$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/aa025e36-e997-3429-829e-ed1b6317ce08.roa File: aa025e36-e997-3429-829e-ed1b6317ce08.roa (raw, json) Hash identifier: 5DY5DlNygF627vJ6jqAewj9sqOhjGSmThO0Q3zOHxtE= Subject key identifier: 3F:68:19:08:6E:CF:93:1F:FC:24:AE:50:B3:54:E6:CF:48:DD:22:34 Certificate issuer: /CN=45c9903a-58e9-4d12-b429-df86258726e0 Certificate serial: 010D0C9F4328584F0D6CFF23B0910C53F17828A0 Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/aa025e36-e997-3429-829e-ed1b6317ce08.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2602:f387:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ff:23:b0:91:0c:53:f1:78:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9bc70795-c493-4bda-be38-3c0cb1554ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:e7:a8:43:db:02:35:ba:44:6e:5c:42:e5: 5d:dc:ec:88:07:7f:d1:22:19:b7:3a:5b:b0:58:eb: 96:d1:a2:78:22:de:70:77:fd:7f:3f:fd:9a:33:d1: 70:5b:03:0b:05:85:5c:82:c3:4d:cb:27:fa:3f:51: f3:d2:fa:a9:f9:87:81:bb:70:f5:c4:0f:79:93:b6: d7:4e:67:ca:a4:97:ed:33:ef:da:8b:d6:de:e5:3a: 2a:46:16:f7:95:39:a9:54:6f:b3:6b:c6:ac:7b:27: c0:28:f1:24:02:9c:cb:5e:b9:c8:e4:14:e1:ad:4d: 07:bc:e3:c2:4e:c4:48:34:b6:1d:9f:90:57:23:55: f8:e1:5a:9f:90:fe:8d:a4:0c:1e:63:29:5e:af:cd: 1f:e5:81:08:82:de:12:3a:e6:ed:3f:25:92:77:ac: df:35:0a:bf:99:54:4d:2b:de:9c:ee:85:64:a1:e1: 92:c4:a8:ce:c4:63:0b:57:a6:8b:ef:4a:0c:f5:b9: ff:f9:e9:46:cc:bb:69:a0:7f:4e:4d:e7:bd:d9:e5: ff:e9:fa:db:b1:7c:98:02:68:58:3e:d8:df:55:5b: 29:34:79:70:c4:80:23:4e:2b:6e:fd:f5:c5:f0:97: 97:d7:90:2c:93:7b:a0:2a:61:95:87:f8:12:67:51: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:68:19:08:6E:CF:93:1F:FC:24:AE:50:B3:54:E6:CF:48:DD:22:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/aa025e36-e997-3429-829e-ed1b6317ce08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl X509v3 Authority Key Identifier: keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f387:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:40:24:56:2d:c2:60:26:f2:f9:6f:98:51:08:96:78:6d:53: 1a:5f:e0:d4:8d:c5:3f:84:61:07:7b:34:18:0a:64:d5:ad:a4: 81:07:c2:34:7a:b9:b0:3c:eb:d2:f2:33:24:8a:a1:0d:29:a9: f8:a2:9a:d5:73:0d:bb:df:06:b2:b6:91:d7:5f:a9:41:8a:e1: 7e:a2:06:1f:70:e5:c8:95:0a:c2:28:f6:9b:a7:05:c1:2e:4a: 77:a5:7c:10:e0:63:17:98:d2:83:98:66:a4:6f:b8:70:55:d7: 19:d6:fe:90:30:25:90:79:4e:a8:9b:3a:b4:bb:cf:ad:32:b5: 58:96:86:e3:2a:94:67:9e:ee:41:de:54:de:ba:2d:97:db:a4: 63:cc:2b:0f:77:6a:5d:8f:67:2e:f3:33:7d:1b:44:6c:57:04: 7e:fd:2a:5d:3e:40:fa:20:8c:e9:d2:ac:c8:63:65:ad:11:ad: 40:25:5b:71:fa:5c:10:f8:04:13:df:b5:e4:b7:cc:02:db:fd: f2:9e:e5:8c:b2:21:6c:7d:03:3f:5d:26:ab:8e:b6:e4:52:26: 5e:31:49:fa:1d:74:c0:3f:f0:6d:e8:99:fd:30:d1:9e:74:7f: be:8c:d8:c5:f9:13:91:e4:b3:dc:d4:4f:5e:ac:99:88:05:97: 0d:54:c6:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbP8jsJEMU/F4KKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy NmUwMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OWJjNzA3OTUtYzQ5My00YmRhLWJlMzgtM2MwY2IxNTU0ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyebnqEPbAjW6RG5cQuVd3OyIB3/RIhm3Oluw WOuW0aJ4It5wd/1/P/2aM9FwWwMLBYVcgsNNyyf6P1Hz0vqp+YeBu3D1xA95k7bX TmfKpJftM+/ai9be5ToqRhb3lTmpVG+za8aseyfAKPEkApzLXrnI5BThrU0HvOPC TsRINLYdn5BXI1X44VqfkP6NpAweYyler80f5YEIgt4SOubtPyWSd6zfNQq/mVRN K96c7oVkoeGSxKjOxGMLV6aL70oM9bn/+elGzLtpoH9OTee92eX/6frbsXyYAmhY PtjfVVspNHlwxIAjTitu/fXF8JeX15Ask3ugKmGVh/gSZ1F+fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9oGQhuz5Mf/CSuULNU5s9I3SI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5 OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvYWEwMjVlMzYtZTk5Ny0z NDI5LTgyOWUtZWQxYjYzMTdjZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0 MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3 MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2 MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJAJFYtwmAm8vlvmFEIlnhtUxpf4NSNxT+EYQd7NBgKZNWtpIEH wjR6ubA869LyMySKoQ0pqfiimtVzDbvfBrK2kddfqUGK4X6iBh9w5ciVCsIo9pun BcEuSnelfBDgYxeY0oOYZqRvuHBV1xnW/pAwJZB5TqibOrS7z60ytViWhuMqlGee 7kHeVN66LZfbpGPMKw93al2PZy7zM30bRGxXBH79Kl0+QPogjOnSrMhjZa0RrUAl W3H6XBD4BBPfteS3zALb/fKe5YyyIWx9Az9dJquOtuRSJl4xSfoddMA/8G3omf0w 0Z50f76M2MX5E5Hks9zUT16smYgFlw1Uxsw= -----END CERTIFICATE-----Generated at Tue Oct 6 19:28:02 2026 by rpki-client