$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa File: 3cff927a-f198-366e-8e76-9857222f0035.roa (raw, json) Hash identifier: QCils9ZyxEhH5sSz/vdV26TLqh6IhPP6h1vnx8vwuK8= Subject key identifier: 81:BF:31:2A:BE:CC:14:4A:CB:BF:F1:08:CA:E9:E0:C4:9D:79:3F:89 Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584F4C3D55E3F974505BB74FFBA0 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 13566 IP address blocks: 2602:fa64:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:55:e3:f9:74:50:5b:b7:4f:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cd419f3b-f57b-45c0-8335-db77a6a1bfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:a4:50:16:b1:a3:af:07:1c:9b:76:81:07: b3:26:28:e7:3e:d2:36:ea:3e:46:16:e1:e3:1d:03: 61:70:04:dc:49:4c:67:d9:ea:0b:ae:37:6d:b3:e4: 5c:90:03:df:d7:0d:65:13:1e:d4:24:96:43:50:54: 71:b0:54:e3:cc:2f:2c:94:72:13:a0:6f:c1:19:de: 81:13:70:12:1c:18:4d:09:21:f8:7d:15:f9:c0:c5: 58:da:0f:ba:49:71:7b:05:95:e8:06:c8:bc:1b:6d: 6e:1b:22:df:ac:9c:c0:0f:85:e2:19:22:ee:a4:95: 76:b2:a5:92:39:de:18:c8:01:cc:de:d4:54:be:e9: 67:56:93:b9:d2:e4:18:58:e5:54:c9:43:14:27:d6: 7e:3f:b8:80:9d:3a:a3:6c:83:2b:08:21:26:bc:d0: 75:8b:eb:2b:25:b6:cf:fb:74:5f:ef:60:2e:0a:94: e0:5a:ae:d1:55:16:3f:05:f5:f8:67:57:7f:05:85: 82:f7:6e:ef:bb:51:c5:21:7d:bb:db:25:e7:25:f2: b7:89:06:0b:ec:e7:30:8e:3e:42:70:d6:20:3c:7c: 7b:de:38:87:62:73:50:9d:9d:24:b8:30:39:f3:0b: e9:c9:90:aa:6b:e9:6d:ad:1d:01:ad:de:af:04:39: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BF:31:2A:BE:CC:14:4A:CB:BF:F1:08:CA:E9:E0:C4:9D:79:3F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa64:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a9:37:ca:ff:e3:27:ff:74:5e:40:ef:4a:f7:93:8d:63:cd: d6:6f:ea:22:e8:d9:5c:e7:1a:d7:01:c7:b4:66:9e:75:14:4b: 45:f3:e4:5f:cb:ad:fa:9b:4d:ef:be:91:89:f0:8b:50:27:4a: 3d:82:a7:bd:e0:55:d0:81:05:a6:70:39:34:40:95:16:0f:01: 9b:1d:c9:3b:ec:aa:b7:9b:02:6e:87:d3:fe:e5:8a:25:c5:65: b8:99:d6:91:89:87:51:b0:ba:14:2f:ae:21:6e:d3:c1:ae:e0: bd:1e:7f:03:01:8f:18:ea:52:30:67:4a:b2:f1:cb:ce:34:62: 28:1b:18:a9:80:01:78:d5:bb:7a:10:d4:c2:b3:35:fe:10:9d: f3:25:e9:94:0d:ca:44:a9:21:e0:94:df:b0:15:32:c1:ee:15: 0b:6b:38:a1:d3:30:66:0c:70:43:14:a6:05:a4:bf:71:b8:82: a0:ff:67:f2:dd:f3:e7:d1:17:d9:c7:68:2f:56:67:56:f0:a9: ec:57:23:61:1d:be:8f:fc:a3:b8:6f:6c:7d:ed:0a:7e:17:4e: 34:12:30:0c:9e:e3:e4:0a:86:ff:a4:f1:81:75:5b:9a:e2:63: f4:75:9e:2b:cc:19:22:21:3d:f1:87:21:59:ca:ab:13:66:ee: b6:65:5e:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVXj+XRQW7dP+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2Q0MTlmM2ItZjU3Yi00NWMwLTgzMzUtZGI3N2E2YTFiZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROkUBaxo68HHJt2gQezJijnPtI26j5GFuHj HQNhcATcSUxn2eoLrjdts+RckAPf1w1lEx7UJJZDUFRxsFTjzC8slHIToG/BGd6B E3ASHBhNCSH4fRX5wMVY2g+6SXF7BZXoBsi8G21uGyLfrJzAD4XiGSLupJV2sqWS Od4YyAHM3tRUvulnVpO50uQYWOVUyUMUJ9Z+P7iAnTqjbIMrCCEmvNB1i+srJbbP +3Rf72AuCpTgWq7RVRY/BfX4Z1d/BYWC927vu1HFIX272yXnJfK3iQYL7Ocwjj5C cNYgPHx73jiHYnNQnZ0kuDA58wvpyZCqa+ltrR0Brd6vBDlgpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIG/MSq+zBRKy7/xCMrp4MSdeT+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvM2NmZjkyN2EtZjE5OC0z NjZlLThlNzYtOTg1NzIyMmYwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ZAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJqpN8r/4yf/dF5A70r3k41jzdZv6iLo2VznGtcBx7RmnnUUS0Xz 5F/LrfqbTe++kYnwi1AnSj2Cp73gVdCBBaZwOTRAlRYPAZsdyTvsqrebAm6H0/7l iiXFZbiZ1pGJh1GwuhQvriFu08Gu4L0efwMBjxjqUjBnSrLxy840YigbGKmAAXjV u3oQ1MKzNf4QnfMl6ZQNykSpIeCU37AVMsHuFQtrOKHTMGYMcEMUpgWkv3G4gqD/ Z/Ld8+fRF9nHaC9WZ1bwqexXI2Edvo/8o7hvbH3tCn4XTjQSMAye4+QKhv+k8YF1 W5riY/R1nivMGSIhPfGHIVnKqxNm7rZlXss= -----END CERTIFICATE-----Generated at Sat Sep 26 11:14:08 2026 by rpki-client