$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2c7af73a-f2d1-35d4-98ab-86d1587f78cf.roa File: 2c7af73a-f2d1-35d4-98ab-86d1587f78cf.roa (raw, json) Hash identifier: 8JmFevRqdPX4LtLVFY9PrF4bfTQf3gaFHRUY3eQJHJk= Subject key identifier: 4D:90:61:97:CD:9A:B0:B7:85:72:47:E6:28:C8:10:B8:38:D2:36:6B Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584F454299A8D5CBD8BD54E361C0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2c7af73a-f2d1-35d4-98ab-86d1587f78cf.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 16509 IP address blocks: 2602:fe40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:99:a8:d5:cb:d8:bd:54:e3:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=6d153856-7fc3-4f61-8d61-e7328c616a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:86:a9:31:43:85:eb:8f:4a:87:df:e9:b7: 45:26:c4:6b:94:ce:01:c7:5d:5a:be:44:61:72:e1: 0f:3b:74:4a:f6:54:5e:48:1a:3e:e1:70:c0:3e:51: aa:23:c8:2f:dc:1e:92:ff:8e:d7:48:5e:64:c9:b1: fc:46:40:a6:de:af:8d:49:8b:b9:46:c0:7b:08:10: 06:82:a0:9e:cf:af:60:26:9e:a7:3a:87:1d:96:b3: 74:6d:c4:15:39:8d:40:5f:c1:88:1a:d5:c6:bf:c1: cc:08:5d:02:21:1b:8a:d0:65:3d:80:f0:c8:de:c7: 14:48:27:35:ab:b1:c5:28:84:38:c3:91:7d:34:46: 44:37:2e:aa:07:b9:eb:09:39:ca:30:c2:06:65:fb: d2:90:1f:db:b0:3d:02:31:e6:39:3e:51:52:ed:a9: b4:91:44:2b:fc:4c:f5:20:2b:70:0b:c1:23:21:7f: 1d:96:f4:f7:64:00:24:fe:5e:87:b3:15:99:59:b0: 74:9c:b4:c0:09:04:77:55:a6:c8:11:93:2d:a0:7a: 43:06:74:e0:3a:77:b1:da:45:d9:ff:4f:75:b3:fe: 3e:ab:bc:0d:fb:8e:21:1c:7d:cb:bb:ca:87:6a:2e: 16:0b:f3:1d:bb:f2:28:07:5c:4a:36:e0:3d:40:b0: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:90:61:97:CD:9A:B0:B7:85:72:47:E6:28:C8:10:B8:38:D2:36:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/2c7af73a-f2d1-35d4-98ab-86d1587f78cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:98:47:8f:ce:39:2c:50:50:42:dd:13:6e:0e:c3:a4:e3:69: dd:8b:4f:89:66:a8:97:8a:30:40:8b:66:01:f2:aa:31:c0:89: cf:ed:ae:3c:b8:2e:a8:9b:87:9b:27:87:db:94:98:e7:cd:5d: 0f:ca:28:16:9f:07:d5:6b:82:7b:5f:e6:06:d2:9e:17:b1:a4: b1:c8:90:5b:c7:be:68:c1:0b:b5:39:01:37:49:74:5a:e6:a4: 1d:d8:d8:f0:4a:ac:67:5e:79:9a:47:33:60:e9:29:13:b3:d4: 44:ef:ab:fd:5a:16:99:10:81:e4:32:e9:0f:cd:14:fc:98:98: 3f:9e:68:bd:6d:f2:69:8c:3c:64:20:f9:89:d2:fa:e1:33:ec: ff:d1:95:1e:6c:c9:0a:31:04:7e:4a:52:5e:28:da:1b:6e:38: 82:5a:08:04:ab:dc:8e:fd:6e:4f:0b:d8:67:44:00:d7:46:13: 62:ea:3d:4d:4c:74:c2:3a:3c:73:7b:96:24:c4:32:b9:35:a0: 9e:56:91:9b:7e:2e:94:15:f5:f7:b7:63:27:19:03:1a:a0:f9: 41:a2:9d:c5:07:d5:52:b9:69:45:a5:58:90:10:ba:ea:da:7c: 71:57:22:9b:30:24:18:64:5c:14:28:f7:fe:17:5d:d8:c6:da: 8e:61:5b:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FQpmo1cvYvVTjYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NmQxNTM4NTYtN2ZjMy00ZjYxLThkNjEtZTczMjhjNjE2YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1KGqTFDheuPSoff6bdFJsRrlM4Bx11avkRh cuEPO3RK9lReSBo+4XDAPlGqI8gv3B6S/47XSF5kybH8RkCm3q+NSYu5RsB7CBAG gqCez69gJp6nOocdlrN0bcQVOY1AX8GIGtXGv8HMCF0CIRuK0GU9gPDI3scUSCc1 q7HFKIQ4w5F9NEZENy6qB7nrCTnKMMIGZfvSkB/bsD0CMeY5PlFS7am0kUQr/Ez1 ICtwC8EjIX8dlvT3ZAAk/l6HsxWZWbB0nLTACQR3VabIEZMtoHpDBnTgOnex2kXZ /091s/4+q7wN+44hHH3Lu8qHai4WC/Mdu/IoB1xKNuA9QLB57wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2QYZfNmrC3hXJH5ijIELg40jZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMmM3YWY3M2EtZjJkMS0z NWQ0LTk4YWItODZkMTU4N2Y3OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+QAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOYR4/OOSxQUELdE24Ow6Tjad2LT4lmqJeKMECLZgHyqjHAic/t rjy4Lqibh5snh9uUmOfNXQ/KKBafB9Vrgntf5gbSnhexpLHIkFvHvmjBC7U5ATdJ dFrmpB3Y2PBKrGdeeZpHM2DpKROz1ETvq/1aFpkQgeQy6Q/NFPyYmD+eaL1t8mmM PGQg+YnS+uEz7P/RlR5syQoxBH5KUl4o2htuOIJaCASr3I79bk8L2GdEANdGE2Lq PU1MdMI6PHN7liTEMrk1oJ5WkZt+LpQV9fe3YycZAxqg+UGincUH1VK5aUWlWJAQ uurafHFXIpswJBhkXBQo9/4XXdjG2o5hW8c= -----END CERTIFICATE-----Generated at Thu Oct 8 03:43:48 2026 by rpki-client