$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/970ae159-a3e2-326f-b257-6f80e1398044.roa File: 970ae159-a3e2-326f-b257-6f80e1398044.roa (raw, json) Hash identifier: /jp+Tcrb8GS0fJBTHDFfyRZk6TCUsmpKtaU4Ly69IIY= Subject key identifier: F6:32:84:29:1C:96:7C:D9:C0:AE:B9:8B:AC:E0:2C:96:46:45:C2:79 Certificate issuer: /CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4 Certificate serial: 010D0C9F4328584F43DD282F21AD19532BAAA880 Authority key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/970ae159-a3e2-326f-b257-6f80e1398044.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 401753 IP address blocks: 2602:f61e:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:28:2f:21:ad:19:53:2b:aa:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=52da5e46-7d08-48b1-aa7d-3430b03746d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:5c:52:cb:c9:fb:e6:91:d3:8d:ef:21:77: 3b:48:fc:bb:10:a8:db:43:93:f5:af:85:19:3c:67: 1d:38:14:76:be:c7:60:a0:6b:f1:b7:e0:21:89:69: 97:c0:4a:30:f5:22:26:6f:d9:f5:90:b5:4f:dd:f5: 29:f1:7d:48:31:9a:a5:ce:79:c2:7c:da:01:1c:84: 21:5f:2b:53:b6:5e:89:d8:87:92:55:07:bd:dd:8b: 4b:85:64:f5:77:4d:0b:f9:96:14:09:87:96:74:0e: 41:32:e5:95:d1:b2:91:70:6e:47:15:f6:b7:df:eb: 65:a2:8a:84:b4:a8:15:b0:13:f5:56:1f:a0:27:59: ba:df:f9:24:f0:74:5e:3d:53:77:ab:78:a7:ed:24: 8c:3a:ef:bf:5f:39:65:36:51:d5:5a:4f:2c:1e:be: 74:04:ff:21:5b:f0:89:a7:96:38:e3:a3:49:63:3b: 25:cb:01:0c:9f:fe:24:40:17:a8:78:3f:fe:d7:05: 5b:02:36:11:78:e1:45:0e:bd:47:74:54:8c:d1:67: 5c:70:82:ab:d8:07:80:e7:ba:12:83:61:50:27:fb: 9f:b1:1d:7f:b2:1b:79:98:9a:f1:af:cd:a8:3a:3f: b4:7f:e3:f4:5a:2a:e1:56:fb:da:49:99:6d:c5:db: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:32:84:29:1C:96:7C:D9:C0:AE:B9:8B:AC:E0:2C:96:46:45:C2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/970ae159-a3e2-326f-b257-6f80e1398044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.crl X509v3 Authority Key Identifier: keyid:10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer sbgp-ipAddrBlock: critical IPv6: 2602:f61e:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7b:bd:24:8c:c8:09:9f:2f:10:26:8f:35:b3:0b:85:3d:bd: 59:71:56:fc:92:bc:13:02:ff:70:74:80:d1:bf:38:1c:e9:da: 1d:55:98:ed:55:1b:6c:3f:5a:15:26:e8:65:61:09:c1:ca:a5: 08:4e:31:0d:74:95:3f:4f:ee:86:c5:3e:53:5c:cf:01:d8:fb: 6b:8e:fa:4f:21:7e:9e:77:11:f3:2a:c7:6a:10:27:1f:80:42: df:d8:e0:b4:61:00:c5:8b:87:df:ef:cc:64:91:1f:e6:4c:d3: cc:88:27:74:b6:29:5a:23:1d:82:da:88:97:aa:d9:b1:91:cb: df:63:c6:69:a4:64:6c:76:be:d9:49:c8:ab:aa:5d:3b:b6:9c: 54:14:44:7a:76:c4:d9:27:7e:2b:0a:e5:c1:50:27:9f:b5:5f: 4a:57:06:af:28:7e:af:44:45:94:f3:6b:49:41:9a:cb:04:e3: 1c:fe:5f:a8:2d:82:5c:52:33:b4:93:f2:f8:d2:45:45:ff:66: 4f:9e:31:e7:a9:a9:dd:0b:e6:62:69:15:fa:fa:b9:53:5e:23: 33:ac:49:17:8c:fd:e6:1d:9b:de:f2:f7:fe:12:44:60:a3:ba: 78:1a:f2:af:09:96:41:38:ef:79:7e:d1:fa:25:50:5c:9a:66: 55:27:b5:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9D3SgvIa0ZUyuqqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyODNjNTYtN2NkMi00Mjk4LWI0YzUtYzdkMjYxZTdi ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NTJkYTVlNDYtN2QwOC00OGIxLWFhN2QtMzQzMGIwMzc0NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7VcUsvJ++aR043vIXc7SPy7EKjbQ5P1r4UZ PGcdOBR2vsdgoGvxt+AhiWmXwEow9SImb9n1kLVP3fUp8X1IMZqlznnCfNoBHIQh XytTtl6J2IeSVQe93YtLhWT1d00L+ZYUCYeWdA5BMuWV0bKRcG5HFfa33+tlooqE tKgVsBP1Vh+gJ1m63/kk8HRePVN3q3in7SSMOu+/XzllNlHVWk8sHr50BP8hW/CJ p5Y446NJYzslywEMn/4kQBeoeD/+1wVbAjYReOFFDr1HdFSM0WdccIKr2AeA57oS g2FQJ/ufsR1/sht5mJrxr82oOj+0f+P0WirhVvvaSZltxdsgDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPYyhCkclnzZwK65i6zgLJZGRcJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZDI4 M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2QyNjFlN2JmZjQvOTcwYWUxNTktYTNlMi0z MjZmLWIyNTctNmY4MGUxMzk4MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGQyODNjNTYtN2NkMi00Mjk4LWI0 YzUtYzdkMjYxZTdiZmY0LzRkMjgzYzU2LTdjZDItNDI5OC1iNGM1LWM3ZDI2MWU3 YmZmNC5jcmwwHwYDVR0jBBgwFoAUENCqNWfZo5oiU2Hb57/VrRFQMCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZDI4M2M1Ni03Y2QyLTQyOTgtYjRjNS1jN2Qy NjFlN2JmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2HgAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEN7vSSMyAmfLxAmjzWzC4U9vVlxVvySvBMC/3B0gNG/OBzp2h1V mO1VG2w/WhUm6GVhCcHKpQhOMQ10lT9P7obFPlNczwHY+2uO+k8hfp53EfMqx2oQ Jx+AQt/Y4LRhAMWLh9/vzGSRH+ZM08yIJ3S2KVojHYLaiJeq2bGRy99jxmmkZGx2 vtlJyKuqXTu2nFQURHp2xNknfisK5cFQJ5+1X0pXBq8ofq9ERZTza0lBmssE4xz+ X6gtglxSM7ST8vjSRUX/Zk+eMeepqd0L5mJpFfr6uVNeIzOsSReM/eYdm97y9/4S RGCjunga8q8JlkE473l+0folUFyaZlUntYY= -----END CERTIFICATE-----Generated at Sat Oct 3 11:05:40 2026 by rpki-client