$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa File: 9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa (raw, json) Hash identifier: 6Q/3JIfcut8ia62nUGDcC4JnSCyQYdgw9RBVlVFvHeE= Subject key identifier: F9:34:60:DE:6D:94:C6:53:2D:13:DB:37:C5:3C:1F:BA:1E:8C:D3:A9 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584F497545C9855A35E9556CC200 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62563 IP address blocks: 2602:fec3:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:45:c9:85:5a:35:e9:55:6c:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0d49907-c92b-400c-a1d6-273d5908d76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:aa:5a:a1:38:b8:e1:67:93:ea:43:6c:a6: 14:f0:2c:27:76:13:66:18:9b:d5:e8:43:e2:e5:74: b1:d1:b2:06:1a:77:c4:41:85:d1:fe:bd:32:81:a1: c9:e6:ab:9e:54:45:0e:19:0c:d7:2c:eb:fc:9d:24: 27:f8:1e:a8:06:75:cc:cf:50:26:62:53:03:53:de: cd:0e:f2:7e:b2:3d:13:2e:5f:bc:7d:5b:fb:2e:56: aa:ad:52:36:a5:f6:16:f2:70:cb:51:31:f3:cc:56: 5d:c0:ce:8c:8c:66:bf:f6:e0:3f:44:32:35:00:1c: 3d:9d:47:81:08:03:8a:b2:63:c6:6d:f2:04:39:da: 97:c5:e0:df:fc:0a:9e:c9:76:ab:4f:7c:df:4b:f8: 0b:30:df:a6:87:94:20:af:9b:8a:c9:ee:85:2c:ff: 5b:d5:fc:39:1d:7a:0d:29:5d:2a:87:dd:83:d4:6f: fe:82:b8:ea:da:60:bf:0f:77:b0:65:86:f1:68:27: 32:3b:da:5c:16:f2:3b:72:f2:c5:59:fd:cd:06:35: 11:c2:dc:ea:34:f9:2c:34:1c:73:ff:48:d3:a7:00: bd:b6:8a:3c:23:77:ea:85:ee:ad:f1:1d:c5:ba:ac: 1e:2d:9a:6c:1c:16:10:e5:47:0a:37:ad:96:83:21: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:60:DE:6D:94:C6:53:2D:13:DB:37:C5:3C:1F:BA:1E:8C:D3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec3:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b3:0c:a0:c2:f8:ac:7a:2d:aa:3f:cd:ed:74:eb:38:51:d0: ca:55:00:72:8e:28:d8:85:7f:89:b1:b5:4f:00:b8:ce:0b:7d: ad:b9:87:a3:67:13:60:f2:46:d9:8f:a0:c2:a7:df:c5:91:a1: d1:df:59:56:b6:7d:48:eb:e2:5d:ff:41:03:d0:7b:c2:e0:98: a8:a4:3e:93:c8:66:e4:e7:5a:f0:c2:8a:80:9f:4c:cb:c9:0d: 4b:a3:b2:56:f0:e6:e6:49:2f:fe:51:94:9d:8f:67:69:06:74: 0b:7f:c6:d9:0b:82:ea:dc:d5:a7:41:73:6a:96:70:1d:17:17: 01:a5:b3:bc:b7:10:2e:6e:5b:ae:be:18:8e:e3:79:f1:52:21: 01:b0:f4:21:ee:8a:76:08:0d:26:83:af:da:98:3f:f0:47:cb: f8:07:1a:8a:47:26:ec:54:87:c2:ed:0b:93:c1:05:e9:b7:90: f6:ff:15:55:72:be:7c:db:ec:dc:35:52:dd:b6:4d:e7:0e:c3: 75:7b:f5:8c:6b:d6:07:72:ee:f9:b8:dc:34:cd:e5:10:2e:d0: 49:4c:69:25:45:ef:95:53:b5:1a:86:c4:f3:fa:e6:b1:ac:ec: 8d:ec:dc:fc:f1:16:21:40:15:8d:7d:b0:d1:86:b3:06:7c:92: 1f:77:ed:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdUXJhVo16VVswgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBkNDk5MDctYzkyYi00MDBjLWExZDYtMjczZDU5MDhkNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdmqWqE4uOFnk+pDbKYU8CwndhNmGJvV6EPi 5XSx0bIGGnfEQYXR/r0ygaHJ5queVEUOGQzXLOv8nSQn+B6oBnXMz1AmYlMDU97N DvJ+sj0TLl+8fVv7LlaqrVI2pfYW8nDLUTHzzFZdwM6MjGa/9uA/RDI1ABw9nUeB CAOKsmPGbfIEOdqXxeDf/AqeyXarT3zfS/gLMN+mh5Qgr5uKye6FLP9b1fw5HXoN KV0qh92D1G/+grjq2mC/D3ewZYbxaCcyO9pcFvI7cvLFWf3NBjURwtzqNPksNBxz /0jTpwC9too8I3fqhe6t8R3FuqweLZpsHBYQ5UcKN62WgyF1KQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPk0YN5tlMZTLRPbN8U8H7oejNOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvOWY2YTAwMjctMGU4Ni0z ZGEyLTk1OTEtMGRiMmEzMTZmYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+wwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAILMMoML4rHotqj/N7XTrOFHQylUAco4o2IV/ibG1TwC4zgt9rbmH o2cTYPJG2Y+gwqffxZGh0d9ZVrZ9SOviXf9BA9B7wuCYqKQ+k8hm5Oda8MKKgJ9M y8kNS6OyVvDm5kkv/lGUnY9naQZ0C3/G2QuC6tzVp0FzapZwHRcXAaWzvLcQLm5b rr4YjuN58VIhAbD0Ie6KdggNJoOv2pg/8EfL+Acaikcm7FSHwu0Lk8EF6beQ9v8V VXK+fNvs3DVS3bZN5w7DdXv1jGvWB3Lu+bjcNM3lEC7QSUxpJUXvlVO1GobE8/rm sazsjezc/PEWIUAVjX2w0YazBnySH3ftlw== -----END CERTIFICATE-----Generated at Thu Oct 8 02:17:13 2026 by rpki-client