$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa File: 4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa (raw, json) Hash identifier: Z28QUB4LpTonNd+gixbAOXvwM38Hm5jbKQG37VHbC48= Subject key identifier: 64:4A:4C:F5:88:85:F7:3E:76:20:75:F3:43:D8:EB:1E:A1:0D:1D:96 Certificate issuer: /CN=ec3472d2-073b-458a-8e0f-7ee77169574a Certificate serial: 010D0C9F4328584F49756A689FC052DCE86A6680 Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 2602:f957:a00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:6a:68:9f:c0:52:dc:e8:6a:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dbe95b50-426e-4d5a-a8b6-345ec225270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:a9:87:50:67:3c:87:69:31:fa:ae:e1:69: 38:cf:03:58:83:0a:d7:2d:59:d3:e6:38:b9:83:ad: e7:9a:93:d9:e8:26:bd:2c:6b:36:c6:a4:b6:22:a4: 63:0d:d4:66:e1:c2:1d:3c:cf:65:e3:24:22:db:ef: 72:76:82:a7:37:25:1f:81:43:c7:47:da:29:7b:13: f2:71:7e:29:ae:47:78:d1:7e:63:86:66:e7:a1:2b: b6:ce:af:12:a9:16:32:82:b7:d3:83:94:10:1c:99: d3:74:26:88:45:78:5e:7f:2d:de:e9:a9:14:65:25: a0:c5:27:1a:26:bd:17:5a:fe:d0:89:dc:69:a4:c1: f6:19:12:aa:fb:d0:79:ad:9e:1a:5e:02:12:c3:eb: cd:32:b4:dd:bc:1f:26:f5:21:15:6f:de:13:67:44: b4:75:2f:df:df:d2:3a:14:54:bc:0f:e5:27:2f:81: 09:9e:d5:37:81:4f:9e:69:69:25:e0:ca:f6:4e:89: 01:f2:29:ef:ff:42:26:3a:0c:e7:f4:a8:cc:9b:d7: 14:47:3c:bb:ed:b8:f4:58:d4:7d:8f:b6:a9:a8:6b: f4:71:0e:c2:84:90:16:d0:eb:5b:28:21:69:58:b8: 16:43:d5:b3:d0:a9:1c:c0:99:11:0e:97:9f:48:68: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:4C:F5:88:85:F7:3E:76:20:75:F3:43:D8:EB:1E:A1:0D:1D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl X509v3 Authority Key Identifier: keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f957:a00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:23:75:1f:99:e0:57:52:63:9d:ae:36:03:74:b2:27:06:a5: a6:1c:67:6c:4f:98:99:a5:28:a2:3f:d6:eb:73:2b:1c:1c:1d: fd:07:68:aa:5e:62:26:b3:75:00:a8:4e:01:09:96:08:10:48: cd:c9:81:51:9e:92:a5:0b:f3:b3:71:32:cd:4d:d3:7d:ae:ba: 58:4f:91:45:30:05:25:f2:e6:a4:57:84:15:6d:3e:62:25:53: f4:46:30:65:54:8b:89:e3:9c:30:39:25:44:a7:44:f7:7d:c1: b2:0c:97:9c:44:88:bf:b9:71:14:aa:ea:4c:86:83:d9:81:06: 89:e6:22:0b:9d:c2:23:0d:9c:b3:41:dd:da:90:06:6e:db:83: 31:83:05:9c:b9:c6:d7:14:03:74:e4:08:62:06:10:30:ce:9d: 84:e0:6b:60:cb:6b:88:72:00:57:6d:97:e1:f5:e4:2d:3d:94: fc:38:6e:2e:7e:fa:1f:b2:8c:89:69:a9:f2:d2:68:7f:91:67: 60:e0:e0:4a:9a:e9:4f:d0:58:ec:6a:5a:ad:70:ad:18:04:16: f9:88:93:e0:78:24:bc:a5:ee:16:3e:47:fe:97:f7:5f:1e:b6: 2b:c5:ab:26:bd:b0:ec:b7:09:16:26:20:3e:5d:62:24:59:52: c7:26:83:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdWpon8BS3OhqZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNDcyZDItMDczYi00NThhLThlMGYtN2VlNzcxNjk1 NzRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGJlOTViNTAtNDI2ZS00ZDVhLWE4YjYtMzQ1ZWMyMjUyNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XOph1BnPIdpMfqu4Wk4zwNYgwrXLVnT5ji5 g63nmpPZ6Ca9LGs2xqS2IqRjDdRm4cIdPM9l4yQi2+9ydoKnNyUfgUPHR9opexPy cX4prkd40X5jhmbnoSu2zq8SqRYygrfTg5QQHJnTdCaIRXhefy3e6akUZSWgxSca Jr0XWv7QidxppMH2GRKq+9B5rZ4aXgISw+vNMrTdvB8m9SEVb94TZ0S0dS/f39I6 FFS8D+UnL4EJntU3gU+eaWkl4Mr2TokB8inv/0ImOgzn9KjMm9cURzy77bj0WNR9 j7apqGv0cQ7ChJAW0OtbKCFpWLgWQ9Wz0KkcwJkRDpefSGh76wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRKTPWIhfc+diB180PY6x6hDR2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzM0 NzJkMi0wNzNiLTQ1OGEtOGUwZi03ZWU3NzE2OTU3NGEvNGYxYmUyMWItYzRlYy0z MjM0LTg2YzQtMzA0NDcxMGViMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMzNDcyZDItMDczYi00NThhLThl MGYtN2VlNzcxNjk1NzRhL2VjMzQ3MmQyLTA3M2ItNDU4YS04ZTBmLTdlZTc3MTY5 NTc0YS5jcmwwHwYDVR0jBBgwFoAUcnBEvJjX7rQytF4KhPGErlZRqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzM0NzJkMi0wNzNiLTQ1OGEtOGUwZi03ZWU3 NzE2OTU3NGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5VwoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcjdR+Z4FdSY52uNgN0sicGpaYcZ2xPmJmlKKI/1utzKxwcHf0H aKpeYiazdQCoTgEJlggQSM3JgVGekqUL87NxMs1N032uulhPkUUwBSXy5qRXhBVt PmIlU/RGMGVUi4njnDA5JUSnRPd9wbIMl5xEiL+5cRSq6kyGg9mBBonmIgudwiMN nLNB3dqQBm7bgzGDBZy5xtcUA3TkCGIGEDDOnYTga2DLa4hyAFdtl+H15C09lPw4 bi5++h+yjIlpqfLSaH+RZ2Dg4Eqa6U/QWOxqWq1wrRgEFvmIk+B4JLyl7hY+R/6X 918etivFqya9sOy3CRYmID5dYiRZUscmgw8= -----END CERTIFICATE-----Generated at Sat Sep 26 07:32:39 2026 by rpki-client