8c:2a:18:d5:a1:73:10:11:c2:19:af:ed:34:9d:af: 43:49:d3:ca:67:a7:24:b3:36:53:72:6a:40:83:97:ca:fc:1c: 0a:c8:dc:59:0e:7d:c9:44:72:e4:f4:a8:df:22:2f:ea:50:93: ff:32:db:6c:4c:c6:82:55:73:2c:b4:a4:f0:70:58:9f:75:ea: 53:fc:9d:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8xt75ygHtcx6b9KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2 M2RiMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YjFmZjU3MWYtOWNlOS00MjczLWE0YmQtZDViZGEyMGZiZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntkoRVuLbLwzSHp99Uh7ksaCZWczW2VzZ56g 8Phn/CllQrD8ae/zYqA+hZ0mBnKCheAkInkDk/uWQtof/RzlMgVeX1RmsBlUCv0u Z7qlpT33E7bME5PuMNbtJIVc9Ef81+VBKDgW5sYK1+0pahML6p2zj4pL27GOsF2k 0OkEuWkcRx4Ig+OuwnCnz0uu4PQYFflGP2zT43y6rRjPBuEOYbYUxB9qN4bNElqI bdr4gs/0Wk5zfhXs+dhBaijbIM6nRx8lDV5035Q7r2MoKr8whfu6OsK8X1bMcsjq Q6yse9yOmgfUwO5LQr+a6dxK0bbl3Ub8ToJsDlEI9v0AhvsRxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHD7pfs0MO/7Ex19NvXDR85I37kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvODQzZmFhMGMtY2ZlZC0z NjI0LWIxZDctMjljOWExZjJlMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl MDI3MDYzZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6kw/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+iFoT27QPrKQn/sAE7Zhh5gSPSTSgemmZ1kxbCqeiCdXEbWMpr bdieXXMygTd35ODs6J1EuDuk9VVXIC50uNMeMvGs7IkJxRZaiUJPbTf1G68WTbYe EtQcNoF37nUw+oU9FKpzBL9eMqawuIiZRuzHuN5VKZeX8BBDykf9jRAbvlYv1fqq exMpMiyFD0Ulw7MKipRXSy7nRWeRuHxMLGA7Ljmuceg1CedsK5Gd4B2kLEmkaJpo GowqGNWhcxARwhmv7TSdr0NJ08pnpySzNlNyakCDl8r8HArI3FkOfclEcuT0qN8i L+pQk/8y22xMxoJVcyy0pPBwWJ916lP8nQQ= -----END CERTIFICATE-----Generated at Tue Sep 22 18:19:44 2026 by rpki-client