$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/7f4c0d59-a6c4-3d6a-aacb-a93217111fa7.roa File: 7f4c0d59-a6c4-3d6a-aacb-a93217111fa7.roa (raw, json) Hash identifier: lmeaLvXxWhFCbF588ATZ5mNQ0qbgaVkWSej4U2Wdses= Subject key identifier: 10:92:BC:02:EB:17:1D:FD:80:D4:86:38:69:72:E6:2D:BE:A8:EC:1E Certificate issuer: /CN=540d1e8a-06b3-4df7-9d3b-58ec9faa2536 Certificate serial: 010D0C9F4328584F103788DB8549CF4D93D67080 Authority key identifier: FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/7f4c0d59-a6c4-3d6a-aacb-a93217111fa7.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 401933 IP address blocks: 2602:f59c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:88:db:85:49:cf:4d:93:d6:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540d1e8a-06b3-4df7-9d3b-58ec9faa2536 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=ba14372e-d196-4e5f-87eb-99ac70375bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:9e:7f:4c:ae:74:e1:56:95:6f:2a:c0:ef: 5d:70:92:c0:bf:5d:5c:de:2d:3b:dd:98:75:54:7d: e2:10:2b:5d:52:cd:b8:05:93:58:cc:82:c8:8a:20: c6:50:70:92:0c:83:a1:0f:9f:74:fc:c5:42:22:83: 8c:77:3a:53:15:b2:65:76:00:86:9d:01:3c:49:d2: 47:f4:1b:cf:0d:ec:70:ee:08:0a:0e:9c:5b:cc:8a: 8b:51:e1:c7:73:12:12:2a:64:b8:54:c0:61:6f:20: a3:5f:c0:ce:5a:74:0b:77:d6:8b:03:2d:94:ec:5d: 1b:35:ee:12:65:c4:a6:1f:87:7a:81:3c:68:20:40: dc:b0:df:e3:6d:82:64:88:12:c4:56:64:6a:e3:8d: 72:2c:4d:b2:1c:50:93:8f:3d:94:89:68:d3:ba:7e: eb:bd:e9:bb:c7:5e:99:48:6b:1d:de:8d:44:e5:64: f6:eb:a0:eb:e3:67:3d:62:99:65:cf:3c:29:db:6d: 46:7e:ce:d2:5f:8c:76:28:8d:20:1e:9e:21:a1:43: 48:f0:9f:6e:ca:33:e9:3e:48:09:25:59:ed:2a:d7: 1d:c0:68:b7:bd:ee:64:15:70:1e:c2:76:f7:1d:92: e1:bc:b2:ff:26:4f:e0:50:39:13:58:ba:dd:ed:43: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:BC:02:EB:17:1D:FD:80:D4:86:38:69:72:E6:2D:BE:A8:EC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/7f4c0d59-a6c4-3d6a-aacb-a93217111fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.crl X509v3 Authority Key Identifier: keyid:FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer sbgp-ipAddrBlock: critical IPv6: 2602:f59c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:6d:44:f2:25:06:a1:17:0f:69:d0:4e:0a:5e:de:94:2d:8a: 2b:b3:68:fc:92:b4:8f:cf:31:fc:ed:7e:f8:31:01:08:8c:90: 97:9f:4f:84:54:b5:5b:52:c0:06:39:61:49:f1:d5:8d:24:84: 65:41:15:51:71:0a:db:ed:b5:be:e1:a6:b0:0c:ae:ba:d7:ab: 85:7a:da:88:56:45:b1:04:24:1d:00:9c:3c:71:ef:33:ed:88: 53:df:c2:01:3e:88:bf:9d:a3:c6:c4:e7:fc:0c:a8:19:c3:5a: f6:3b:19:23:d3:0c:4b:42:88:30:92:d2:cc:16:9b:c4:d3:de: 9b:38:f9:7c:bc:16:98:1d:fd:2b:4e:34:91:f1:23:fa:5e:19: 5b:8b:b9:5b:2e:57:cb:12:b8:be:ea:2a:9f:0a:73:a3:7b:cb: 52:68:ff:93:ff:48:f6:3a:37:4b:6f:7b:bd:d9:03:88:6a:82: 87:23:3b:16:02:6d:b1:df:dc:ee:85:74:c7:4e:14:e6:93:98: e4:98:f4:25:d5:83:0e:59:48:35:92:ed:f6:e3:99:2d:46:3e: f9:67:9a:15:e5:35:3b:77:08:5d:e7:12:da:a4:24:bc:60:ca: e0:57:f7:46:58:80:c4:0b:38:a9:04:a3:32:a2:b9:b7:9c:73: fe:4e:3a:f7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN4jbhUnPTZPWcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQwZDFlOGEtMDZiMy00ZGY3LTlkM2ItNThlYzlmYWEy NTM2MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk YmExNDM3MmUtZDE5Ni00ZTVmLTg3ZWItOTlhYzcwMzc1YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvKef0yudOFWlW8qwO9dcJLAv11c3i073Zh1 VH3iECtdUs24BZNYzILIiiDGUHCSDIOhD590/MVCIoOMdzpTFbJldgCGnQE8SdJH 9BvPDexw7ggKDpxbzIqLUeHHcxISKmS4VMBhbyCjX8DOWnQLd9aLAy2U7F0bNe4S ZcSmH4d6gTxoIEDcsN/jbYJkiBLEVmRq441yLE2yHFCTjz2UiWjTun7rvem7x16Z SGsd3o1E5WT266Dr42c9Ypllzzwp221Gfs7SX4x2KI0gHp4hoUNI8J9uyjPpPkgJ JVntKtcdwGi3ve5kFXAewnb3HZLhvLL/Jk/gUDkTWLrd7UOZqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBCSvALrFx39gNSGOGly5i2+qOweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NDBk MWU4YS0wNmIzLTRkZjctOWQzYi01OGVjOWZhYTI1MzYvN2Y0YzBkNTktYTZjNC0z ZDZhLWFhY2ItYTkzMjE3MTExZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTQwZDFlOGEtMDZiMy00ZGY3LTlk M2ItNThlYzlmYWEyNTM2LzU0MGQxZThhLTA2YjMtNGRmNy05ZDNiLTU4ZWM5ZmFh MjUzNi5jcmwwHwYDVR0jBBgwFoAU+7/wZAvUSs6sI0dFyeeeodEjJjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NDBkMWU4YS0wNmIzLTRkZjctOWQzYi01OGVj OWZhYTI1MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1nAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtW1E8iUGoRcPadBOCl7elC2KK7No/JK0j88x/O1++DEBCIyQl59P hFS1W1LABjlhSfHVjSSEZUEVUXEK2+21vuGmsAyuuterhXraiFZFsQQkHQCcPHHv M+2IU9/CAT6Iv52jxsTn/AyoGcNa9jsZI9MMS0KIMJLSzBabxNPemzj5fLwWmB39 K040kfEj+l4ZW4u5Wy5XyxK4vuoqnwpzo3vLUmj/k/9I9jo3S297vdkDiGqChyM7 FgJtsd/c7oV0x04U5pOY5Jj0JdWDDllINZLt9uOZLUY++WeaFeU1O3cIXecS2qQk vGDK4Ff3RliAxAs4qQSjMqK5t5xz/k469w== -----END CERTIFICATE-----Generated at Tue Sep 22 10:23:09 2026 by rpki-client