$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/681ae889-6908-3340-880c-2f972730ae22.roa File: 681ae889-6908-3340-880c-2f972730ae22.roa (raw, json) Hash identifier: C0gPygTKndcjtHDuroEVYb6WDL73Ua0L8SatMxSHPGg= Subject key identifier: B6:B6:43:59:25:6E:1B:E5:BC:C5:D8:0A:6B:57:19:6C:08:60:DF:02 Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584F31B7B7B72D3300283A903A80 Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/681ae889-6908-3340-880c-2f972730ae22.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 402456 IP address blocks: 2602:f3d4::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:b7:b7:2d:33:00:28:3a:90:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=2bb872aa-8d99-4569-9b67-fbae7dba0b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:58:45:71:a7:c8:cf:3d:25:9d:fc:a0:0b: 7d:18:42:fe:6b:17:37:b6:d4:27:d8:b4:6c:76:9f: e9:cd:95:c0:28:2b:2e:c1:b5:06:57:66:26:83:8d: d7:14:88:3c:11:76:52:02:03:0b:75:54:dd:96:d2: ca:72:ff:e0:90:e2:3e:a2:dd:48:7d:ba:e8:90:54: 7f:de:90:01:70:02:82:a0:15:3e:7c:1d:34:d5:eb: 1f:14:53:fd:47:8c:ad:83:38:9b:74:21:ef:80:25: ff:be:5e:d9:ae:1a:09:61:a8:42:11:f5:03:1e:b4: 1b:00:b0:28:28:50:5f:65:5b:81:2f:11:e5:f7:95: 67:86:72:00:b7:0c:c9:75:13:32:c4:d4:9d:e7:6a: c8:0b:0a:2c:f1:5b:81:91:bb:6d:ad:d4:a2:2d:0f: ee:6c:6f:b8:9c:0f:6b:d1:6b:43:6b:ae:d3:90:ec: 47:4d:81:b4:f0:92:ef:3a:57:28:30:35:cf:91:bf: 6a:d7:dd:ae:3a:91:b3:a7:dc:bd:98:90:ee:76:4f: b6:fc:e7:b2:3a:89:9b:99:d0:0f:fc:e5:8e:df:71: 4d:ff:87:32:d1:6d:fb:17:3a:a9:d5:c0:88:78:85: e0:d8:72:ba:1e:db:fe:e1:08:d5:90:ac:43:49:d8: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:43:59:25:6E:1B:E5:BC:C5:D8:0A:6B:57:19:6C:08:60:DF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/681ae889-6908-3340-880c-2f972730ae22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3d4::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:02:36:bc:ac:b5:71:f4:8c:5d:e8:49:dc:22:8e:3a:25:a7: 9e:de:4a:72:3c:52:70:1d:f0:a9:d1:63:1a:a2:b7:b8:39:ad: b0:10:f8:b7:72:4f:69:b8:9e:c0:fe:02:39:4d:d3:2e:da:20: cc:a3:7e:14:d3:8e:03:16:70:5d:cd:46:48:08:e9:79:d0:aa: b3:c3:00:0d:cc:07:3b:fc:0b:b2:e7:93:b6:16:b5:3a:a0:5a: b3:fd:fe:7b:8f:b9:25:80:57:93:53:fe:83:69:a7:8f:fe:49: 2b:15:73:bd:8c:bf:f4:0a:b3:1f:7d:ec:f6:b9:6b:94:9d:5c: 53:b1:6f:47:14:85:47:65:6c:77:59:6a:80:02:4d:df:09:6d: de:23:82:cb:04:63:50:49:0e:01:7d:ee:e0:37:4d:1a:d9:21: ba:2f:e7:34:1d:59:eb:cb:db:25:50:82:b2:aa:31:0e:9d:fb: 56:80:ef:c9:2c:e5:7f:8e:10:4f:d6:4f:3b:0c:3c:bc:f5:fa: f2:63:67:aa:94:5b:c9:12:9f:fc:c6:02:05:0f:5c:d8:95:13: 23:98:a4:ce:43:68:60:50:0c:dc:ae:14:61:8f:8f:fa:04:85: b1:ca:69:14:98:83:9f:3f:ae:44:3b:07:be:73:ad:ca:82:7c: af:57:fb:31 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8xt7e3LTMAKDqQOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MmJiODcyYWEtOGQ5OS00NTY5LTliNjctZmJhZTdkYmEwYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfdYRXGnyM89JZ38oAt9GEL+axc3ttQn2LRs dp/pzZXAKCsuwbUGV2Ymg43XFIg8EXZSAgMLdVTdltLKcv/gkOI+ot1IfbrokFR/ 3pABcAKCoBU+fB001esfFFP9R4ytgzibdCHvgCX/vl7ZrhoJYahCEfUDHrQbALAo KFBfZVuBLxHl95VnhnIAtwzJdRMyxNSd52rICwos8VuBkbttrdSiLQ/ubG+4nA9r 0WtDa67TkOxHTYG08JLvOlcoMDXPkb9q192uOpGzp9y9mJDudk+2/OeyOombmdAP /OWO33FN/4cy0W37Fzqp1cCIeIXg2HK6Htv+4QjVkKxDSdg7PQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLa2Q1klbhvlvMXYCmtXGWwIYN8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvNjgxYWU4ODktNjkwOC0z MzQwLTg4MGMtMmY5NzI3MzBhZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLz1AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASgI2vKy1cfSMXehJ3CKOOiWnnt5KcjxScB3wqdFjGqK3uDmtsBD4 t3JPabiewP4COU3TLtogzKN+FNOOAxZwXc1GSAjpedCqs8MADcwHO/wLsueTtha1 OqBas/3+e4+5JYBXk1P+g2mnj/5JKxVzvYy/9AqzH33s9rlrlJ1cU7FvRxSFR2Vs d1lqgAJN3wlt3iOCywRjUEkOAX3u4DdNGtkhui/nNB1Z68vbJVCCsqoxDp37VoDv ySzlf44QT9ZPOww8vPX68mNnqpRbyRKf/MYCBQ9c2JUTI5ikzkNoYFAM3K4UYY+P +gSFscppFJiDnz+uRDsHvnOtyoJ8r1f7MQ== -----END CERTIFICATE-----Generated at Sun Oct 4 17:07:00 2026 by rpki-client