$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa File: 628493d1-603c-3129-8b8d-fbf6af96be8e.roa (raw, json) Hash identifier: qlC5ai6uF23n1SJl5ozVzj2i4NTrD4je1v4HLhAidj8= Subject key identifier: 95:AE:80:2B:21:63:94:1C:00:5A:5A:BA:16:6F:70:D0:69:24:BB:0B Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584F331D23A62DB5A0575A9556E0 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 53727 IP address blocks: 2602:f982:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:23:a6:2d:b5:a0:57:5a:95:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=ca00fec8-a63d-4d06-a2cf-af25e78eb6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:06:ae:e7:0a:c9:8a:cf:eb:d3:12:3b:80: 16:d3:1b:e2:1f:da:c3:95:fc:a9:94:51:7c:5f:0c: 47:30:9b:5b:2b:8c:69:73:73:33:24:68:b2:bc:18: af:bc:61:84:92:c3:a2:d9:9e:7f:fc:f6:c1:e1:23: df:64:d4:36:dd:d6:5b:4c:f3:97:c2:0c:c1:8c:bb: 33:0d:23:61:38:34:5c:1f:56:62:86:8b:45:1c:4b: fa:74:9a:0c:dc:e7:5c:28:f7:0d:8b:1b:4d:a4:a0: 62:ab:4f:d9:cc:12:ae:e6:3a:a2:50:3e:af:45:7c: 3a:93:ca:f9:c1:bd:88:29:4d:40:e8:e2:77:3d:91: ed:5e:24:17:4d:3a:95:08:27:21:4b:69:f9:1e:61: 19:c4:43:99:0b:fe:6b:4b:dc:6f:c2:38:6a:a2:cb: a2:a6:53:ee:b3:40:44:65:09:97:55:7a:a5:fa:70: 2b:10:ed:60:22:a7:13:93:2d:e5:3e:c4:be:b5:f5: 5f:20:35:a3:01:00:70:b0:76:97:11:14:14:47:1d: 41:ea:c2:ec:e3:23:37:52:3f:55:8b:ff:ab:fc:29: ed:54:80:11:d7:75:2c:86:23:1e:72:ef:a3:76:d9: 91:bc:8d:df:29:06:1e:78:0c:23:70:56:51:21:a5: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:80:2B:21:63:94:1C:00:5A:5A:BA:16:6F:70:D0:69:24:BB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/628493d1-603c-3129-8b8d-fbf6af96be8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:85:71:c3:9d:25:67:65:2c:df:bc:8c:44:4f:f7:92:d4:2d: 2c:f8:9f:94:f9:78:c8:38:f8:b1:54:e9:68:d4:dc:91:2f:e8: e4:7f:b4:90:28:46:46:39:3a:08:73:91:6d:47:88:64:eb:e7: 34:3c:a0:dc:35:2c:f7:e0:e7:04:be:6a:fe:5c:2f:df:39:93: e2:e9:da:ee:9b:de:27:a6:7b:e2:99:fe:c0:cf:1f:82:db:b0: b2:43:55:98:0f:3c:9f:1a:a5:99:a7:ad:7b:1d:e8:6f:ca:cc: 86:77:32:83:65:4c:83:3e:6b:00:c7:32:60:e5:58:04:68:60: 84:5c:5b:bb:78:b0:77:95:fb:63:92:ab:24:45:ab:be:aa:08: 1b:2f:16:f7:d8:da:0e:f3:ab:56:1b:55:29:7d:18:e2:93:ca: 32:13:ed:20:44:e1:c5:fb:b6:c5:96:bf:6c:b0:93:cb:99:76: 56:1f:63:dc:1d:03:09:b2:ac:89:04:93:e0:0b:28:ce:df:b9: 3c:dd:ba:ce:f9:57:31:fa:6a:9c:3c:68:57:5f:45:8a:6a:a1: 59:2b:2e:d0:90:e2:a2:7b:db:08:9a:69:ed:4f:14:bd:4d:83: d8:92:9c:9c:eb:9e:50:9d:e6:cf:54:34:a9:81:46:bf:22:60: 07:3d:ea:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8zHSOmLbWgV1qVVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk Y2EwMGZlYzgtYTYzZC00ZDA2LWEyY2YtYWYyNWU3OGViNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMAGrucKyYrP69MSO4AW0xviH9rDlfyplFF8 XwxHMJtbK4xpc3MzJGiyvBivvGGEksOi2Z5//PbB4SPfZNQ23dZbTPOXwgzBjLsz DSNhODRcH1ZihotFHEv6dJoM3OdcKPcNixtNpKBiq0/ZzBKu5jqiUD6vRXw6k8r5 wb2IKU1A6OJ3PZHtXiQXTTqVCCchS2n5HmEZxEOZC/5rS9xvwjhqosuiplPus0BE ZQmXVXql+nArEO1gIqcTky3lPsS+tfVfIDWjAQBwsHaXERQURx1B6sLs4yM3Uj9V i/+r/CntVIAR13UshiMecu+jdtmRvI3fKQYeeAwjcFZRIaX9bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWugCshY5QcAFpauhZvcNBpJLsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvNjI4NDkzZDEtNjAzYy0z MTI5LThiOGQtZmJmNmFmOTZiZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWFccOdJWdlLN+8jERP95LULSz4n5T5eMg4+LFU6WjU3JEv6OR/ tJAoRkY5OghzkW1HiGTr5zQ8oNw1LPfg5wS+av5cL985k+Lp2u6b3ieme+KZ/sDP H4LbsLJDVZgPPJ8apZmnrXsd6G/KzIZ3MoNlTIM+awDHMmDlWARoYIRcW7t4sHeV +2OSqyRFq76qCBsvFvfY2g7zq1YbVSl9GOKTyjIT7SBE4cX7tsWWv2ywk8uZdlYf Y9wdAwmyrIkEk+ALKM7fuTzdus75VzH6apw8aFdfRYpqoVkrLtCQ4qJ72wiaae1P FL1Ng9iSnJzrnlCd5s9UNKmBRr8iYAc96gY= -----END CERTIFICATE-----Generated at Wed Sep 30 13:47:37 2026 by rpki-client