$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3beff454-616c-3dfe-8e76-430731b02ba6.roa File: 3beff454-616c-3dfe-8e76-430731b02ba6.roa (raw, json) Hash identifier: 3ZJiZMWb6Gxky5TkA1pXpjWTv3o9ERHYyMMyw/IUI+4= Subject key identifier: DB:03:B8:9F:DC:B8:3A:41:E0:04:0C:E7:2B:D6:67:D9:E3:61:75:24 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F498A533DE2D5D1B017814640 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3beff454-616c-3dfe-8e76-430731b02ba6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32135 IP address blocks: 2602:2a4:8a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:53:3d:e2:d5:d1:b0:17:81:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f86e272-3503-46d9-a90e-6faf1157d9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:cf:1c:ff:20:04:4f:c8:43:c5:f7:77:96: 75:f2:75:36:63:4b:a9:d1:f9:e9:38:92:6f:a6:d9: 28:76:d6:84:51:3d:8a:b1:f3:4e:c5:94:1c:c5:66: 33:07:0a:51:db:54:76:ab:e5:57:0f:d5:1f:b6:03: 25:13:9b:a9:e5:85:c8:37:5d:76:c8:64:60:22:fa: 20:72:52:dd:d3:e9:dc:d8:66:2b:f3:04:ac:75:d3: ea:55:55:cf:ac:e7:81:3e:b7:c2:34:94:66:86:c6: 93:1f:92:a0:69:84:25:8b:f9:55:f3:52:a2:0d:4f: be:e9:68:2a:6e:61:6a:64:36:49:e5:e6:fa:63:b0: d7:b0:7f:85:f1:c7:83:54:8f:6f:4b:20:1c:a1:61: 0b:f0:8c:e2:41:7c:4e:c2:d6:d1:99:6a:1b:54:f6: 05:6a:3d:74:b7:75:26:c2:d7:2d:c7:74:19:48:df: e3:e8:94:1b:81:c9:8f:a2:8f:61:a1:ed:6e:e8:5f: 1a:49:7e:8c:be:a7:ae:6c:2a:10:bb:8c:05:93:c2: 5f:71:ea:a1:28:d7:df:3f:f3:a9:66:e8:3f:8d:ca: 60:d0:13:58:c1:fb:0e:65:e9:39:ec:6c:f8:e1:80: 30:33:32:e8:e0:a8:b9:b9:31:ad:44:a4:27:bb:55: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:03:B8:9F:DC:B8:3A:41:E0:04:0C:E7:2B:D6:67:D9:E3:61:75:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3beff454-616c-3dfe-8e76-430731b02ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv6: 2602:2a4:8a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ff:83:10:0e:1a:d9:0e:36:cb:e4:99:0f:7e:fc:1e:f0:f7: 2a:ca:13:52:85:81:62:20:9a:dd:0b:09:c7:02:56:db:00:49: 02:d7:27:4d:71:d6:19:50:29:c6:e1:69:c9:18:fb:36:cc:41: 88:fd:b1:14:0b:dc:1f:22:ba:fb:15:8f:a7:7c:ff:17:7b:fe: 4d:48:0f:c2:a5:11:d8:75:f3:4e:c7:e0:8e:ec:46:ac:c0:2c: cf:9c:a2:c3:1d:cb:03:77:30:93:34:5f:e0:d0:e5:68:8b:a2: 38:68:cb:ff:7b:3f:15:85:e8:83:d8:e5:fc:27:73:b0:95:0f: c4:4a:a4:1b:28:a5:19:47:04:ac:88:7e:1e:cb:e4:8b:89:a9: f7:1a:a6:a5:76:b7:a0:f1:d6:b7:66:ba:92:ad:27:11:e7:0b: f2:04:98:19:91:da:e1:37:6d:7b:da:48:ee:fa:cf:d4:eb:b9: 6c:84:60:81:df:4d:cf:32:69:34:f6:87:2a:1a:59:fe:6d:34: b9:67:9c:e2:4e:b9:e2:83:9a:9f:a6:e6:68:3b:ee:2e:8a:20: a0:ee:e0:23:03:b4:ea:44:27:87:79:9d:a4:6d:6d:a8:b5:d4: f1:cb:b1:f0:ce:a6:95:5b:8c:04:e7:9a:db:6b:cc:91:3e:1c: 7d:e2:3d:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JilM94tXRsBeBRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y4NmUyNzItMzUwMy00NmQ5LWE5MGUtNmZhZjExNTdkOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV/PHP8gBE/IQ8X3d5Z18nU2Y0up0fnpOJJv ptkodtaEUT2KsfNOxZQcxWYzBwpR21R2q+VXD9UftgMlE5up5YXIN112yGRgIvog clLd0+nc2GYr8wSsddPqVVXPrOeBPrfCNJRmhsaTH5KgaYQli/lV81KiDU++6Wgq bmFqZDZJ5eb6Y7DXsH+F8ceDVI9vSyAcoWEL8IziQXxOwtbRmWobVPYFaj10t3Um wtctx3QZSN/j6JQbgcmPoo9hoe1u6F8aSX6MvqeubCoQu4wFk8JfceqhKNffP/Op Zug/jcpg0BNYwfsOZek57Gz44YAwMzLo4Ki5uTGtRKQnu1VKDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNsDuJ/cuDpB4AQM5yvWZ9njYXUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvM2JlZmY0NTQtNjE2Yy0z ZGZlLThlNzYtNDMwNzMxYjAyYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpACK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHr/gxAOGtkONsvkmQ9+/B7w9yrKE1KFgWIgmt0LCccCVtsASQLX J01x1hlQKcbhackY+zbMQYj9sRQL3B8iuvsVj6d8/xd7/k1ID8KlEdh1807H4I7s RqzALM+cosMdywN3MJM0X+DQ5WiLojhoy/97PxWF6IPY5fwnc7CVD8RKpBsopRlH BKyIfh7L5IuJqfcapqV2t6Dx1rdmupKtJxHnC/IEmBmR2uE3bXvaSO76z9TruWyE YIHfTc8yaTT2hyoaWf5tNLlnnOJOueKDmp+m5mg77i6KIKDu4CMDtOpEJ4d5naRt bai11PHLsfDOppVbjATnmttrzJE+HH3iPck= -----END CERTIFICATE-----Generated at Sun Sep 27 21:33:10 2026 by rpki-client