$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5f0cfb3e-def5-3645-b712-1ada91e84dc0.roa File: 5f0cfb3e-def5-3645-b712-1ada91e84dc0.roa (raw, json) Hash identifier: oyBwMiQpFHuYZFvrMhmfxc743vu1rLXJmzg2hBPhEGM= Subject key identifier: 54:C1:AF:1B:E9:6E:ED:15:2E:C7:67:31:B9:31:CD:EA:F1:3E:5B:7F Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F2ABD042C43042D92A3C0D100 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5f0cfb3e-def5-3645-b712-1ada91e84dc0.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 2602:f5c1:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:04:2c:43:04:2d:92:a3:c0:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=311f8ed9-8731-4466-b5b5-127811c276b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:1a:05:5b:82:8c:c2:63:97:6d:08:95:ff: 87:57:55:a7:1d:40:37:26:1f:32:03:db:43:b7:47: 5e:00:3a:78:e5:d3:45:0d:a0:30:11:5b:f8:f3:be: 62:41:5e:c4:f5:a1:85:9d:df:f9:de:ad:73:43:6a: a2:cb:22:54:fd:f6:47:d9:94:5b:99:fe:50:df:52: c8:71:61:23:dc:18:a4:a3:d9:1f:42:fe:2d:21:d4: 2d:ac:89:e6:01:f3:86:bb:1b:80:8f:2e:9f:b2:0c: 72:c3:66:af:16:cd:db:ac:9b:aa:bb:7f:26:f1:72: 11:2f:52:30:58:3c:7c:26:e0:4a:e3:3d:e6:65:04: 2c:85:36:fc:f6:d4:5b:61:04:63:a7:cb:3d:94:39: 1a:21:70:3d:58:f4:15:9a:a6:f3:c9:99:98:31:e6: f3:0b:61:23:48:ce:27:4d:70:f3:8a:88:5d:8e:e3: fb:af:8b:e1:bf:26:40:ab:5e:39:92:18:45:2f:ed: a8:64:a1:02:a0:38:bf:f5:8a:7f:41:b0:1c:30:67: db:29:71:e0:3c:43:da:bd:c3:ac:01:af:da:c9:18: 65:5d:e7:c0:4d:db:16:32:35:22:30:75:8f:ca:f3: d1:31:1d:61:c7:86:bc:a4:1c:1b:f0:4d:6b:c8:02: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:AF:1B:E9:6E:ED:15:2E:C7:67:31:B9:31:CD:EA:F1:3E:5B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5f0cfb3e-def5-3645-b712-1ada91e84dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:55:11:5b:58:09:02:73:ca:d1:70:58:e4:55:3e:55:46:45: e1:c3:4f:da:da:b6:00:a8:2c:46:42:54:9f:81:d5:0d:e1:fc: 10:4f:e4:d4:ee:b2:5d:27:e0:14:ff:80:e1:3c:90:4c:38:f3: 1c:c9:5e:61:9b:7f:3a:38:f7:dc:62:3e:2e:d2:4c:0d:cf:0e: 28:52:8a:99:e9:4b:e6:a5:92:21:fe:d0:df:7b:ac:bf:4b:62: f0:bd:ca:9e:9e:01:b9:e8:19:89:f4:6d:98:4b:af:e3:58:af: 85:8e:8d:b4:26:11:72:22:9c:d3:35:99:30:34:5c:2f:f8:a2: 56:5b:ca:31:60:84:21:6c:fa:09:19:8c:6c:30:d5:66:eb:f3: 10:0e:9c:17:19:43:c8:0c:aa:08:80:a0:0d:dd:86:91:a9:0e: b7:86:7e:15:e2:85:cb:cf:b4:9a:ab:a2:12:5c:43:25:47:9f: c3:87:8e:0d:4b:79:d6:aa:a4:dc:42:d9:d5:ed:31:8f:66:01: 72:b1:ed:91:e5:34:61:41:b5:dc:72:2b:44:62:1c:08:d4:7f: c2:fb:0c:98:76:69:70:eb:55:1e:60:f4:e7:48:b0:a0:9a:2b: d5:bc:7e:ff:81:89:0b:45:96:ac:74:d3:97:08:b4:11:09:9a: c1:0a:d4:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvQQsQwQtkqPA0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MzExZjhlZDktODczMS00NDY2LWI1YjUtMTI3ODExYzI3NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+QaBVuCjMJjl20Ilf+HV1WnHUA3Jh8yA9tD t0deADp45dNFDaAwEVv4875iQV7E9aGFnd/53q1zQ2qiyyJU/fZH2ZRbmf5Q31LI cWEj3Biko9kfQv4tIdQtrInmAfOGuxuAjy6fsgxyw2avFs3brJuqu38m8XIRL1Iw WDx8JuBK4z3mZQQshTb89tRbYQRjp8s9lDkaIXA9WPQVmqbzyZmYMebzC2EjSM4n TXDziohdjuP7r4vhvyZAq145khhFL+2oZKECoDi/9Yp/QbAcMGfbKXHgPEPavcOs Aa/ayRhlXefATdsWMjUiMHWPyvPRMR1hx4a8pBwb8E1ryAIm7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFTBrxvpbu0VLsdnMbkxzerxPlt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNWYwY2ZiM2UtZGVmNS0z NjQ1LWI3MTItMWFkYTkxZTg0ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQBG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZVEVtYCQJzytFwWORVPlVGReHDT9ratgCoLEZCVJ+B1Q3h/BBP 5NTusl0n4BT/gOE8kEw48xzJXmGbfzo499xiPi7STA3PDihSipnpS+alkiH+0N97 rL9LYvC9yp6eAbnoGYn0bZhLr+NYr4WOjbQmEXIinNM1mTA0XC/4olZbyjFghCFs +gkZjGww1Wbr8xAOnBcZQ8gMqgiAoA3dhpGpDreGfhXihcvPtJqrohJcQyVHn8OH jg1LedaqpNxC2dXtMY9mAXKx7ZHlNGFBtdxyK0RiHAjUf8L7DJh2aXDrVR5g9OdI sKCaK9W8fv+BiQtFlqx005cItBEJmsEK1Eo= -----END CERTIFICATE-----Generated at Wed Sep 23 21:37:53 2026 by rpki-client