$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/82dede3b-48e0-3ffc-9586-15506b11b223.roa File: 82dede3b-48e0-3ffc-9586-15506b11b223.roa (raw, json) Hash identifier: t6w87EQCh2V83UVqCHq+VISbg3PP33Ejgpa+kSUngzM= Subject key identifier: C2:98:F8:DA:0F:90:5C:9E:35:A1:2D:87:D5:65:25:B8:74:32:AD:FD Certificate issuer: /CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Certificate serial: 010D0C9F4328584F3FAD21D6EE034844DFBEDA00 Authority key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/82dede3b-48e0-3ffc-9586-15506b11b223.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 402695 IP address blocks: 2602:f34c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:21:d6:ee:03:48:44:df:be:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=58a8f9f0-eab7-4171-8e3c-677faf512a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:5e:06:72:44:b4:1b:58:3f:2f:d1:2a:52: 20:21:c2:87:40:5c:3c:4a:a8:77:aa:13:ce:3e:e2: 25:6a:f0:71:07:d2:17:d1:31:0f:a3:52:41:5d:ae: dc:08:62:84:f5:8f:b6:48:32:b0:5e:3b:73:75:7a: e8:3c:ce:d6:9f:7b:f2:1d:83:98:d1:64:23:08:ac: 38:e3:43:99:09:9c:b2:c4:ea:63:34:63:c4:48:6a: 8c:82:9b:d5:ea:5d:89:3d:9a:f5:3e:16:af:42:bb: b8:24:4d:d4:71:55:c0:4b:93:ac:36:67:30:5c:ef: 1c:ab:f0:12:07:46:b8:6d:90:64:15:07:76:94:27: 87:5b:10:66:4b:33:ab:b8:ff:3c:89:8c:c6:79:d6: 4c:76:79:5e:89:37:45:7e:e6:c6:f9:73:16:60:30: 6f:b8:b6:ba:43:5f:4a:c0:d6:3e:9f:c9:d8:83:dc: 4d:a3:54:10:8d:f0:1f:81:5a:dd:32:7d:0b:4d:d4: 45:ba:41:e7:46:17:96:52:ef:02:5e:17:ee:69:45: fb:c1:11:0f:49:95:ae:ae:25:a8:9c:20:ed:a9:75: bf:4f:9f:cc:db:39:65:44:bf:25:ce:02:85:4a:8d: c5:32:47:f5:5c:33:fe:14:95:d1:4d:d4:0a:ee:aa: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:98:F8:DA:0F:90:5C:9E:35:A1:2D:87:D5:65:25:B8:74:32:AD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/82dede3b-48e0-3ffc-9586-15506b11b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl X509v3 Authority Key Identifier: keyid:D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer sbgp-ipAddrBlock: critical IPv6: 2602:f34c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d4:9a:6d:1f:40:4a:59:f0:0d:b7:f0:c9:e5:a8:08:f0:83: 55:16:e3:cf:9e:b9:8a:9e:85:d8:e3:64:fa:db:bf:36:4a:b2: 01:af:0c:04:df:d5:1a:ee:fc:8b:bc:a0:20:7a:63:d9:71:89: f8:ad:e2:8c:83:e7:6b:89:00:b8:75:3f:4e:d2:d9:97:cb:de: ba:48:c2:f4:1d:03:1f:fb:73:d0:f9:49:24:45:cd:54:f4:a1: 45:39:9f:eb:56:07:0e:88:30:5b:58:df:a3:f3:e8:71:af:36: ea:96:39:8b:e8:d9:ba:00:c3:a4:ae:35:64:ce:94:14:eb:dc: 13:46:3e:5c:8b:37:09:9b:dc:48:3c:b7:0d:b7:e1:31:ef:c5: a5:b2:34:9a:93:e9:1e:ad:38:f5:41:93:26:1c:df:9d:81:53: 06:17:29:eb:b5:17:1a:5e:0a:2f:0e:fc:62:c2:7d:da:89:d8: 19:c2:20:7a:22:6f:0b:27:65:ce:2c:72:75:6b:c1:2b:0c:31: 0e:4e:83:ed:bb:4d:b1:fe:c2:4a:68:fc:c8:ea:49:52:ac:1c: 71:19:4f:cc:07:cc:4e:2c:8d:68:e3:4b:83:71:0d:97:ea:aa: 84:95:c8:bc:9e:7f:42:f5:88:37:02:75:0d:b6:05:ee:47:80: c4:92:be:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8/rSHW7gNIRN++2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkNDQyOWMtNTA4MC00ZGE5LTljZjYtYzVjZGNjMWIy MTQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NThhOGY5ZjAtZWFiNy00MTcxLThlM2MtNjc3ZmFmNTEyYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZeBnJEtBtYPy/RKlIgIcKHQFw8Sqh3qhPO PuIlavBxB9IX0TEPo1JBXa7cCGKE9Y+2SDKwXjtzdXroPM7Wn3vyHYOY0WQjCKw4 40OZCZyyxOpjNGPESGqMgpvV6l2JPZr1PhavQru4JE3UcVXAS5OsNmcwXO8cq/AS B0a4bZBkFQd2lCeHWxBmSzOruP88iYzGedZMdnleiTdFfubG+XMWYDBvuLa6Q19K wNY+n8nYg9xNo1QQjfAfgVrdMn0LTdRFukHnRheWUu8CXhfuaUX7wREPSZWuriWo nCDtqXW/T5/M2zllRL8lzgKFSo3FMkf1XDP+FJXRTdQK7qq4AQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMKY+NoPkFyeNaEth9VlJbh0Mq39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0 NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2MxYjIxNDMvODJkZWRlM2ItNDhlMC0z ZmZjLTk1ODYtMTU1MDZiMTFiMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRkNDQyOWMtNTA4MC00ZGE5LTlj ZjYtYzVjZGNjMWIyMTQzLzVkZDQ0MjljLTUwODAtNGRhOS05Y2Y2LWM1Y2RjYzFi MjE0My5jcmwwHwYDVR0jBBgwFoAU2WTDta5xcPVr1AduylGeui+LpUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNk Y2MxYjIxNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgLzTAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApNSabR9ASlnwDbfwyeWoCPCDVRbjz565ip6F2ONk+tu/NkqyAa8M BN/VGu78i7ygIHpj2XGJ+K3ijIPna4kAuHU/TtLZl8veukjC9B0DH/tz0PlJJEXN VPShRTmf61YHDogwW1jfo/Poca826pY5i+jZugDDpK41ZM6UFOvcE0Y+XIs3CZvc SDy3DbfhMe/FpbI0mpPpHq049UGTJhzfnYFTBhcp67UXGl4KLw78YsJ92onYGcIg eiJvCydlzixydWvBKwwxDk6D7btNsf7CSmj8yOpJUqwccRlPzAfMTiyNaONLg3EN l+qqhJXIvJ5/QvWINwJ1DbYF7keAxJK+AA== -----END CERTIFICATE-----Generated at Sun Oct 4 18:03:21 2026 by rpki-client