$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa File: 85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa (raw, json) Hash identifier: r1Wde5tS/zVgwBgDW0fWqA9zNLxhWZCRdKE3niBU4LQ= Subject key identifier: 95:C6:59:6B:B3:BF:AB:A3:76:96:97:7D:A9:6D:46:DA:02:25:FA:C1 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584F4974DEECEE2B08125D71C460 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2602:815:b081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:de:ec:ee:2b:08:12:5d:71:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f009e2cb-fcb0-4411-a2a7-6d6d2218089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:39:59:38:6f:18:51:08:61:17:b5:44:ab:bd: 8e:80:37:68:00:2f:7c:28:57:02:24:fd:64:3a:85: 16:e1:3f:ba:2d:bb:db:f1:d5:8a:6c:b4:3a:a4:3e: 84:8a:f5:d9:3e:bf:90:61:80:d9:92:fa:6a:6f:60: e2:cf:ca:71:7d:9a:96:22:e6:17:b2:ca:9c:18:c7: 9e:7f:d1:a7:53:95:55:33:f9:4c:81:ea:49:d0:09: 43:c4:ca:64:c7:9f:47:33:34:84:bc:89:1f:77:7b: bd:c9:bd:f9:2e:a4:ca:e3:72:1e:4f:c1:0d:c7:94: a9:05:75:18:53:98:37:cb:4b:55:89:f3:a0:87:57: 36:10:0f:3b:62:7e:3c:0b:4f:73:b3:53:b5:10:ec: b7:8c:ee:ce:a5:cf:ae:7d:b8:04:8c:2e:96:46:e3: 2c:64:9f:6b:23:ce:6b:34:fb:b5:fb:15:46:92:d7: a5:c5:2d:61:d1:40:ba:32:70:7b:d0:d8:14:3e:ec: 24:db:03:a7:92:91:ce:bd:fe:80:cb:2b:8d:45:97: 34:32:15:57:81:74:46:3f:99:48:c8:11:04:e4:a7: 5b:28:49:ad:bb:23:05:6c:cb:82:0e:2f:d9:36:2d: f1:63:b1:ae:0a:ef:1a:e0:f1:37:34:e0:b8:69:c6: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:59:6B:B3:BF:AB:A3:76:96:97:7D:A9:6D:46:DA:02:25:FA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:b081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:90:68:50:df:69:5a:86:70:f7:a4:4d:be:33:c1:08:5d:02: 8f:a4:dc:3d:4e:b6:1b:01:84:98:7c:a6:56:5c:fd:d9:be:d6: 00:80:ea:de:33:b2:66:37:ce:62:e2:ab:48:a7:4a:aa:fe:ce: eb:94:88:f2:39:f4:79:3d:a4:6b:71:0a:b1:40:9d:a5:17:f0: 6a:85:53:69:2a:75:e6:1c:32:9e:51:fd:31:91:72:77:e4:55: a1:ee:b0:ce:df:11:5f:8e:2e:49:e4:32:5d:2b:ec:17:89:8c: 54:d5:6f:1d:2c:a2:02:1c:a6:7f:d7:0b:20:d9:ac:d6:e5:db: 8e:88:0e:06:ab:31:39:1e:2a:91:41:92:47:ae:3e:31:e5:fa: 36:eb:cb:7c:b5:b4:d5:33:d6:4a:73:6c:6e:6e:8c:5e:dc:7f: 95:77:42:24:b8:66:53:1a:cc:ce:3b:1a:3c:93:6d:d4:52:0d: b3:aa:78:cb:ce:22:75:19:0b:71:f6:6f:15:d9:0f:9b:75:e9: 4e:11:46:e5:91:98:2e:6e:b6:99:ec:16:11:7d:31:d6:ec:4b: be:14:ba:7f:c2:88:48:1d:c2:26:d5:88:3e:32:d8:bc:6d:8c: cf:94:42:b7:c0:3e:63:02:b0:e3:b7:33:5a:6b:99:bb:0e:a6: 68:c6:96:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdN7s7isIEl1xxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjAwOWUyY2ItZmNiMC00NDExLWEyYTctNmQ2ZDIyMTgwODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TlZOG8YUQhhF7VEq72OgDdoAC98KFcCJP1k OoUW4T+6Lbvb8dWKbLQ6pD6EivXZPr+QYYDZkvpqb2Diz8pxfZqWIuYXssqcGMee f9GnU5VVM/lMgepJ0AlDxMpkx59HMzSEvIkfd3u9yb35LqTK43IeT8ENx5SpBXUY U5g3y0tVifOgh1c2EA87Yn48C09zs1O1EOy3jO7Opc+ufbgEjC6WRuMsZJ9rI85r NPu1+xVGktelxS1h0UC6MnB70NgUPuwk2wOnkpHOvf6AyyuNRZc0MhVXgXRGP5lI yBEE5KdbKEmtuyMFbMuCDi/ZNi3xY7GuCu8a4PE3NOC4acYGuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXGWWuzv6ujdpaXfaltRtoCJfrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvODVjNGU1YTEtYWY0ZS0z YmY2LTk4N2EtNDBiMTNiMzdiMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFbCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWQaFDfaVqGcPekTb4zwQhdAo+k3D1OthsBhJh8plZc/dm+1gCA 6t4zsmY3zmLiq0inSqr+zuuUiPI59Hk9pGtxCrFAnaUX8GqFU2kqdeYcMp5R/TGR cnfkVaHusM7fEV+OLknkMl0r7BeJjFTVbx0sogIcpn/XCyDZrNbl246IDgarMTke KpFBkkeuPjHl+jbry3y1tNUz1kpzbG5ujF7cf5V3QiS4ZlMazM47GjyTbdRSDbOq eMvOInUZC3H2bxXZD5t16U4RRuWRmC5utpnsFhF9MdbsS74Uun/CiEgdwibViD4y 2LxtjM+UQrfAPmMCsOO3M1prmbsOpmjGlk0= -----END CERTIFICATE-----Generated at Tue Oct 6 14:45:58 2026 by rpki-client