$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/3507a1c3-3310-3efb-a5dd-37e1fba90a32.roa File: 3507a1c3-3310-3efb-a5dd-37e1fba90a32.roa (raw, json) Hash identifier: KNg0zbUl0CYGHgdf35tlVDZNCr6k797l9sd3Rv9tbvk= Subject key identifier: 67:FA:1D:D3:4F:04:A8:F6:46:5C:54:55:3A:3D:FF:42:D0:72:E3:14 Certificate issuer: /CN=b56e7c58-8673-46d1-820d-7d6bfba44d14 Certificate serial: 010D0C9F4328584F46A7DBB5A3A1F5712E9D3040 Authority key identifier: 2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/3507a1c3-3310-3efb-a5dd-37e1fba90a32.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 401994 IP address blocks: 2602:f57c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:db:b5:a3:a1:f5:71:2e:9d:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56e7c58-8673-46d1-820d-7d6bfba44d14 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=4f5d92d7-b417-4903-9297-98e162e9982f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:5b:57:c8:f1:98:ab:3d:ab:cb:b0:31:64: 9a:4c:be:7e:70:6d:2a:7c:df:fa:37:76:c9:83:8a: 2a:31:64:66:98:2b:88:40:f6:10:c2:da:be:d2:84: 90:9b:9e:5e:b0:eb:16:cf:ac:08:ce:6b:10:83:43: 8c:c0:b7:b1:2d:76:77:2c:1c:95:f4:87:63:f8:e8: 48:f5:ab:aa:82:16:c5:f4:4e:10:c2:d0:20:fa:c0: a3:46:48:0a:c2:30:12:77:fd:d1:33:b2:5e:76:c2: 6d:9c:5b:f2:cd:c2:2a:04:0d:77:07:6b:59:53:93: b4:37:3f:7c:53:63:4d:aa:fb:ed:28:19:a0:3f:f3: cd:2e:cc:e8:38:03:99:6a:cb:90:44:67:60:1e:2c: 63:5c:5a:4e:01:bd:92:ca:5f:63:d7:60:80:e3:ac: 91:af:d4:e0:5f:aa:31:54:f3:d8:2a:4e:75:33:20: 88:86:bc:70:03:7b:39:ec:da:c0:65:43:2d:86:8a: 58:59:25:ef:eb:60:d5:73:d7:78:43:ef:e1:28:5a: 4e:0e:34:d9:82:35:27:0b:28:72:f0:69:5f:06:f0: c8:c2:df:7d:2c:13:53:dd:04:08:5a:51:6a:0a:10: 40:98:20:70:6d:5c:f6:a2:51:01:2a:87:0a:80:b3: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FA:1D:D3:4F:04:A8:F6:46:5C:54:55:3A:3D:FF:42:D0:72:E3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/3507a1c3-3310-3efb-a5dd-37e1fba90a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl X509v3 Authority Key Identifier: keyid:2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer sbgp-ipAddrBlock: critical IPv6: 2602:f57c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e3:5c:ad:be:04:3d:86:fb:63:1f:6d:1d:18:60:8a:0e:48: 71:f4:2f:8c:ad:1c:91:d6:e2:b6:c8:11:04:eb:c9:c4:8b:80: 7d:87:42:bf:f0:66:3f:8c:94:7c:2b:61:30:02:a8:06:63:f4: f4:b5:aa:ef:09:32:c4:a9:4c:09:eb:1b:96:41:18:21:b4:c1: e6:35:65:bd:17:4f:fb:c5:a1:26:f5:a2:46:2e:f1:83:13:b2: 36:0a:b4:6a:ed:6a:99:85:67:3e:51:54:b5:74:1f:86:3d:7b: 9c:3b:64:8d:de:fd:5f:72:2f:f1:a2:43:8f:4c:58:08:74:d1: ad:c7:4f:27:d5:08:2f:8e:e5:d0:29:68:e0:59:5b:ce:fd:d7: 2b:a7:c2:3a:23:a1:68:04:c3:63:97:1e:f5:6d:cf:4e:90:aa: e9:64:18:83:1a:94:d7:03:e2:18:9c:14:4a:be:15:93:d2:25: f8:96:39:71:10:93:bc:a5:b0:67:62:b0:e5:8c:a7:bc:ad:b0: 71:16:03:da:e1:16:95:c5:38:49:52:cc:20:64:b6:d6:fa:64: 5d:44:c7:d2:0c:fa:0a:b4:de:5f:e9:26:46:8b:97:1a:d4:b2: 96:b1:e9:f5:92:04:17:49:fc:04:38:b8:32:2d:60:47:6a:42: 7b:e1:22:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Gp9u1o6H1cS6dMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZTdjNTgtODY3My00NmQxLTgyMGQtN2Q2YmZiYTQ0 ZDE0MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGY1ZDkyZDctYjQxNy00OTAzLTkyOTctOThlMTYyZTk5ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0lbV8jxmKs9q8uwMWSaTL5+cG0qfN/6N3bJ g4oqMWRmmCuIQPYQwtq+0oSQm55esOsWz6wIzmsQg0OMwLexLXZ3LByV9Idj+OhI 9auqghbF9E4QwtAg+sCjRkgKwjASd/3RM7JedsJtnFvyzcIqBA13B2tZU5O0Nz98 U2NNqvvtKBmgP/PNLszoOAOZasuQRGdgHixjXFpOAb2Syl9j12CA46yRr9TgX6ox VPPYKk51MyCIhrxwA3s57NrAZUMthopYWSXv62DVc9d4Q+/hKFpODjTZgjUnCyhy 8GlfBvDIwt99LBNT3QQIWlFqChBAmCBwbVz2olEBKocKgLOqLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGf6HdNPBKj2RlxUVTo9/0LQcuMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iNTZl N2M1OC04NjczLTQ2ZDEtODIwZC03ZDZiZmJhNDRkMTQvMzUwN2ExYzMtMzMxMC0z ZWZiLWE1ZGQtMzdlMWZiYTkwYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjU2ZTdjNTgtODY3My00NmQxLTgy MGQtN2Q2YmZiYTQ0ZDE0L2I1NmU3YzU4LTg2NzMtNDZkMS04MjBkLTdkNmJmYmE0 NGQxNC5jcmwwHwYDVR0jBBgwFoAULbeD930AdWHJ+rzolyjI4GnnLxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iNTZlN2M1OC04NjczLTQ2ZDEtODIwZC03ZDZi ZmJhNDRkMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1fAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEeNcrb4EPYb7Yx9tHRhgig5IcfQvjK0ckdbitsgRBOvJxIuAfYdC v/BmP4yUfCthMAKoBmP09LWq7wkyxKlMCesblkEYIbTB5jVlvRdP+8WhJvWiRi7x gxOyNgq0au1qmYVnPlFUtXQfhj17nDtkjd79X3Iv8aJDj0xYCHTRrcdPJ9UIL47l 0Clo4Flbzv3XK6fCOiOhaATDY5ce9W3PTpCq6WQYgxqU1wPiGJwUSr4Vk9Il+JY5 cRCTvKWwZ2Kw5YynvK2wcRYD2uEWlcU4SVLMIGS21vpkXUTH0gz6CrTeX+kmRouX GtSylrHp9ZIEF0n8BDi4Mi1gR2pCe+Eiww== -----END CERTIFICATE-----Generated at Sun Sep 27 05:26:51 2026 by rpki-client