$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/b3095c68-9411-3310-b979-9b29273ce422.roa File: b3095c68-9411-3310-b979-9b29273ce422.roa (raw, json) Hash identifier: bsMNemQdeB5sGw02Bm/JMVWPqR9wiMXe0LAnvPoblk4= Subject key identifier: 4D:06:A4:06:02:53:BB:51:67:DB:01:2C:4E:AE:36:5D:59:1C:AB:E5 Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584F1DA4ED59DE0D89C0CAE89540 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/b3095c68-9411-3310-b979-9b29273ce422.roa Signing time: Wed 09 Sep 2026 08:26:12 +0000 ROA not before: Wed 09 Sep 2026 08:26:12 +0000 ROA not after: Tue 08 Dec 2026 09:26:12 +0000 asID: 204921 IP address blocks: 2602:f3ff:83::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1d:a4:ed:59:de:0d:89:c0:ca:e8:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: Sep 9 08:26:12 2026 GMT Not After : Dec 8 09:26:12 2026 GMT Subject: CN=ef1acefb-9599-4ef2-871a-36a8e8576009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:63:8a:55:f1:e4:6a:87:42:b2:30:e1:06: 77:d0:3a:51:ce:fc:ac:dc:80:3f:95:98:59:f7:65: 65:b6:43:3e:0c:68:12:56:92:e1:98:c0:7e:b7:be: 64:f0:a1:af:dc:af:68:aa:f3:02:c2:47:66:99:b8: eb:49:32:d9:76:be:8f:bf:a0:d2:e7:1e:2e:6f:5b: 72:5b:25:5b:f2:52:a5:ba:36:03:48:66:86:60:d1: 9a:ec:9c:99:c6:c7:6b:2f:f1:6a:33:2d:f9:5c:1b: 0f:b1:11:fe:c9:ea:ad:e2:62:09:63:83:01:71:31: aa:79:dd:7d:53:64:7b:e5:20:61:91:6c:0a:49:1f: 00:5d:00:c6:d3:41:20:38:19:e3:a4:c8:d0:49:1e: 61:30:0d:95:12:ed:e0:63:39:5b:5d:18:18:df:b8: 1b:a8:df:1d:cf:0b:ad:b7:cc:97:a7:a6:ac:91:50: 2e:dd:86:b0:51:4a:cf:72:74:4e:8b:9e:7d:11:ba: da:d1:9e:18:36:6f:60:0c:e8:6f:ce:43:aa:70:78: fc:27:5f:e6:48:01:e0:a9:c2:b2:8b:03:22:ae:03: d6:14:0b:59:d7:4d:20:cb:53:e2:4f:0a:cd:44:6b: 64:14:04:ff:41:11:64:25:86:12:aa:1b:0d:f0:51: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:A4:06:02:53:BB:51:67:DB:01:2C:4E:AE:36:5D:59:1C:AB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/b3095c68-9411-3310-b979-9b29273ce422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3ff:83::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:62:32:9a:69:82:00:39:0f:e0:fa:23:90:22:22:09:3e:a8: f9:e5:96:16:d9:90:0a:35:fc:72:c5:5c:02:51:1e:12:38:19: 9c:9a:e1:0b:e8:5a:84:7d:ac:46:c8:5f:78:53:78:83:79:5c: 27:b5:ef:52:11:af:fd:0b:9b:9b:78:9d:8b:38:18:2c:f8:b0: ec:a8:75:7d:3b:57:10:03:8c:bc:4b:f7:a6:6e:63:12:db:13: 0e:74:9d:12:db:68:c5:a6:93:78:64:18:d7:9e:61:4e:ac:e3: 6b:18:be:a4:34:29:a4:84:0a:ef:dd:3d:4a:a7:0a:ef:50:d8: 00:44:f7:b1:7e:0f:f9:7b:50:46:d3:82:06:e8:da:dc:f1:39: 3d:c2:40:38:53:a8:b9:ff:55:98:64:e0:c2:04:5e:51:8b:f5: 63:51:51:21:20:ad:46:54:63:c7:f1:22:f5:16:e0:bc:56:ca: 5b:69:a8:ef:be:d8:29:14:5f:18:7a:d3:ed:f3:bc:40:c1:eb: 90:44:60:8a:fd:9f:be:e7:81:56:bf:b8:9a:a5:c7:4c:c1:cb: b0:0f:95:59:f6:9b:3c:ed:29:82:f4:37:79:99:77:12:a7:78: d8:3c:56:56:bb:78:5d:43:88:1e:0a:4e:79:f0:24:37:f6:cc: 19:06:c9:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8dpO1Z3g2JwMrolUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MDkwOTA4MjYxMloXDTI2MTIwODA5MjYxMlowLzEtMCsGA1UEAxMk ZWYxYWNlZmItOTU5OS00ZWYyLTg3MWEtMzZhOGU4NTc2MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvljilXx5GqHQrIw4QZ30DpRzvys3IA/lZhZ 92VltkM+DGgSVpLhmMB+t75k8KGv3K9oqvMCwkdmmbjrSTLZdr6Pv6DS5x4ub1ty WyVb8lKlujYDSGaGYNGa7JyZxsdrL/FqMy35XBsPsRH+yeqt4mIJY4MBcTGqed19 U2R75SBhkWwKSR8AXQDG00EgOBnjpMjQSR5hMA2VEu3gYzlbXRgY37gbqN8dzwut t8yXp6askVAu3YawUUrPcnROi559Ebra0Z4YNm9gDOhvzkOqcHj8J1/mSAHgqcKy iwMirgPWFAtZ100gy1PiTwrNRGtkFAT/QRFkJYYSqhsN8FFohwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0GpAYCU7tRZ9sBLE6uNl1ZHKvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvYjMwOTVjNjgtOTQxMS0z MzEwLWI5NzktOWIyOTI3M2NlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLz/wCD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtiMpppggA5D+D6I5AiIgk+qPnllhbZkAo1/HLFXAJRHhI4GZya 4QvoWoR9rEbIX3hTeIN5XCe171IRr/0Lm5t4nYs4GCz4sOyodX07VxADjLxL96Zu YxLbEw50nRLbaMWmk3hkGNeeYU6s42sYvqQ0KaSECu/dPUqnCu9Q2ABE97F+D/l7 UEbTggbo2tzxOT3CQDhTqLn/VZhk4MIEXlGL9WNRUSEgrUZUY8fxIvUW4LxWyltp qO++2CkUXxh60+3zvEDB65BEYIr9n77ngVa/uJqlx0zBy7APlVn2mzztKYL0N3mZ dxKneNg8Vla7eF1DiB4KTnnwJDf2zBkGybI= -----END CERTIFICATE-----Generated at Sun Sep 20 10:54:09 2026 by rpki-client