$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa File: cf0646b3-a270-3e91-a9bb-005e44df8feb.roa (raw, json) Hash identifier: GkcmzuFxYDPrNcezDn5Rph1HXzEBFMnOiJTHg3c3iCk= Subject key identifier: 1B:E5:E2:06:9F:36:A1:D0:D0:BB:CB:72:6E:98:FD:15:09:89:70:B0 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584F497596E6AD84189890CC4840 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399805 IP address blocks: 2602:fc88:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:96:e6:ad:84:18:98:90:cc:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1a39009-20cb-4a7c-b906-bceb58ada993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:32:94:6b:5b:1c:ad:e2:11:9c:f6:e3:a1: ac:eb:e1:6e:b3:7e:34:71:96:b2:d1:3f:52:ad:f9: 0d:38:a4:d9:73:46:42:4b:13:3a:5e:4f:d5:98:0a: 94:56:a3:ff:4c:6a:ff:fe:32:4e:02:57:e6:37:b5: 35:76:69:b9:a7:32:b7:84:58:fd:d8:b8:35:89:a1: 65:6b:59:58:e1:fd:51:1c:f0:1c:ce:b5:7d:db:c3: 70:91:fc:0c:1e:f1:6c:8a:d4:b9:a2:2b:01:53:90: fb:33:e2:5e:21:8b:69:e0:3f:0e:35:ac:39:8f:63: 1c:1d:95:68:94:c9:5f:60:be:f4:7a:48:16:12:66: 1c:db:77:34:ee:6b:9f:b7:ee:ea:d4:21:21:c4:f6: 17:70:99:4e:75:7e:54:2f:c5:02:37:9e:83:c3:da: 50:b6:af:8c:01:05:8f:a9:d3:cf:e0:c1:67:3a:da: 58:bc:7f:8b:5d:1c:12:b6:fe:22:f4:4c:1a:89:de: 88:1d:cf:f8:d8:58:18:63:2d:24:15:78:b4:96:a7: d8:5c:01:e3:67:84:c0:4f:c5:e7:73:03:90:cb:5a: 30:34:f0:46:a0:c8:60:50:fa:7f:c9:5b:46:a8:2c: c4:bc:c3:c0:ef:a7:bf:fd:35:90:bc:14:f5:4d:87: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E5:E2:06:9F:36:A1:D0:D0:BB:CB:72:6E:98:FD:15:09:89:70:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cf0646b3-a270-3e91-a9bb-005e44df8feb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc88:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:5b:80:7d:a6:5c:85:cc:e3:ed:e7:8d:20:02:e7:d4:00: 54:2c:d0:3e:08:1f:74:f8:df:4f:aa:1f:15:3b:fd:4b:3e:b2: 69:c5:38:7d:d9:4e:e7:da:39:e3:ae:b6:d7:62:98:57:a6:a7: 72:77:81:ca:a3:50:83:63:61:ff:90:93:5a:54:1a:d9:7e:0e: bc:7f:2e:21:2b:0e:5e:f4:fd:b5:42:57:44:c5:65:20:40:85: f3:0d:34:74:ec:6a:aa:a8:61:d3:1b:e4:40:aa:42:95:dd:34: 5d:45:a4:3e:27:b2:0c:1a:d0:35:e0:95:40:cf:ab:68:4b:a3: 68:7e:fe:77:ba:0d:31:2e:aa:41:37:d2:d7:38:f5:7e:6e:b1: c8:1e:1e:6e:2e:41:b2:7f:52:7d:3a:c2:6a:21:6a:a7:80:55: c2:66:47:72:3d:d5:a9:a3:9f:d2:79:76:e0:dd:70:ab:a1:a0: 9d:18:dd:9d:4c:97:00:e0:51:d2:d2:97:d9:36:ed:cd:7b:4e: 0e:00:ed:31:c1:01:66:8f:6c:38:60:b5:36:e4:40:ef:55:5c: 5f:40:46:a1:54:c9:d1:5a:ec:56:83:25:be:70:d6:fc:8b:54: fb:ec:b4:c0:0d:3f:dd:f2:46:ca:ed:35:16:31:46:29:1e:9e: 36:4d:02:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdZbmrYQYmJDMSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFhMzkwMDktMjBjYi00YTdjLWI5MDYtYmNlYjU4YWRhOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb8ylGtbHK3iEZz246Gs6+Fus340cZay0T9S rfkNOKTZc0ZCSxM6Xk/VmAqUVqP/TGr//jJOAlfmN7U1dmm5pzK3hFj92Lg1iaFl a1lY4f1RHPAczrV928NwkfwMHvFsitS5oisBU5D7M+JeIYtp4D8ONaw5j2McHZVo lMlfYL70ekgWEmYc23c07muft+7q1CEhxPYXcJlOdX5UL8UCN56Dw9pQtq+MAQWP qdPP4MFnOtpYvH+LXRwStv4i9Ewaid6IHc/42FgYYy0kFXi0lqfYXAHjZ4TAT8Xn cwOQy1owNPBGoMhgUPp/yVtGqCzEvMPA76e//TWQvBT1TYeANwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvl4gafNqHQ0LvLcm6Y/RUJiXCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvY2YwNjQ2YjMtYTI3MC0z ZTkxLWE5YmItMDA1ZTQ0ZGY4ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8iAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEojW4B9plyFzOPt540gAufUAFQs0D4IH3T430+qHxU7/Us+smnF OH3ZTufaOeOuttdimFemp3J3gcqjUINjYf+Qk1pUGtl+Drx/LiErDl70/bVCV0TF ZSBAhfMNNHTsaqqoYdMb5ECqQpXdNF1FpD4nsgwa0DXglUDPq2hLo2h+/ne6DTEu qkE30tc49X5uscgeHm4uQbJ/Un06wmohaqeAVcJmR3I91amjn9J5duDdcKuhoJ0Y 3Z1MlwDgUdLSl9k27c17Tg4A7THBAWaPbDhgtTbkQO9VXF9ARqFUydFa7FaDJb5w 1vyLVPvstMANP93yRsrtNRYxRikenjZNApM= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:21 2026 by rpki-client