$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa File: a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa (raw, json) Hash identifier: cJdDWll1ayw3nMUJ5z6Bpn8qFYe7nl6Uy6ancFfzelY= Subject key identifier: 65:59:24:63:4F:3F:D1:12:C9:11:45:C5:91:E0:74:1A:A6:A6:96:82 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584F497539DA39FA9AD7050B7F80 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 2602:810:d004::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:39:da:39:fa:9a:d7:05:0b:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fde09b48-79c4-4c1b-af25-2e9fcf9eee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:9c:2c:86:32:e5:ec:11:37:02:4c:58:e3: 18:0a:28:3b:49:be:38:45:41:e7:f4:08:f4:49:09: ba:86:3c:2d:2b:87:ed:d7:63:63:3f:dc:b4:5a:ae: 98:e7:74:0e:f5:4e:4c:5f:5e:7d:ca:55:07:18:17: 2b:30:ab:d8:13:8e:3f:b2:e6:15:09:ec:1c:16:b0: f9:1f:1d:a9:e2:ba:4c:bf:53:95:c4:69:08:c7:90: 73:24:84:95:3e:22:da:30:b4:6b:9e:43:a7:e3:fc: ea:b3:09:6c:1b:b2:75:b0:29:81:00:a2:b6:5b:d7: db:41:31:9d:3d:7f:c5:23:4e:ea:a0:bc:8d:83:8b: ab:fc:eb:9d:05:bf:58:c0:ba:db:0f:46:d6:ab:f0: 21:c0:31:95:0c:c6:16:61:5d:f4:70:85:88:30:44: 74:e7:fe:26:f7:ce:08:76:7a:5f:77:94:68:36:1b: 46:67:9d:38:55:f5:db:c5:4f:fc:92:c2:9e:0f:83: 19:1c:69:a8:fd:43:c3:ba:9c:a2:d0:da:73:cf:f3: 72:02:6e:03:72:99:ce:56:84:b3:cf:0e:33:11:f1: 44:e6:40:92:ba:4c:9b:47:a6:a6:14:3d:8a:d7:98: 3b:12:9b:a8:57:b0:0b:f2:0e:4b:d9:fb:56:16:fe: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:59:24:63:4F:3F:D1:12:C9:11:45:C5:91:E0:74:1A:A6:A6:96:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:d004::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:ea:44:ac:d4:cb:51:25:2e:63:60:57:25:3a:f7:3c:c7:13: 90:0b:c2:c6:59:09:eb:27:40:46:eb:2b:50:de:c7:9c:0a:59: c9:e2:84:3b:5d:2c:02:70:63:0b:bf:06:f8:8d:bd:a1:55:0f: 89:4d:3d:a9:d8:ee:b5:f8:7e:ff:da:f6:7a:e6:4e:b5:c1:67: 62:30:9d:f6:2d:00:52:4e:60:a4:d2:9f:51:aa:3e:bf:a4:fb: b7:f2:74:19:f9:1c:47:da:7a:65:0e:23:db:06:15:84:82:68: db:e7:21:c2:66:09:e7:9a:de:61:a7:d6:6d:29:45:65:6e:92: 1e:f5:0f:f6:a9:f1:06:f2:98:fd:b6:df:f3:df:04:ed:85:79: 06:e8:80:9b:88:6e:3d:bc:5b:ff:eb:36:52:8b:dd:b0:a1:c6: 29:6a:de:00:bf:e9:85:65:18:08:7c:0d:6f:84:83:61:02:98: 45:fe:f7:28:60:b9:75:d4:c6:6f:ae:83:49:67:f4:85:9a:5c: 11:c5:2d:54:71:c4:1f:78:e6:33:68:4a:42:5c:f7:0a:c1:8a: 34:84:49:9e:28:cc:54:f8:84:f7:5f:c8:cd:5b:39:27:97:c1: 0f:f5:ab:e0:ec:63:82:5e:2c:86:df:34:87:89:fa:9a:ae:fd: ea:2c:e7:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdTnaOfqa1wULf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmRlMDliNDgtNzljNC00YzFiLWFmMjUtMmU5ZmNmOWVlZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteicLIYy5ewRNwJMWOMYCig7Sb44RUHn9Aj0 SQm6hjwtK4ft12NjP9y0Wq6Y53QO9U5MX159ylUHGBcrMKvYE44/suYVCewcFrD5 Hx2p4rpMv1OVxGkIx5BzJISVPiLaMLRrnkOn4/zqswlsG7J1sCmBAKK2W9fbQTGd PX/FI07qoLyNg4ur/OudBb9YwLrbD0bWq/AhwDGVDMYWYV30cIWIMER05/4m984I dnpfd5RoNhtGZ504VfXbxU/8ksKeD4MZHGmo/UPDupyi0Npzz/NyAm4DcpnOVoSz zw4zEfFE5kCSukybR6amFD2K15g7EpuoV7AL8g5L2ftWFv51kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVZJGNPP9ESyRFFxZHgdBqmppaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvYTU2ZGExZDktNDQ3My0z MGM1LWE5YjktOTI0ZmNmNzRjNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMPqRKzUy1ElLmNgVyU69zzHE5ALwsZZCesnQEbrK1Dex5wKWcni hDtdLAJwYwu/BviNvaFVD4lNPanY7rX4fv/a9nrmTrXBZ2IwnfYtAFJOYKTSn1Gq Pr+k+7fydBn5HEfaemUOI9sGFYSCaNvnIcJmCeea3mGn1m0pRWVukh71D/ap8Qby mP223/PfBO2FeQbogJuIbj28W//rNlKL3bChxilq3gC/6YVlGAh8DW+Eg2ECmEX+ 9yhguXXUxm+ug0ln9IWaXBHFLVRxxB945jNoSkJc9wrBijSESZ4ozFT4hPdfyM1b OSeXwQ/1q+DsY4JeLIbfNIeJ+pqu/eos53o= -----END CERTIFICATE-----Generated at Tue Sep 29 16:35:48 2026 by rpki-client