$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa File: e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa (raw, json) Hash identifier: +tqmP4ewpbP0rWo5uLYlJsePv2EsL7e4Fa1AYgLBRs8= Subject key identifier: 85:6D:ED:C4:F3:A2:84:B1:69:07:6B:BC:35:D7:38:CA:80:D4:46:6A Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F4328584F2957ADAFA5640B2D55B5D980 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 401720 IP address blocks: 2602:f7d8:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:ad:af:a5:64:0b:2d:55:b5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a290e206-2878-4602-bbdb-f129166e5e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4d:a6:14:a6:9c:b7:d6:de:a7:80:4f:4e:54: aa:c9:fa:3a:21:8f:83:f0:63:92:b8:9e:af:57:7b: 99:7c:7f:f0:01:6a:0e:38:87:20:33:ca:c4:62:8a: f4:b0:e8:c4:09:f6:09:d6:ae:17:2e:f9:56:58:3b: 56:6e:24:45:98:69:5a:48:99:bc:a0:60:9f:82:61: e9:4b:d6:c0:6a:13:13:3a:92:38:85:69:46:09:d5: 53:22:dd:c6:1e:d6:ed:3b:61:02:04:81:95:c9:8d: 3c:b0:4a:f9:e0:7e:8b:87:ab:e8:f9:1f:a0:2c:a7: 69:ea:e8:b8:a3:1b:75:7a:d7:2d:3b:bb:1f:f5:95: ea:a0:8d:ed:0b:c8:cd:f0:77:cf:a6:76:72:0a:90: bb:77:b9:e5:fe:67:12:75:ea:d1:f8:7e:5b:e9:a8: 9a:40:ec:4a:34:b4:ce:1d:a4:09:91:81:d4:1d:41: 7e:28:7a:18:ba:1f:3d:78:d9:e3:7c:a1:30:4c:cf: 1c:62:ce:9a:b0:ae:3b:71:e3:83:0d:ab:63:f4:86: 12:9c:2a:45:d1:93:a1:4d:d1:45:e9:66:5c:9e:f8: 54:16:f3:24:c4:aa:bb:90:9b:62:3d:1b:89:24:18: cf:92:f4:89:bf:4f:a9:66:ed:f2:1d:03:8d:97:51: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:ED:C4:F3:A2:84:B1:69:07:6B:BC:35:D7:38:CA:80:D4:46:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d8:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f4:c3:c6:a0:80:f6:91:5a:d5:63:7a:27:84:a3:ee:8f:82: 5d:e3:c8:0c:a9:d3:a6:e7:f9:b3:54:16:bd:08:f1:b0:36:51: b1:f9:77:24:67:84:0d:92:87:48:30:c0:3b:2c:52:c6:d0:5f: 26:e2:fc:b6:12:29:cf:10:00:16:27:a5:d8:bd:37:9e:7b:6a: e2:37:84:e8:22:83:a8:cf:40:7f:d4:49:a1:11:4d:54:90:86: 72:a5:f2:cc:69:14:6d:27:25:f1:ca:b0:a1:a5:67:48:12:35: 78:81:81:8b:dc:ea:be:e0:c3:41:ce:91:91:3c:8d:02:13:48: 5e:b7:49:2e:fd:f1:b1:d6:83:32:28:8f:35:2b:ae:ed:7d:cf: f0:38:a6:e2:c7:96:4c:d5:8d:d0:0f:9e:27:b4:08:09:20:3d: e4:07:3a:51:78:fa:3f:e8:46:58:01:4b:99:66:14:82:99:df: 0c:20:a4:44:bc:12:f6:1f:89:68:1d:b5:5a:d0:da:72:a2:ee: d9:fb:4d:88:58:6c:e1:32:19:f8:aa:09:84:c3:63:28:6c:89: 49:ba:9e:11:6b:df:b8:f7:6f:53:6f:5a:6f:5f:61:b9:bc:a8: b4:d1:51:34:ca:fb:f8:84:36:10:1b:a5:d7:50:44:0a:d7:6b: 22:70:08:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV62vpWQLLVW12YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTI5MGUyMDYtMjg3OC00NjAyLWJiZGItZjEyOTE2NmU1ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA602mFKact9bep4BPTlSqyfo6IY+D8GOSuJ6v V3uZfH/wAWoOOIcgM8rEYor0sOjECfYJ1q4XLvlWWDtWbiRFmGlaSJm8oGCfgmHp S9bAahMTOpI4hWlGCdVTIt3GHtbtO2ECBIGVyY08sEr54H6Lh6vo+R+gLKdp6ui4 oxt1etctO7sf9ZXqoI3tC8jN8HfPpnZyCpC7d7nl/mcSderR+H5b6aiaQOxKNLTO HaQJkYHUHUF+KHoYuh89eNnjfKEwTM8cYs6asK47ceODDatj9IYSnCpF0ZOhTdFF 6WZcnvhUFvMkxKq7kJtiPRuJJBjPkvSJv0+pZu3yHQONl1H4WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVt7cTzooSxaQdrvDXXOMqA1EZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvZTE3OTRmMGUtOGUzZC0z YWU2LTlhNWItNzRkMzllNzc4OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32AAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABj0w8aggPaRWtVjeieEo+6Pgl3jyAyp06bn+bNUFr0I8bA2UbH5 dyRnhA2Sh0gwwDssUsbQXybi/LYSKc8QABYnpdi9N557auI3hOgig6jPQH/USaER TVSQhnKl8sxpFG0nJfHKsKGlZ0gSNXiBgYvc6r7gw0HOkZE8jQITSF63SS798bHW gzIojzUrru19z/A4puLHlkzVjdAPnie0CAkgPeQHOlF4+j/oRlgBS5lmFIKZ3wwg pES8EvYfiWgdtVrQ2nKi7tn7TYhYbOEyGfiqCYTDYyhsiUm6nhFr37j3b1NvWm9f Ybm8qLTRUTTK+/iENhAbpddQRArXayJwCCE= -----END CERTIFICATE-----Generated at Tue Sep 22 19:59:28 2026 by rpki-client