$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa File: 58bd39cc-2d7d-31ec-92cd-db743957baae.roa (raw, json) Hash identifier: 4uICYp0IouCojeGq380TLHIkSsf7lFsuDjRylXgRaNo= Subject key identifier: 23:98:1E:A6:78:AA:4F:33:BE:84:CD:32:98:75:EB:34:B1:C1:A8:1B Certificate issuer: /CN=3f21d6d0-2d09-4711-b420-9646c9d81c01 Certificate serial: 010D0C9F4328584F498B1FBAF501AF78D37E43A0 Authority key identifier: C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16871 IP address blocks: 2602:f451::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:1f:ba:f5:01:af:78:d3:7e:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f21d6d0-2d09-4711-b420-9646c9d81c01 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=64e68427-16d8-4798-b89a-d05a62b80a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:29:55:b5:61:96:00:8f:3b:07:a9:63:b9: 8a:1c:40:a9:7b:48:2c:44:89:28:b9:96:5a:b5:d0: 6b:d4:02:d5:e3:12:90:b2:a4:87:a7:f6:85:be:de: 7e:2f:d4:d3:b5:07:09:de:fd:38:83:ac:10:aa:98: 91:da:2e:a7:4d:18:e0:36:15:82:97:a4:e9:21:3b: 48:32:bb:81:42:59:36:f2:cf:97:e1:49:16:53:01: ac:40:d6:79:2a:da:51:42:be:0e:24:18:0a:bd:e7: fb:61:33:d2:29:3b:93:65:84:36:fc:10:76:92:0d: 30:85:cd:67:69:aa:80:31:70:06:81:a8:26:4c:29: 1f:cf:16:cb:d2:43:0d:77:12:08:53:be:0f:68:87: 55:91:82:e2:64:e8:07:4d:66:2d:59:91:4f:a9:68: 00:0c:c5:0c:0e:ac:fb:1f:20:e5:a1:55:78:f1:94: 1e:52:b6:8f:27:c2:a3:f8:48:41:a4:2f:dc:b0:2d: f5:e1:7a:b3:4e:09:49:53:17:f5:85:a9:b6:a0:d0: 71:8d:88:d3:ec:5c:68:e5:33:28:e9:6b:f5:c4:75: 1d:8d:3d:a9:6c:fd:64:08:01:f1:1e:ec:33:cd:cd: 75:1f:c0:f6:c5:17:16:e0:8e:71:32:f6:86:f1:f9: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:1E:A6:78:AA:4F:33:BE:84:CD:32:98:75:EB:34:B1:C1:A8:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl X509v3 Authority Key Identifier: keyid:C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f451::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ce:68:bf:b2:e1:48:8f:38:f7:d7:41:47:60:d2:ba:ee:56: 10:b3:0e:97:b3:ac:73:e8:2a:c9:ca:5d:59:86:74:35:d5:be: 91:ff:b9:e3:4f:52:84:1d:ef:67:fa:94:60:57:65:51:0d:cd: 45:f4:c7:b2:8f:93:11:7b:ea:35:11:14:d8:67:63:18:9c:65: aa:8b:fe:22:92:b8:4a:05:5b:6f:fe:7d:52:12:30:54:d1:c4: c5:c5:8c:07:64:68:ef:d3:e6:ff:c7:04:54:8e:dd:4f:7c:f8: 41:6f:c6:68:b1:22:61:8e:b5:41:0d:e9:5f:2c:8e:a7:08:d2: 35:e0:8f:7a:bb:f5:a1:1f:fd:ef:9a:00:b0:b6:85:10:b7:cd: 5e:8e:d4:70:e9:db:7e:e0:af:ac:05:c7:f0:15:cb:ed:89:b3: 87:39:bc:0f:be:4d:4b:4b:7b:2f:bd:5a:53:11:0f:07:62:f8: be:4b:bc:4f:2b:af:ad:a6:2b:1c:1f:fc:22:82:73:64:d1:df: d7:1f:50:99:f8:c0:72:71:6d:7d:71:3c:26:fe:77:22:65:67: ae:c1:4d:3a:5e:8a:25:a3:79:91:45:e3:3b:a5:d5:b1:29:38: e2:6b:ed:4f:23:b0:d0:07:78:ce:02:f7:9a:09:db:2d:26:df: db:b0:22:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jix+69QGveNN+Q6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyMWQ2ZDAtMmQwOS00NzExLWI0MjAtOTY0NmM5ZDgx YzAxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjRlNjg0MjctMTZkOC00Nzk4LWI4OWEtZDA1YTYyYjgwYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApigpVbVhlgCPOwepY7mKHECpe0gsRIkouZZa tdBr1ALV4xKQsqSHp/aFvt5+L9TTtQcJ3v04g6wQqpiR2i6nTRjgNhWCl6TpITtI MruBQlk28s+X4UkWUwGsQNZ5KtpRQr4OJBgKvef7YTPSKTuTZYQ2/BB2kg0whc1n aaqAMXAGgagmTCkfzxbL0kMNdxIIU74PaIdVkYLiZOgHTWYtWZFPqWgADMUMDqz7 HyDloVV48ZQeUraPJ8Kj+EhBpC/csC314XqzTglJUxf1ham2oNBxjYjT7Fxo5TMo 6Wv1xHUdjT2pbP1kCAHxHuwzzc11H8D2xRcW4I5xMvaG8flLPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCOYHqZ4qk8zvoTNMph16zSxwagbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZjIx ZDZkMC0yZDA5LTQ3MTEtYjQyMC05NjQ2YzlkODFjMDEvNThiZDM5Y2MtMmQ3ZC0z MWVjLTkyY2QtZGI3NDM5NTdiYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2YyMWQ2ZDAtMmQwOS00NzExLWI0 MjAtOTY0NmM5ZDgxYzAxLzNmMjFkNmQwLTJkMDktNDcxMS1iNDIwLTk2NDZjOWQ4 MWMwMS5jcmwwHwYDVR0jBBgwFoAUwsyyp0EmOiStbgQpBztm5SyMk7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZjIxZDZkMC0yZDA5LTQ3MTEtYjQyMC05NjQ2 YzlkODFjMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL0UQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAe85ov7LhSI8499dBR2DSuu5WELMOl7Osc+gqycpdWYZ0NdW+kf+5 409ShB3vZ/qUYFdlUQ3NRfTHso+TEXvqNREU2GdjGJxlqov+IpK4SgVbb/59UhIw VNHExcWMB2Ro79Pm/8cEVI7dT3z4QW/GaLEiYY61QQ3pXyyOpwjSNeCPerv1oR/9 75oAsLaFELfNXo7UcOnbfuCvrAXH8BXL7Ymzhzm8D75NS0t7L71aUxEPB2L4vku8 TyuvraYrHB/8IoJzZNHf1x9QmfjAcnFtfXE8Jv53ImVnrsFNOl6KJaN5kUXjO6XV sSk44mvtTyOw0Ad4zgL3mgnbLSbf27AiHA== -----END CERTIFICATE-----Generated at Sat Sep 26 12:47:46 2026 by rpki-client