$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa File: 35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa (raw, json) Hash identifier: hxp47vpuk1XmYiKQi9tOjgSdA0a75irdleABxX21RT0= Subject key identifier: B4:C7:D9:F7:89:04:FE:EB:A3:70:F4:FD:3A:44:02:07:8A:C8:4D:9E Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584F49876C1E58A8989DA55D5600 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63023 IP address blocks: 2602:fec3:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:6c:1e:58:a8:98:9d:a5:5d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52ef0bf2-7d5a-4f44-892a-5cc75571adb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:12:7c:a4:d2:52:a2:18:83:f7:9c:5b:88: 98:f1:d9:1f:37:7d:ec:35:62:d7:c5:19:c5:ae:c9: 6b:76:6d:3b:3c:11:53:f4:b7:d1:b6:02:fb:4e:b0: 1c:d7:e8:a3:74:84:3f:2a:32:d8:f0:38:27:a4:5c: 1b:7f:7a:87:09:c6:52:ef:f0:3b:a1:5f:18:48:aa: 32:5c:ec:11:43:67:95:55:55:3b:81:06:20:01:9a: e2:77:b8:90:8c:30:47:6a:07:61:cc:99:ae:c2:bf: 4e:fb:b1:88:1b:40:d1:c2:84:eb:e3:f1:20:8f:85: 24:a3:84:47:a7:61:9b:8c:79:27:6a:ba:75:13:ed: 74:e1:75:7c:7a:be:46:19:8c:bf:fd:6d:ee:a7:33: 35:2a:1d:b5:51:fa:a9:55:a6:be:23:27:1c:e0:76: 89:7b:25:9a:ec:fc:d2:b6:77:b0:d5:96:31:e7:e5: d5:dd:d9:5f:ba:97:b7:98:b2:ed:bc:0a:7d:22:a8: c9:0a:22:a2:43:23:51:5e:13:e1:09:5c:ea:fd:4b: ea:d3:9c:e9:a0:42:03:d5:35:65:3a:44:28:39:8a: d5:42:d3:13:5c:59:d7:11:b1:ab:1a:7f:97:2f:05: 1b:1e:3c:e8:b3:8f:9f:5e:34:12:ec:cb:d0:9b:1d: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C7:D9:F7:89:04:FE:EB:A3:70:F4:FD:3A:44:02:07:8A:C8:4D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec3:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1c:6f:8d:5f:3d:b5:85:49:ba:e5:8a:09:ad:39:0b:20:f4: e5:b9:b1:c0:5f:fb:a7:03:00:4e:ed:28:89:f2:f5:96:b2:48: aa:82:63:0c:56:dc:29:75:44:b5:09:5e:0b:b7:8c:55:d6:cb: f0:74:d8:ba:5f:ec:4e:6c:fb:81:71:1a:36:d0:6f:70:b8:0d: d6:51:55:ff:50:18:e3:45:9a:ff:d8:ba:d8:1e:f3:c8:51:c3: fb:cd:69:4d:2f:23:52:6e:a7:14:57:ea:43:c3:79:b2:cd:0d: 7a:10:9d:53:7d:9a:9d:cc:60:de:b5:f2:f8:55:da:63:fe:b0: b7:a2:57:61:b7:00:ca:47:c6:70:09:37:3c:2a:71:a1:d9:bd: 8b:67:6e:46:49:5d:fc:87:67:a8:49:38:13:e2:54:11:62:70: 9b:01:b0:cf:a3:bd:04:c0:bc:e6:6e:ac:27:a3:4f:65:00:c2: 29:78:49:49:c6:78:73:a2:cc:db:43:99:c9:4f:17:45:22:d0: b9:d2:c9:3c:7d:09:a1:64:4f:d1:65:9b:fe:07:69:d7:90:35: 0f:64:c9:26:df:ed:e6:7a:65:22:fa:15:67:d6:fb:c1:5f:9a: b8:fb:39:2c:72:be:a3:68:97:43:1d:5c:2c:ab:47:e2:58:57: 47:19:53:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh2weWKiYnaVdVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJlZjBiZjItN2Q1YS00ZjQ0LTg5MmEtNWNjNzU1NzFhZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7MSfKTSUqIYg/ecW4iY8dkfN33sNWLXxRnF rslrdm07PBFT9LfRtgL7TrAc1+ijdIQ/KjLY8DgnpFwbf3qHCcZS7/A7oV8YSKoy XOwRQ2eVVVU7gQYgAZrid7iQjDBHagdhzJmuwr9O+7GIG0DRwoTr4/Egj4Uko4RH p2GbjHknarp1E+104XV8er5GGYy//W3upzM1Kh21UfqpVaa+Iycc4HaJeyWa7PzS tnew1ZYx5+XV3dlfupe3mLLtvAp9IqjJCiKiQyNRXhPhCVzq/Uvq05zpoEID1TVl OkQoOYrVQtMTXFnXEbGrGn+XLwUbHjzos4+fXjQS7MvQmx2AtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTH2feJBP7ro3D0/TpEAgeKyE2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMzVhYTlhN2MtZWY0NC0z YjllLWJjYzktMTVjNmYxZWI5YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+ww8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJccb41fPbWFSbrligmtOQsg9OW5scBf+6cDAE7tKIny9ZaySKqC YwxW3Cl1RLUJXgu3jFXWy/B02Lpf7E5s+4FxGjbQb3C4DdZRVf9QGONFmv/Yutge 88hRw/vNaU0vI1JupxRX6kPDebLNDXoQnVN9mp3MYN618vhV2mP+sLeiV2G3AMpH xnAJNzwqcaHZvYtnbkZJXfyHZ6hJOBPiVBFicJsBsM+jvQTAvOZurCejT2UAwil4 SUnGeHOizNtDmclPF0Ui0LnSyTx9CaFkT9Flm/4HadeQNQ9kySbf7eZ6ZSL6FWfW +8Ffmrj7OSxyvqNol0MdXCyrR+JYV0cZU1k= -----END CERTIFICATE-----Generated at Sun Sep 27 00:09:34 2026 by rpki-client