$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/28d06f06-d5a7-3b4a-9e06-287dc75da85d.roa File: 28d06f06-d5a7-3b4a-9e06-287dc75da85d.roa (raw, json) Hash identifier: Cq46eJB4S43xfyMZrqrKK/z74EtOJierBi7+KesWnlw= Subject key identifier: 9A:8F:F9:13:6E:DF:DA:B3:12:6F:5C:DE:07:DD:2A:2B:10:3A:08:4C Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F2ABD044A0EFED15E16B83600 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/28d06f06-d5a7-3b4a-9e06-287dc75da85d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 2602:f5c1:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:04:4a:0e:fe:d1:5e:16:b8:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=a73f2164-4836-46c9-9dcf-0080c6ee39d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:16:bc:9b:cf:65:a2:58:a0:85:e8:27:7c: 6d:04:1f:ea:19:b6:4d:b8:7d:90:53:c8:ad:5a:3c: 1a:92:b2:6b:0b:10:19:0b:2e:02:bb:41:8a:a6:68: 07:a7:70:b5:cd:6a:30:86:a6:5c:b1:df:9d:3b:05: 07:17:91:59:27:ed:19:a0:0b:ed:84:aa:f2:47:09: c3:33:b5:c1:33:1b:47:4d:c1:46:a3:d8:f7:75:54: 99:c3:f1:98:ad:f6:8d:f8:f4:63:ab:b5:28:b2:f2: d8:98:41:b0:43:59:82:73:4a:63:18:e5:ba:67:a5: 21:2f:3b:f4:fa:2b:95:76:58:d5:4e:a2:20:62:2a: ae:c6:a1:78:98:70:dd:81:1c:e8:dc:49:c0:31:26: e7:e0:7a:15:89:cc:e5:4f:f3:0f:bc:e5:f7:37:74: 68:ad:12:f1:1a:6f:01:a6:66:da:e5:6b:b2:3e:9e: 04:f2:d6:11:83:37:94:c3:e0:e8:2b:73:94:9c:60: c5:6e:1f:fc:87:75:7d:f9:75:7a:7d:c5:f5:ba:20: de:ab:33:92:2c:e5:05:0f:9a:41:bc:b0:00:e7:c4: 86:66:29:8b:5d:5f:2f:5b:40:a3:2c:eb:d9:7d:44: 35:43:b6:e6:99:d7:ac:9f:82:81:0b:b2:e6:0e:fb: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:F9:13:6E:DF:DA:B3:12:6F:5C:DE:07:DD:2A:2B:10:3A:08:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/28d06f06-d5a7-3b4a-9e06-287dc75da85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:e6:61:9b:73:f5:f7:6c:40:87:01:10:ad:50:4e:8c:97: 7b:7a:62:f4:9c:40:70:d9:e4:43:f0:8f:d8:0d:4c:9f:c4:dc: 82:61:10:08:a5:4a:75:63:46:63:1e:bb:bc:b5:3c:d7:d4:81: 01:34:a8:4a:ec:a8:52:6a:50:fb:f8:c2:93:9b:27:b1:ec:8d: ac:b8:07:00:ef:b1:c5:61:d6:fd:d7:f3:8e:19:2f:2a:36:38: 76:a0:13:d2:13:ff:4f:10:6d:dd:ea:70:7f:67:f7:5f:40:b8: f5:42:f5:13:3b:4b:2e:ce:bb:60:4c:eb:db:86:cd:4f:27:c4: a6:e6:88:16:1f:c1:c2:60:8c:db:cc:b1:ce:78:11:e2:15:1c: e3:d3:51:02:ed:15:1c:fc:46:ea:0d:9b:88:7f:47:bc:2a:ac: 61:51:15:d9:e3:c1:54:c7:d0:c2:f0:89:8f:4b:50:bd:59:d5: 6a:ec:03:74:4f:76:08:9b:87:40:3c:e0:e0:f1:67:87:a1:bc: 39:c6:a4:82:93:8a:c3:05:22:3e:07:d1:de:be:6d:4e:e2:6e: cf:18:0b:31:26:30:f0:83:f7:0a:db:fb:b7:ae:db:3e:a9:3b: 5b:70:23:d3:8d:65:aa:12:06:4d:63:f5:4c:18:e7:0b:85:c7: 66:86:d6:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvQRKDv7RXha4NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YTczZjIxNjQtNDgzNi00NmM5LTlkY2YtMDA4MGM2ZWUzOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI4WvJvPZaJYoIXoJ3xtBB/qGbZNuH2QU8it WjwakrJrCxAZCy4Cu0GKpmgHp3C1zWowhqZcsd+dOwUHF5FZJ+0ZoAvthKryRwnD M7XBMxtHTcFGo9j3dVSZw/GYrfaN+PRjq7UosvLYmEGwQ1mCc0pjGOW6Z6UhLzv0 +iuVdljVTqIgYiquxqF4mHDdgRzo3EnAMSbn4HoViczlT/MPvOX3N3RorRLxGm8B pmba5WuyPp4E8tYRgzeUw+DoK3OUnGDFbh/8h3V9+XV6fcX1uiDeqzOSLOUFD5pB vLAA58SGZimLXV8vW0CjLOvZfUQ1Q7bmmdesn4KBC7LmDvuw1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqP+RNu39qzEm9c3gfdKisQOghMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMjhkMDZmMDYtZDVhNy0z YjRhLTllMDYtMjg3ZGM3NWRhODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQBI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAL55mGbc/X3bECHARCtUE6Ml3t6YvScQHDZ5EPwj9gNTJ/E3IJh EAilSnVjRmMeu7y1PNfUgQE0qErsqFJqUPv4wpObJ7Hsjay4BwDvscVh1v3X844Z Lyo2OHagE9IT/08Qbd3qcH9n919AuPVC9RM7Sy7Ou2BM69uGzU8nxKbmiBYfwcJg jNvMsc54EeIVHOPTUQLtFRz8RuoNm4h/R7wqrGFRFdnjwVTH0MLwiY9LUL1Z1Wrs A3RPdgibh0A84ODxZ4ehvDnGpIKTisMFIj4H0d6+bU7ibs8YCzEmMPCD9wrb+7eu 2z6pO1twI9ONZaoSBk1j9UwY5wuFx2aG1pY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:53:57 2026 by rpki-client