$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa File: 0e7b6b94-9855-32f8-8b01-5e42800b5852.roa (raw, json) Hash identifier: xYXk5PoLhLtP8FnQlgi7EcYF3Ajj9Lo+z7FznTfqK3k= Subject key identifier: D9:41:E1:DA:F5:A4:EF:30:68:6D:97:F0:67:4E:77:27:E4:0F:51:3F Certificate issuer: /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0 Certificate serial: 010D0C9F4328584F4277FD85DAFEEBEA1021FF00 Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 398485 IP address blocks: 2602:fb2b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:fd:85:da:fe:eb:ea:10:21:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=31efe2a6-cbaf-43aa-a939-f8b59c2ff5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:66:ea:45:2a:e7:38:bb:72:4d:eb:90:2f: 65:59:a4:67:37:35:b9:2a:13:f5:67:c9:54:5f:8d: 1a:80:97:4c:f0:d9:14:05:d8:6c:01:b8:ae:2a:aa: d9:25:0e:40:c8:19:97:4a:42:59:66:47:81:71:59: b3:5c:ca:52:df:db:3d:3a:5f:03:27:7f:91:3e:a4: 76:c1:9d:8b:99:5b:ee:f5:d1:4f:f1:cf:c1:63:06: bb:e2:ee:68:0b:33:30:8a:00:79:ae:eb:46:09:1a: 85:82:26:c2:c8:f2:00:af:5f:d4:03:8e:5a:26:e2: ff:0c:87:80:07:f4:b8:2e:85:8b:7d:b8:8c:03:ab: 57:83:14:cd:98:a8:ff:9a:1f:3e:f3:50:bb:5d:dd: b1:1b:4d:86:fa:eb:cb:de:b7:99:51:6e:b9:92:ac: fc:c2:dc:cc:bf:63:4c:2b:51:65:f2:05:f1:9f:6e: ac:20:4e:60:b7:37:08:85:4a:c4:14:49:47:3a:bb: 49:0d:fb:8d:c9:83:f6:7d:a1:80:a5:9a:ca:55:45: f3:c0:25:58:74:8d:4c:d0:fe:ff:77:f1:d2:78:bf: d9:28:67:6a:40:d0:fc:a3:45:e5:ca:4d:11:42:bc: 38:62:da:98:f3:40:17:1b:e4:26:22:b1:57:a7:00: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:41:E1:DA:F5:A4:EF:30:68:6D:97:F0:67:4E:77:27:E4:0F:51:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/0e7b6b94-9855-32f8-8b01-5e42800b5852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl X509v3 Authority Key Identifier: keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb2b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:77:d1:b2:2d:54:bf:2f:c8:fa:99:6a:3a:83:55:ac:d9:07: 53:84:73:f7:a3:30:c3:a9:f7:72:70:9f:29:76:33:a3:45:2f: 48:99:72:99:61:81:e1:eb:ec:62:2a:73:68:88:f2:47:6f:15: b7:db:ff:32:9c:63:9f:6a:18:61:41:72:1e:63:6c:54:c1:1b: f2:51:fc:f0:0c:04:2f:73:8e:9e:d3:21:fa:ff:df:b2:18:84: dd:69:e0:5c:b1:63:91:41:0c:d4:98:a6:f0:1a:7b:35:99:18: c0:6a:1c:c3:23:4e:9c:6f:ae:66:33:32:75:a6:bb:b5:08:1b: 8c:b0:9f:06:3c:7c:e1:3d:88:a5:11:d8:05:26:cd:26:88:37: a5:ab:28:a7:02:15:ec:79:b3:a5:8b:f9:8b:94:08:33:af:30: 29:e2:8c:a5:9c:01:e0:b3:1b:ea:bf:9e:57:e6:90:8f:d4:d8: 71:41:18:77:35:1e:30:b8:80:a0:69:59:f5:c3:53:61:38:ed: 22:a1:fb:d7:42:c2:dc:3c:aa:59:5a:2e:bc:a1:b1:51:6e:3f: 55:c6:62:07:ca:fc:fa:33:2f:42:68:31:26:fc:dd:30:3e:f3: c6:cd:38:47:9b:e7:5b:a4:1e:b8:ef:f2:a2:fb:38:ec:94:b3: 67:3d:0c:4d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Cd/2F2v7r6hAh/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM4MDI3YjctZjg4NS00OGMwLWJkNzUtYmQxZmUxMjRl MWUwMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzFlZmUyYTYtY2JhZi00M2FhLWE5MzktZjhiNTljMmZmNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJm6kUq5zi7ck3rkC9lWaRnNzW5KhP1Z8lU X40agJdM8NkUBdhsAbiuKqrZJQ5AyBmXSkJZZkeBcVmzXMpS39s9Ol8DJ3+RPqR2 wZ2LmVvu9dFP8c/BYwa74u5oCzMwigB5rutGCRqFgibCyPIAr1/UA45aJuL/DIeA B/S4LoWLfbiMA6tXgxTNmKj/mh8+81C7Xd2xG02G+uvL3reZUW65kqz8wtzMv2NM K1Fl8gXxn26sIE5gtzcIhUrEFElHOrtJDfuNyYP2faGApZrKVUXzwCVYdI1M0P7/ d/HSeL/ZKGdqQND8o0Xlyk0RQrw4YtqY80AXG+QmIrFXpwC3jwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNlB4dr1pO8waG2X8GdOdyfkD1E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMzgw MjdiNy1mODg1LTQ4YzAtYmQ3NS1iZDFmZTEyNGUxZTAvMGU3YjZiOTQtOTg1NS0z MmY4LThiMDEtNWU0MjgwMGI1ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjM4MDI3YjctZjg4NS00OGMwLWJk NzUtYmQxZmUxMjRlMWUwLzIzODAyN2I3LWY4ODUtNDhjMC1iZDc1LWJkMWZlMTI0 ZTFlMC5jcmwwHwYDVR0jBBgwFoAUoaTt0y0yJVHtii91Zpo05tDScaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMzgwMjdiNy1mODg1LTQ4YzAtYmQ3NS1iZDFm ZTEyNGUxZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7KwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR3fRsi1Uvy/I+plqOoNVrNkHU4Rz96Mww6n3cnCfKXYzo0UvSJly mWGB4evsYipzaIjyR28Vt9v/Mpxjn2oYYUFyHmNsVMEb8lH88AwEL3OOntMh+v/f shiE3WngXLFjkUEM1Jim8Bp7NZkYwGocwyNOnG+uZjMydaa7tQgbjLCfBjx84T2I pRHYBSbNJog3pasopwIV7HmzpYv5i5QIM68wKeKMpZwB4LMb6r+eV+aQj9TYcUEY dzUeMLiAoGlZ9cNTYTjtIqH710LC3DyqWVouvKGxUW4/VcZiB8r8+jMvQmgxJvzd MD7zxs04R5vnW6QeuO/yovs47JSzZz0MTQ== -----END CERTIFICATE-----Generated at Mon Sep 28 22:20:26 2026 by rpki-client