$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa File: 72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa (raw, json) Hash identifier: uPZLz2MxupIofercKEVgv2GNzmK7TPHXUcoW10X+pbg= Subject key identifier: D9:8D:E4:7E:11:E6:CC:8C:46:96:E1:ED:20:6D:C5:79:93:11:07:77 Certificate issuer: /CN=3d89140c-6425-48b5-94d6-472f38ead8f8 Certificate serial: 010D0C9F4328584F77835F8C0171D76CE9614380 Authority key identifier: 68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 402611 IP address blocks: 2602:f395::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5f:8c:01:71:d7:6c:e9:61:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d89140c-6425-48b5-94d6-472f38ead8f8 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a408209b-5d2a-424a-88c7-da0bc647b720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:01:cc:af:da:b0:4e:d1:f7:c9:07:6d:cb: f1:78:1b:55:9d:a4:31:81:5f:8c:dc:b7:50:8a:7e: cf:08:e6:7c:1e:58:44:44:ac:4d:2b:97:bb:a3:78: 3e:29:04:51:ae:f6:11:ff:cb:4e:38:aa:c3:ac:79: c0:15:26:1e:02:09:14:df:42:6c:05:94:c6:d6:08: f3:84:fe:b1:0a:e4:58:ea:1a:ec:77:1f:7f:07:7d: 65:36:32:74:dd:c7:59:50:74:89:9d:d4:96:75:2e: 78:35:fd:4e:8f:8e:89:6a:2a:4c:bf:24:dd:49:cc: 85:31:4a:38:d9:8f:6c:1d:f8:0b:59:61:08:44:b8: 1f:e9:f1:75:a2:0b:0b:d9:0f:04:3c:d6:8d:b4:e5: 1b:38:b5:83:ed:ba:93:fd:86:92:bc:33:6a:c5:55: f1:a5:28:88:0e:97:de:ee:ab:53:8d:0b:56:59:f6: 9c:f7:d9:8b:48:06:32:ad:de:f9:e5:be:05:96:f6: 65:dd:62:14:d2:16:fc:0e:20:01:b3:ce:2e:df:36: 72:68:1c:91:38:a8:30:6d:85:67:0a:0c:91:fb:55: dd:50:b4:1c:30:f5:7b:e9:9c:2f:54:1b:66:a0:df: 17:d8:d9:82:79:b5:eb:b2:7f:cb:ae:99:9b:c8:bf: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:E4:7E:11:E6:CC:8C:46:96:E1:ED:20:6D:C5:79:93:11:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/72833caf-e3b3-36d4-8edd-3f0b7e9884b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8/3d89140c-6425-48b5-94d6-472f38ead8f8.crl X509v3 Authority Key Identifier: keyid:68:1F:F9:FE:0D:C3:9C:15:38:00:8F:92:4F:AB:39:5C:CE:5A:81:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d89140c-6425-48b5-94d6-472f38ead8f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f395::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b1:27:cf:78:25:13:c9:25:3d:a1:3c:ef:f1:0f:5c:b7:ad: 44:d0:21:75:72:75:f4:8d:93:7e:1d:f0:ae:f0:91:20:29:ef: 34:c5:bc:13:fc:92:c0:2a:2e:33:7c:91:19:c4:41:5f:7f:42: 08:92:d0:bf:e2:fe:aa:34:cc:23:99:95:b6:50:07:7c:ee:0e: d3:7a:29:37:80:0e:64:df:08:3b:03:9e:07:53:70:6a:4e:3e: 0b:e7:40:d4:13:df:2e:05:c6:64:c5:82:3f:7a:b9:b5:33:05: 6e:9a:f1:1a:68:1b:d1:98:7c:89:47:e5:4d:38:41:7f:e0:ee: ff:bc:a2:e0:cc:84:b1:10:1d:7c:84:a1:c2:81:df:e1:95:fd: eb:5e:5a:4d:59:0b:f3:b9:d4:33:d2:3b:24:c6:3a:34:de:a7: f9:ec:31:68:bd:60:1e:a2:3a:c4:b9:03:89:3c:8b:e0:56:bc: fa:02:0f:6e:b3:84:66:4b:c6:6a:23:67:be:f9:68:4f:52:60: 9b:69:8e:e3:53:41:07:bf:95:2a:2a:2e:ec:f1:fc:92:06:8e: 0a:e3:7f:18:bc:7a:5b:00:39:77:84:d9:27:ab:ad:e3:59:db: 8b:29:38:e8:41:8f:a4:8e:79:c2:ce:c2:2f:1b:69:e6:8c:1b: 84:9a:74:e1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE93g1+MAXHXbOlhQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q4OTE0MGMtNjQyNS00OGI1LTk0ZDYtNDcyZjM4ZWFk OGY4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTQwODIwOWItNWQyYS00MjRhLTg4YzctZGEwYmM2NDdiNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8BzK/asE7R98kHbcvxeBtVnaQxgV+M3LdQ in7PCOZ8HlhERKxNK5e7o3g+KQRRrvYR/8tOOKrDrHnAFSYeAgkU30JsBZTG1gjz hP6xCuRY6hrsdx9/B31lNjJ03cdZUHSJndSWdS54Nf1Oj46JaipMvyTdScyFMUo4 2Y9sHfgLWWEIRLgf6fF1ogsL2Q8EPNaNtOUbOLWD7bqT/YaSvDNqxVXxpSiIDpfe 7qtTjQtWWfac99mLSAYyrd755b4FlvZl3WIU0hb8DiABs84u3zZyaByROKgwbYVn CgyR+1XdULQcMPV76ZwvVBtmoN8X2NmCebXrsn/LrpmbyL/rFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNmN5H4R5syMRpbh7SBtxXmTEQd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDg5 MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJmMzhlYWQ4ZjgvNzI4MzNjYWYtZTNiMy0z NmQ0LThlZGQtM2YwYjdlOTg4NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q4OTE0MGMtNjQyNS00OGI1LTk0 ZDYtNDcyZjM4ZWFkOGY4LzNkODkxNDBjLTY0MjUtNDhiNS05NGQ2LTQ3MmYzOGVh ZDhmOC5jcmwwHwYDVR0jBBgwFoAUaB/5/g3DnBU4AI+ST6s5XM5agfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDg5MTQwYy02NDI1LTQ4YjUtOTRkNi00NzJm MzhlYWQ4ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLzlQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh7Enz3glE8klPaE87/EPXLetRNAhdXJ19I2Tfh3wrvCRICnvNMW8 E/ySwCouM3yRGcRBX39CCJLQv+L+qjTMI5mVtlAHfO4O03opN4AOZN8IOwOeB1Nw ak4+C+dA1BPfLgXGZMWCP3q5tTMFbprxGmgb0Zh8iUflTThBf+Du/7yi4MyEsRAd fIShwoHf4ZX9615aTVkL87nUM9I7JMY6NN6n+ewxaL1gHqI6xLkDiTyL4Fa8+gIP brOEZkvGaiNnvvloT1Jgm2mO41NBB7+VKiou7PH8kgaOCuN/GLx6WwA5d4TZJ6ut 41nbiyk46EGPpI55ws7CLxtp5owbhJp04Q== -----END CERTIFICATE-----Generated at Mon Oct 12 14:07:41 2026 by rpki-client