$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa File: df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa (raw, json) Hash identifier: zB+va3QtDI0i+EEp222I2WkXJ9GYPuDQDlhmXgrUBJE= Subject key identifier: B1:6A:CE:58:92:4D:B8:80:1A:56:2A:35:F0:5A:53:7A:24:CB:71:72 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584EFF7773424ADAFC1E3C5C36C8 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 2602:fd10:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:73:42:4a:da:fc:1e:3c:5c:36:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=24ceb4ee-e9ae-4628-868e-3780989df75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:d3:23:99:a4:e3:36:43:05:f2:32:7c:1f: ed:9a:09:14:0a:95:6d:a4:fc:4a:22:51:a9:5e:55: 72:dd:5a:ca:79:a8:a1:14:12:cf:dd:0c:6c:58:fa: 08:28:aa:d4:ec:7a:a9:eb:bb:d2:80:10:f3:d9:1a: a1:59:f2:ec:09:21:ab:bf:e9:ec:e9:65:46:85:48: 99:8a:65:cc:bb:23:10:92:f6:26:8f:bf:cf:c9:a6: c0:17:12:28:75:d4:c3:af:1d:d5:48:ca:28:c5:e4: 94:fd:70:af:2b:d0:9d:12:bb:90:22:df:e8:ff:26: 16:b1:f5:aa:5e:0a:9c:8a:3f:fc:ac:0b:9d:57:cf: fa:9f:50:de:96:6f:45:90:66:4d:5a:a2:f4:d2:b0: c2:94:02:df:ed:36:2c:89:a0:b9:5c:99:11:1c:90: 70:72:41:21:9c:ca:15:4e:b8:90:99:e5:5a:0b:23: 99:23:de:d8:4d:7b:d2:58:88:49:1a:02:f2:b5:a7: 88:41:80:af:59:6a:54:03:41:36:13:16:d3:66:d4: 60:28:b0:93:dc:49:04:58:35:3a:75:9f:f2:24:a1: 4b:72:51:14:02:54:67:2a:aa:b2:97:ab:76:83:9b: 8e:b4:86:1f:f1:d9:28:99:30:5b:ab:0a:39:7b:ba: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:CE:58:92:4D:B8:80:1A:56:2A:35:F0:5A:53:7A:24:CB:71:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd10:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:54:f3:06:9d:f1:c8:eb:6e:b4:9d:66:d9:5f:f7:09:08:1e: a1:4d:c8:3a:7b:80:d8:22:c7:d1:3f:78:3b:d0:3c:a1:98:7f: e7:a9:df:ae:0b:b8:96:5b:de:9d:6a:24:04:9e:17:d9:2d:64: cc:8f:a0:70:26:bd:e5:07:3e:e9:ab:62:4b:cb:61:1b:46:79: 5c:8d:f9:1e:1f:07:ce:ef:c4:d6:34:62:f6:0e:bf:3c:03:ec: ac:38:bb:4e:6d:c5:87:6e:8f:42:bc:0b:d6:2b:70:dc:02:b8: 4c:a2:91:12:b1:e2:bf:ef:70:be:88:07:fa:4a:72:c3:46:92: 7e:33:ff:14:32:37:08:46:7b:f6:fe:00:e3:43:e8:cf:ef:cd: 90:fa:21:36:b1:05:d0:ea:89:2a:2e:6d:af:8c:d1:cd:8b:8c: 72:e0:c6:b6:98:e8:af:e5:1b:73:a8:79:11:49:24:f4:75:9d: e7:b5:fd:08:ce:b9:2a:3a:44:13:e2:6d:fc:16:f4:e3:3d:9e: 78:66:35:ed:b4:56:ca:f5:a5:97:1f:6a:5a:b4:bd:b8:b2:82: 7d:45:e3:0a:34:00:7e:19:f4:a6:cb:42:f5:03:11:4e:1e:f6: 02:40:d1:3a:94:c7:d5:5b:d4:b9:38:81:ad:91:f6:d7:00:a0: 69:97:68:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7/d3NCStr8HjxcNsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjRjZWI0ZWUtZTlhZS00NjI4LTg2OGUtMzc4MDk4OWRmNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviHTI5mk4zZDBfIyfB/tmgkUCpVtpPxKIlGp XlVy3VrKeaihFBLP3QxsWPoIKKrU7Hqp67vSgBDz2RqhWfLsCSGrv+ns6WVGhUiZ imXMuyMQkvYmj7/PyabAFxIoddTDrx3VSMooxeSU/XCvK9CdEruQIt/o/yYWsfWq Xgqcij/8rAudV8/6n1Delm9FkGZNWqL00rDClALf7TYsiaC5XJkRHJBwckEhnMoV TriQmeVaCyOZI97YTXvSWIhJGgLytaeIQYCvWWpUA0E2ExbTZtRgKLCT3EkEWDU6 dZ/yJKFLclEUAlRnKqqyl6t2g5uOtIYf8dkomTBbqwo5e7paawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLFqzliSTbiAGlYqNfBaU3oky3FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZGY5YjJlYjgtYTM1NS0z ZjMzLTgyOTItOWVlNjljOWYwNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZlTzBp3xyOtutJ1m2V/3CQgeoU3IOnuA2CLH0T94O9A8oZh/56nf rgu4llvenWokBJ4X2S1kzI+gcCa95Qc+6atiS8thG0Z5XI35Hh8Hzu/E1jRi9g6/ PAPsrDi7Tm3Fh26PQrwL1itw3AK4TKKRErHiv+9wvogH+kpyw0aSfjP/FDI3CEZ7 9v4A40Poz+/NkPohNrEF0OqJKi5tr4zRzYuMcuDGtpjor+Ubc6h5EUkk9HWd57X9 CM65KjpEE+Jt/Bb04z2eeGY17bRWyvWllx9qWrS9uLKCfUXjCjQAfhn0pstC9QMR Th72AkDROpTH1VvUuTiBrZH21wCgaZdo3Q== -----END CERTIFICATE-----Generated at Mon Sep 28 06:22:37 2026 by rpki-client