$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa File: 4a620ec8-b400-32c5-a29e-91f309601139.roa (raw, json) Hash identifier: D/+aYHd7okGMCWu1Qa6dVFGAxVfXg7l7HXecYV94yig= Subject key identifier: 82:F2:AB:F8:E3:E3:16:EE:1B:BB:A0:04:87:EF:23:A1:5A:75:21:C4 Certificate issuer: /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Certificate serial: 010D0C9F4328584F0D6CD8E6FF9857B26495F480 Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396908 IP address blocks: 2602:f956:c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d8:e6:ff:98:57:b2:64:95:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=c1325428-21f5-4833-ace8-ee4edbd2ae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:b0:cc:37:23:7d:1d:4e:18:d6:00:91:c3: 87:9a:95:73:4a:8b:cc:7a:47:97:74:a1:3b:18:61: 9e:91:84:7f:8c:2e:38:9c:f4:09:14:c0:15:24:59: c2:6e:da:29:59:4d:21:40:db:87:46:99:92:89:f1: 71:7f:e6:cf:83:6b:d3:d1:a2:83:4b:1f:9c:8e:7e: f3:52:4d:d7:41:5e:3a:d4:78:2e:ae:77:1d:79:2e: 57:86:a5:c1:c9:1b:ed:a9:54:24:72:83:f9:05:0a: 35:ff:87:2a:c7:e4:64:81:88:9c:47:3b:c8:b7:db: c9:5e:f5:af:37:c1:00:50:ab:d0:9b:f5:fd:78:32: 21:8d:7c:d5:0e:26:00:36:cf:43:40:9d:6d:8d:6e: c4:76:f6:0e:46:dc:9d:fe:49:a9:9c:b1:4a:5c:fc: ec:6f:fd:13:ff:39:93:e0:fe:5c:b0:75:a8:28:0e: a8:96:c3:03:85:18:2c:7e:0b:83:20:4b:c7:25:eb: fd:fc:4c:ad:c7:3e:4b:18:c9:0f:3c:58:cb:76:38: 44:ec:86:69:bd:86:c7:fc:f3:8d:d8:18:52:1a:5d: 58:80:51:27:2e:3e:b1:70:8d:3a:43:bd:98:a2:0f: 1d:cd:b4:96:9f:7c:cc:cf:27:f5:ab:46:a2:a5:88: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:AB:F8:E3:E3:16:EE:1B:BB:A0:04:87:EF:23:A1:5A:75:21:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/4a620ec8-b400-32c5-a29e-91f309601139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl X509v3 Authority Key Identifier: keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer sbgp-ipAddrBlock: critical IPv6: 2602:f956:c0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ab:ef:3d:03:5c:6d:f5:be:f2:26:ee:18:e6:40:4c:17:12: 8c:a9:97:6b:98:a4:0f:58:ab:e2:91:ee:0a:c0:75:41:d7:da: 27:f6:6a:53:2c:e0:8d:28:66:0f:d7:91:07:04:8d:4b:63:9c: ee:22:35:4d:9c:d9:fe:7d:c6:ba:17:aa:5b:6a:3e:48:9e:bd: 73:26:11:6d:ba:20:93:02:80:89:2b:39:55:73:e0:e8:59:85: 00:31:e6:3d:9f:7f:e1:b5:b6:44:e7:81:3e:fd:5c:87:2d:0d: f1:29:09:82:86:49:46:e0:04:3f:f3:77:59:0f:16:43:74:e4: 97:1a:fb:c1:87:06:e5:22:bf:c8:c3:72:e3:17:f4:16:8a:db: a0:a6:33:f0:df:57:4d:59:3c:48:6e:6d:03:aa:76:0a:af:b5: 4f:64:73:06:b8:1b:84:27:99:59:88:94:c6:0c:07:a9:9c:2b: c4:32:61:b9:5e:ba:b9:3b:11:7a:97:69:e5:41:92:cd:89:bb: 28:86:22:be:83:57:d9:bf:40:65:fb:cf:87:78:d1:a1:3a:d1: 5c:67:b7:5c:cd:76:90:a3:3b:7b:46:24:af:2c:7b:72:6c:c6: b6:97:15:16:74:99:22:b1:a3:46:0c:e3:70:28:8f:94:22:29: b2:6b:43:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbNjm/5hXsmSV9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0 MjYzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YzEzMjU0MjgtMjFmNS00ODMzLWFjZTgtZWU0ZWRiZDJhZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibiwzDcjfR1OGNYAkcOHmpVzSovMekeXdKE7 GGGekYR/jC44nPQJFMAVJFnCbtopWU0hQNuHRpmSifFxf+bPg2vT0aKDSx+cjn7z Uk3XQV461HgurncdeS5XhqXByRvtqVQkcoP5BQo1/4cqx+RkgYicRzvIt9vJXvWv N8EAUKvQm/X9eDIhjXzVDiYANs9DQJ1tjW7EdvYORtyd/kmpnLFKXPzsb/0T/zmT 4P5csHWoKA6olsMDhRgsfguDIEvHJev9/Eytxz5LGMkPPFjLdjhE7IZpvYbH/PON 2BhSGl1YgFEnLj6xcI06Q72Yog8dzbSWn3zMzyf1q0aipYifvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILyq/jj4xbuG7ugBIfvI6FadSHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvNGE2MjBlYzgtYjQwMC0z MmM1LWEyOWUtOTFmMzA5NjAxMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2 NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1 NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgL5VgDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIKr7z0DXG31vvIm7hjmQEwXEoypl2uYpA9Yq+KR7grAdUHX2if2 alMs4I0oZg/XkQcEjUtjnO4iNU2c2f59xroXqltqPkievXMmEW26IJMCgIkrOVVz 4OhZhQAx5j2ff+G1tkTngT79XIctDfEpCYKGSUbgBD/zd1kPFkN05Jca+8GHBuUi v8jDcuMX9BaK26CmM/DfV01ZPEhubQOqdgqvtU9kcwa4G4QnmVmIlMYMB6mcK8Qy Ybleurk7EXqXaeVBks2JuyiGIr6DV9m/QGX7z4d40aE60Vxnt1zNdpCjO3tGJK8s e3JsxraXFRZ0mSKxo0YM43Aoj5QiKbJrQz8= -----END CERTIFICATE-----Generated at Sat Oct 3 10:51:38 2026 by rpki-client