$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa File: 25c7a11e-7692-386c-9cc9-4d0633fea32b.roa (raw, json) Hash identifier: p37xUXPT1KnNaofT+T9BEoGwy98Oues9PVqUvFle+sI= Subject key identifier: 07:3F:5A:E2:4D:08:52:9D:88:20:14:1C:A3:F6:05:33:11:19:CA:96 Certificate issuer: /CN=45c9903a-58e9-4d12-b429-df86258726e0 Certificate serial: 010D0C9F4328584EFF7786B3EA89BA0EC717D200 Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 8075 IP address blocks: 2602:f387:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:86:b3:ea:89:ba:0e:c7:17:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=4d815428-d8d8-4cac-bcf1-14515416b2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:0b:31:71:21:47:6b:fc:a8:77:2b:f3:13: 28:10:7a:06:32:60:f7:9f:68:8a:3e:95:83:ea:a1: 47:a8:d1:81:a9:48:d8:69:23:25:bb:de:d2:ca:d7: dc:39:61:b6:d6:9b:e2:92:68:54:11:7f:0b:f5:b3: 5d:c6:ff:0e:77:43:19:82:5e:4f:a9:5f:61:3c:25: 8c:7c:f5:ca:ef:61:ae:62:ad:06:8c:70:9f:68:1a: 97:3c:74:c7:bf:8b:1c:43:d7:d3:82:b0:60:a3:15: ce:5a:8a:3a:59:df:69:1d:42:ad:19:11:83:e8:b7: ad:11:aa:0b:02:8e:f2:12:61:6a:27:ad:8e:8a:a1: 6a:5c:52:44:33:4b:40:c9:a3:66:e5:3f:7e:d3:51: c3:a9:0b:2f:d1:c2:ee:7a:d8:ad:34:5b:8f:68:ed: c5:ec:95:51:17:5a:0d:4e:cc:9b:b1:71:a6:d6:fd: 65:e8:a9:56:a9:6d:f5:72:07:9a:5f:04:b3:2a:53: 96:7f:e1:d5:58:e8:74:e0:b7:73:7c:de:b3:24:24: 44:e7:8b:1f:04:4c:2f:b4:2b:a7:1c:2b:47:3b:d3: c0:e3:12:23:26:5d:04:62:d0:1a:7d:f5:2d:09:d4: c5:b7:09:77:e6:d2:32:e4:78:b3:46:89:62:a1:41: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3F:5A:E2:4D:08:52:9D:88:20:14:1C:A3:F6:05:33:11:19:CA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/25c7a11e-7692-386c-9cc9-4d0633fea32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl X509v3 Authority Key Identifier: keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f387:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:29:44:56:43:2a:e0:8f:3c:8e:41:a2:9b:22:f4:04:68:a3: 41:22:87:4c:ff:76:d8:62:49:83:3c:66:17:57:c0:94:b7:23: d5:52:15:7b:05:56:8e:c4:09:4b:8e:c0:1e:c6:c0:a4:e7:6c: 65:8a:ef:94:1b:62:07:5d:db:d4:77:3b:4a:a8:ad:51:34:86: 26:a7:83:9b:91:e1:27:ba:50:d6:c0:10:c9:94:be:ac:cf:22: 9e:1b:a9:56:4b:b4:2c:3f:3a:58:70:f7:77:37:d4:75:4f:92: 10:bb:b5:ed:94:2a:16:fd:53:fd:3e:88:f5:d1:01:c8:0d:21: a3:73:fb:34:78:96:6a:f5:09:ba:ce:c3:e1:6b:dc:8d:bf:18: 2a:91:44:84:9e:14:47:e3:b2:95:e6:a9:3f:7b:97:17:0f:67: 67:71:67:27:06:56:78:46:53:f3:b8:07:5e:73:f5:4b:cc:54: 94:94:21:ce:65:9f:03:b3:6d:8f:fb:2e:cb:d0:8f:ab:fc:f1: 53:ee:2d:69:92:8c:9f:be:01:0a:16:8e:76:e3:d5:3a:e4:7d: 4f:27:6a:7d:51:f3:79:da:73:4c:58:d3:d7:24:27:e0:ba:7a: 73:0e:6c:be:01:e7:a9:c2:bb:98:71:b9:37:68:ff:01:a3:6b: 68:92:bb:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7/d4az6om6DscX0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy NmUwMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NGQ4MTU0MjgtZDhkOC00Y2FjLWJjZjEtMTQ1MTU0MTZiMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo40LMXEhR2v8qHcr8xMoEHoGMmD3n2iKPpWD 6qFHqNGBqUjYaSMlu97SytfcOWG21pvikmhUEX8L9bNdxv8Od0MZgl5PqV9hPCWM fPXK72GuYq0GjHCfaBqXPHTHv4scQ9fTgrBgoxXOWoo6Wd9pHUKtGRGD6LetEaoL Ao7yEmFqJ62OiqFqXFJEM0tAyaNm5T9+01HDqQsv0cLuetitNFuPaO3F7JVRF1oN TsybsXGm1v1l6KlWqW31cgeaXwSzKlOWf+HVWOh04LdzfN6zJCRE54sfBEwvtCun HCtHO9PA4xIjJl0EYtAaffUtCdTFtwl35tIy5HizRolioUH7nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAc/WuJNCFKdiCAUHKP2BTMRGcqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5 OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvMjVjN2ExMWUtNzY5Mi0z ODZjLTljYzktNGQwNjMzZmVhMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0 MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3 MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2 MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQpRFZDKuCPPI5Bopsi9ARoo0Eih0z/dthiSYM8ZhdXwJS3I9VS FXsFVo7ECUuOwB7GwKTnbGWK75QbYgdd29R3O0qorVE0hiang5uR4Se6UNbAEMmU vqzPIp4bqVZLtCw/Olhw93c31HVPkhC7te2UKhb9U/0+iPXRAcgNIaNz+zR4lmr1 CbrOw+Fr3I2/GCqRRISeFEfjspXmqT97lxcPZ2dxZycGVnhGU/O4B15z9UvMVJSU Ic5lnwOzbY/7LsvQj6v88VPuLWmSjJ++AQoWjnbj1TrkfU8nan1R83nac0xY09ck J+C6enMObL4B56nCu5hxuTdo/wGja2iSu8s= -----END CERTIFICATE-----Generated at Mon Sep 28 00:23:43 2026 by rpki-client