$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa File: be920d72-c3a3-399e-9752-c3f9116ce1d7.roa (raw, json) Hash identifier: zI4iqQvcKW4wvFwNsCm/49I7yXrdgNZrZzgk0DDZm1k= Subject key identifier: 53:C3:E1:7E:F1:56:EF:23:A6:FC:18:9E:8D:13:4E:23:E0:79:DD:14 Certificate issuer: /CN=0e307b23-6715-4f4e-8e81-99854b623d2d Certificate serial: 010D0C9F4328584F1897AA1D5D8C8DD61AD95380 Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 397668 IP address blocks: 2602:f9dd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:aa:1d:5d:8c:8d:d6:1a:d9:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=7ea71b50-2043-41d6-8371-b4d6b4df52b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:e0:23:d7:25:57:01:4a:1d:3d:8a:13:37: 32:bd:ab:6a:61:ed:68:84:1f:7d:9d:07:88:8f:ec: 45:57:e3:a5:a2:50:6c:14:7b:d1:bb:83:04:a1:9b: c7:c9:61:48:a2:d8:04:47:2d:90:48:87:d9:40:e3: 8b:95:66:eb:85:ce:6a:32:6a:8f:61:47:e9:c9:1e: cb:2e:2c:0f:3b:7b:f1:5d:ec:f1:ff:db:26:48:ad: 14:6e:f6:d2:28:b8:ad:3f:c9:3e:e2:6e:e2:ac:a3: 9f:13:c1:68:01:b5:14:a2:9f:bc:f3:97:21:40:a7: b9:f3:b9:62:f3:e1:a6:f4:61:ea:ff:0b:17:54:ea: f7:97:bb:19:77:43:aa:fd:af:66:dd:38:a1:c0:61: 8c:52:5c:fd:d6:2c:0a:7c:d0:b0:40:3e:82:87:be: 96:00:76:3a:a2:7e:d2:88:15:84:d5:36:dc:94:17: d0:b4:6c:26:29:b1:0c:ab:d9:56:4a:4f:8a:f9:9f: 8c:5d:b2:fc:4a:ab:bb:51:d9:66:4d:8e:42:17:c6: 7c:9c:04:22:4c:ed:ec:56:4c:06:9d:9b:ed:33:bd: 14:6b:4f:a6:54:4a:f8:ec:6b:b9:a4:64:49:30:01: 39:ff:a6:e3:88:b1:35:ff:d1:48:b6:22:77:a7:c7: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:E1:7E:F1:56:EF:23:A6:FC:18:9E:8D:13:4E:23:E0:79:DD:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl X509v3 Authority Key Identifier: keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9dd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:93:52:9f:d6:7b:dd:41:d0:08:93:b6:01:97:c9:0f:4d:70: 95:db:84:8e:3d:87:3c:df:62:db:57:79:d3:6a:5a:3f:cb:a9: 69:67:ce:2d:da:c6:70:ee:5d:51:f6:ce:60:27:99:93:92:d6: 25:e1:12:72:07:8c:48:71:ff:e6:bd:08:47:90:d0:2c:68:ae: 5f:5e:d0:de:9f:22:3d:9f:0b:52:61:0a:92:3e:d1:f6:23:4f: 8e:aa:38:13:30:3f:54:9a:22:bf:0d:96:a8:01:31:83:16:a5: 6d:32:5f:21:2d:68:81:a3:f9:cf:62:7c:49:cc:64:22:e5:01: ff:c7:8f:9d:19:b4:91:ba:3e:02:04:04:eb:4a:27:af:8d:54: f6:6d:6a:fa:85:c7:90:41:2c:ba:74:5f:a5:31:f1:5b:35:ac: 2b:e5:b5:b7:64:6d:de:18:2f:5d:30:e1:4e:c4:81:9d:57:f4: 09:6e:31:ce:bf:43:c1:9e:c3:64:1a:79:92:c6:da:78:f5:58: 1f:a6:04:8e:17:70:6a:fe:d0:88:c5:aa:92:f1:41:19:70:80: 39:9d:46:76:52:56:d7:d0:db:75:5e:8f:6e:cd:5a:be:cf:03: f1:66:bc:47:14:80:36:f9:98:9b:4d:34:5f:ed:3d:7d:7b:91: fd:42:00:e7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Yl6odXYyN1hrZU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUzMDdiMjMtNjcxNS00ZjRlLThlODEtOTk4NTRiNjIz ZDJkMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk N2VhNzFiNTAtMjA0My00MWQ2LTgzNzEtYjRkNmI0ZGY1MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowbgI9clVwFKHT2KEzcyvatqYe1ohB99nQeI j+xFV+OlolBsFHvRu4MEoZvHyWFIotgERy2QSIfZQOOLlWbrhc5qMmqPYUfpyR7L LiwPO3vxXezx/9smSK0UbvbSKLitP8k+4m7irKOfE8FoAbUUop+885chQKe587li 8+Gm9GHq/wsXVOr3l7sZd0Oq/a9m3TihwGGMUlz91iwKfNCwQD6Ch76WAHY6on7S iBWE1TbclBfQtGwmKbEMq9lWSk+K+Z+MXbL8Squ7UdlmTY5CF8Z8nAQiTO3sVkwG nZvtM70Ua0+mVEr47Gu5pGRJMAE5/6bjiLE1/9FItiJ3p8dFcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFPD4X7xVu8jpvwYno0TTiPged0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMw N2IyMy02NzE1LTRmNGUtOGU4MS05OTg1NGI2MjNkMmQvYmU5MjBkNzItYzNhMy0z OTllLTk3NTItYzNmOTExNmNlMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUzMDdiMjMtNjcxNS00ZjRlLThl ODEtOTk4NTRiNjIzZDJkLzBlMzA3YjIzLTY3MTUtNGY0ZS04ZTgxLTk5ODU0YjYy M2QyZC5jcmwwHwYDVR0jBBgwFoAUWDT9SHGgd1gTWpDffWNpbGBkXc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMwN2IyMy02NzE1LTRmNGUtOGU4MS05OTg1 NGI2MjNkMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALpNSn9Z73UHQCJO2AZfJD01wlduEjj2HPN9i21d502paP8upaWfO LdrGcO5dUfbOYCeZk5LWJeEScgeMSHH/5r0IR5DQLGiuX17Q3p8iPZ8LUmEKkj7R 9iNPjqo4EzA/VJoivw2WqAExgxalbTJfIS1ogaP5z2J8ScxkIuUB/8ePnRm0kbo+ AgQE60onr41U9m1q+oXHkEEsunRfpTHxWzWsK+W1t2Rt3hgvXTDhTsSBnVf0CW4x zr9DwZ7DZBp5ksbaePVYH6YEjhdwav7QiMWqkvFBGXCAOZ1GdlJW19DbdV6Pbs1a vs8D8Wa8RxSANvmYm000X+09fXuR/UIA5w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:52:44 2026 by rpki-client