$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa File: cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json) Hash identifier: 0N2rmwMgcNLfZfZubErtGULiCTPecHNpTxe6bdzt8Yc= Subject key identifier: F2:1B:96:19:EB:DD:A9:62:13:D8:42:C8:4D:1B:F5:72:1C:CD:C7:16 Certificate issuer: /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Certificate serial: 010D0C9F4328584F497409955DAA78B4C4662880 Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32604 IP address blocks: 2602:fa9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:09:95:5d:aa:78:b4:c4:66:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d9f36f6-fb5f-406f-93ef-7a4be8486fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:75:83:72:9a:a5:75:0d:8c:99:bd:e9:eb: a2:a7:50:21:ae:f4:8e:6b:43:a2:c2:c2:c3:5b:cb: 32:92:fc:c2:78:65:33:ea:11:bc:03:62:1b:b2:2a: 66:33:0c:8e:ad:68:85:01:ff:1a:4d:2e:cc:ca:07: a3:35:cb:fb:00:16:6e:84:45:85:91:7f:3a:13:3d: c2:95:33:c5:f9:c7:75:7f:c6:bb:e5:99:89:c0:f1: 95:bc:a6:c7:1b:46:cb:a3:0b:f3:fe:c7:76:94:1a: fb:d3:46:4f:c6:2f:a9:38:8c:ac:11:dc:e6:25:dd: a8:26:53:c6:69:78:ad:b0:b5:03:46:f0:af:42:1d: 6d:53:a2:b1:35:8d:6e:43:86:01:e5:85:42:df:38: 6a:69:ea:5e:30:ca:49:d3:02:2a:62:cd:9f:df:c5: 62:86:17:8b:02:8f:94:de:0c:d2:5f:af:ca:7b:63: 6e:27:bc:c2:50:c8:6f:e8:10:08:92:0c:d6:95:e3: 3d:2a:ab:33:6c:bc:7b:7e:33:b9:6f:e8:9a:86:52: 6f:ed:2f:4c:16:24:fd:9d:39:dc:a4:02:26:06:bd: dd:65:70:21:05:3f:61:32:70:1d:4f:61:1d:33:30: d5:09:20:64:42:0e:18:95:a0:47:bd:8c:2d:60:90: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:96:19:EB:DD:A9:62:13:D8:42:C8:4D:1B:F5:72:1C:CD:C7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl X509v3 Authority Key Identifier: keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa9c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:df:07:4a:da:2b:71:42:7f:dc:1d:2f:88:07:a5:77:cb:35: 7c:c1:a6:a6:fc:49:06:00:5f:2b:73:37:ca:c5:22:3b:89:c2: 0e:59:b0:82:8e:9c:d1:cc:be:ba:16:2e:89:7f:42:18:73:c8: 90:1e:af:56:71:02:92:03:07:f5:1f:71:2f:6e:ac:50:e8:96: 67:24:71:7f:05:af:0c:14:91:fb:0e:74:69:28:d3:b9:cf:45: 65:dd:e5:ea:9e:b3:c7:3a:37:17:53:13:77:f9:de:ec:e9:34: 09:78:7b:9a:0f:9f:f5:a4:21:96:b8:58:d2:75:ba:16:2b:0a: 72:87:6f:36:bb:47:da:d6:96:a5:54:73:79:32:6e:29:c9:18: 1c:29:9f:c7:29:5d:95:aa:71:13:6e:04:ac:34:97:69:4d:66: 46:e9:c9:7a:00:1b:9c:86:3a:cd:61:01:c2:5d:db:bb:a3:17: 28:6c:84:82:4f:5f:98:ba:89:f7:e0:5b:86:be:dc:a9:5b:6d: 94:74:83:43:89:bb:94:4b:ee:eb:b2:e6:db:ae:64:09:cb:7f: 48:17:54:b3:ca:44:ff:70:9f:be:52:b3:d1:92:49:a1:d9:c7: d4:70:bb:69:c7:0c:d5:bc:43:af:b4:43:da:9e:a5:67:74:72: f3:5f:b0:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdAmVXap4tMRmKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm MTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ5ZjM2ZjYtZmI1Zi00MDZmLTkzZWYtN2E0YmU4NDg2ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3091g3KapXUNjJm96euip1AhrvSOa0OiwsLD W8sykvzCeGUz6hG8A2IbsipmMwyOrWiFAf8aTS7MygejNcv7ABZuhEWFkX86Ez3C lTPF+cd1f8a75ZmJwPGVvKbHG0bLowvz/sd2lBr700ZPxi+pOIysEdzmJd2oJlPG aXitsLUDRvCvQh1tU6KxNY1uQ4YB5YVC3zhqaepeMMpJ0wIqYs2f38VihheLAo+U 3gzSX6/Ke2NuJ7zCUMhv6BAIkgzWleM9KqszbLx7fjO5b+iahlJv7S9MFiT9nTnc pAImBr3dZXAhBT9hMnAdT2EdMzDVCSBkQg4YlaBHvYwtYJDDDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPIblhnr3aliE9hCyE0b9XIczccWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvY2IyYWJmNjktMWRlNC0z NGYwLTliZGEtNGY2NjIzNTBkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3fB0raK3FCf9wdL4gHpXfLNXzBpqb8SQYAXytzN8rFIjuJwg5Z sIKOnNHMvroWLol/QhhzyJAer1ZxApIDB/UfcS9urFDolmckcX8FrwwUkfsOdGko 07nPRWXd5eqes8c6NxdTE3f53uzpNAl4e5oPn/WkIZa4WNJ1uhYrCnKHbza7R9rW lqVUc3kybinJGBwpn8cpXZWqcRNuBKw0l2lNZkbpyXoAG5yGOs1hAcJd27ujFyhs hIJPX5i6iffgW4a+3KlbbZR0g0OJu5RL7uuy5tuuZAnLf0gXVLPKRP9wn75Ss9GS SaHZx9Rwu2nHDNW8Q6+0Q9qepWd0cvNfsK0= -----END CERTIFICATE-----Generated at Sun Sep 27 08:50:28 2026 by rpki-client