$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/e9b5c975-9070-35b8-bdc5-fac12d4b6678.roa File: e9b5c975-9070-35b8-bdc5-fac12d4b6678.roa (raw, json) Hash identifier: 3bkHz7+LNGClmDRlfaFzGaXTa0zlfUUHoHtOOl8UWME= Subject key identifier: 2B:90:D1:9C:6E:AB:7D:44:59:BE:4D:AB:BB:53:A5:C9:17:13:5C:29 Certificate issuer: /CN=7d4b5dad-e51a-483b-88aa-d70fd450f144 Certificate serial: 010D0C9F4328584F4972DB37D0AA44CCD684FA80 Authority key identifier: 70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/e9b5c975-9070-35b8-bdc5-fac12d4b6678.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40117 IP address blocks: 2602:f3e4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:db:37:d0:aa:44:cc:d6:84:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4b5dad-e51a-483b-88aa-d70fd450f144 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37d946a1-2d70-40e1-b1f3-e9b8f60915a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:ac:4a:c7:58:5c:8f:24:7b:11:ad:de:4b: 62:85:0c:88:1d:bd:c3:fb:e7:2a:a3:61:90:58:73: db:9f:cc:5f:e9:ce:b6:86:51:49:ff:8c:80:d1:c9: 16:18:d5:c3:35:de:70:79:c8:cd:fd:c0:d5:5b:f7: 04:79:70:ee:4b:7b:f5:31:61:73:46:61:3d:60:36: 3d:c3:1c:72:f6:47:e4:14:f3:cc:60:3d:fe:73:27: d1:6e:a5:9d:ef:5d:ec:7f:b7:02:5c:97:f6:36:f2: c8:dc:e3:81:a6:aa:f1:46:84:3c:74:a4:13:04:65: 74:80:f6:39:59:a5:8c:20:be:76:fc:da:2a:28:9e: 3e:b1:f2:83:1f:24:96:fd:b2:81:32:e1:bb:43:29: 9b:68:da:95:da:01:d2:54:8d:7e:0e:cd:0c:18:e5: a1:ef:6e:dc:20:9f:35:92:20:e5:79:6f:98:d4:a7: 32:6c:f5:75:5a:e1:3b:ba:f1:58:e2:ab:9b:2f:eb: 37:e3:86:6c:0a:34:f3:b9:63:83:0f:fa:12:62:9f: 3f:3b:f1:cd:15:50:73:a7:47:11:ae:37:4c:18:c8: 86:04:89:c7:97:07:2a:40:35:b6:21:0e:0d:9b:1e: 89:40:fc:b0:3f:d7:e5:0e:77:5b:59:f1:71:0c:9e: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:D1:9C:6E:AB:7D:44:59:BE:4D:AB:BB:53:A5:C9:17:13:5C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/e9b5c975-9070-35b8-bdc5-fac12d4b6678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.crl X509v3 Authority Key Identifier: keyid:70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3e4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:89:bd:c0:7f:6b:f1:55:34:f3:78:25:7e:ea:dd:29:46:05: d7:eb:07:ce:c1:56:c3:0e:de:d9:8e:1f:b9:6c:ca:b6:37:5d: 9a:74:73:5c:12:4f:0b:e6:4a:fe:ee:5a:3d:87:59:56:ad:56: b6:fb:ad:0c:8a:7b:37:3f:0e:dd:16:c8:28:e8:25:41:44:fc: d3:55:46:5e:82:3f:ea:0f:37:64:c7:db:bc:07:26:91:6a:93: f6:3a:0d:07:9e:20:20:c4:ab:4f:9d:6c:02:21:f4:51:d4:eb: f6:67:c4:b7:e1:51:d2:19:60:32:ba:e3:02:ee:8e:86:fc:57: 0f:a1:77:ec:bb:26:56:b4:a4:db:78:79:b4:69:af:40:44:96: ae:07:cf:ca:5f:eb:91:fa:17:f0:50:91:69:04:32:37:08:3e: f4:da:ad:77:b8:e4:d1:7d:2a:9a:1e:b6:5b:1c:ae:b2:a2:64: b2:bd:02:cc:4c:89:95:6d:48:a9:82:28:ce:31:28:ad:03:f9: 6c:91:6f:1c:0b:d4:29:70:34:ae:5b:a0:64:f5:a7:02:aa:ac: 2c:1b:ea:52:fb:4f:5c:24:54:14:39:e4:36:82:8a:db:02:da: 8e:c0:08:18:7d:13:20:db:ed:81:6b:06:a5:b6:4e:8a:8f:87: b4:69:d8:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcts30KpEzNaE+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q0YjVkYWQtZTUxYS00ODNiLTg4YWEtZDcwZmQ0NTBm MTQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdkOTQ2YTEtMmQ3MC00MGUxLWIxZjMtZTliOGY2MDkxNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpWsSsdYXI8kexGt3ktihQyIHb3D++cqo2GQ WHPbn8xf6c62hlFJ/4yA0ckWGNXDNd5wecjN/cDVW/cEeXDuS3v1MWFzRmE9YDY9 wxxy9kfkFPPMYD3+cyfRbqWd713sf7cCXJf2NvLI3OOBpqrxRoQ8dKQTBGV0gPY5 WaWMIL52/NoqKJ4+sfKDHySW/bKBMuG7QymbaNqV2gHSVI1+Ds0MGOWh727cIJ81 kiDleW+Y1KcybPV1WuE7uvFY4qubL+s344ZsCjTzuWODD/oSYp8/O/HNFVBzp0cR rjdMGMiGBInHlwcqQDW2IQ4Nmx6JQPywP9flDndbWfFxDJ7U4QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCuQ0Zxuq31EWb5Nq7tTpckXE1wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83ZDRi NWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBmZDQ1MGYxNDQvZTliNWM5NzUtOTA3MC0z NWI4LWJkYzUtZmFjMTJkNGI2Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2Q0YjVkYWQtZTUxYS00ODNiLTg4 YWEtZDcwZmQ0NTBmMTQ0LzdkNGI1ZGFkLWU1MWEtNDgzYi04OGFhLWQ3MGZkNDUw ZjE0NC5jcmwwHwYDVR0jBBgwFoAUcKSehsIw1ZhiVXFAArAJhh6SvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83ZDRiNWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBm ZDQ1MGYxNDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLz5AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeIm9wH9r8VU083glfurdKUYF1+sHzsFWww7e2Y4fuWzKtjddmnRz XBJPC+ZK/u5aPYdZVq1WtvutDIp7Nz8O3RbIKOglQUT801VGXoI/6g83ZMfbvAcm kWqT9joNB54gIMSrT51sAiH0UdTr9mfEt+FR0hlgMrrjAu6OhvxXD6F37LsmVrSk 23h5tGmvQESWrgfPyl/rkfoX8FCRaQQyNwg+9Nqtd7jk0X0qmh62WxyusqJksr0C zEyJlW1IqYIozjEorQP5bJFvHAvUKXA0rlugZPWnAqqsLBvqUvtPXCRUFDnkNoKK 2wLajsAIGH0TINvtgWsGpbZOio+HtGnYgQ== -----END CERTIFICATE-----Generated at Sun Sep 27 06:13:32 2026 by rpki-client