$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa File: 6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa (raw, json) Hash identifier: Zslq9eCipTiDUo7yu+8bnMYRLfQLoP7fQunISUAnAFU= Subject key identifier: 99:FF:2B:58:96:5A:73:64:C5:DE:ED:20:3D:13:84:1A:3B:C1:1E:FA Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584F1B624B015840C7898FE90320 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 393410 IP address blocks: 2602:f871::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:01:58:40:c7:89:8f:e9:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=351c2db9-e4d3-4d37-935b-52437fd5940e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:74:a9:bf:ae:c3:7f:41:7e:11:64:25:ca: 8e:27:96:73:bf:5f:e8:d3:b5:95:ba:a7:5a:e8:06: 95:1a:16:ec:3c:6c:bf:af:34:45:3e:a1:18:3b:51: c7:ce:34:fd:4f:c7:c4:ec:a8:b3:20:61:55:92:f9: 64:4e:6b:7d:17:c0:31:2f:e6:f8:eb:ff:fe:cf:d3: 76:37:5c:46:f0:75:94:ec:42:34:e2:ab:70:1f:d8: 23:b2:bd:64:cd:f1:b4:ca:79:d8:3b:b6:5e:05:42: 1c:bd:c9:df:2f:53:e4:a5:3f:85:1b:fb:d1:8a:ec: dc:93:88:88:3b:84:54:fa:91:58:e2:95:f2:f2:43: f7:74:a8:08:29:6c:94:9e:c9:2f:23:aa:ad:06:93: 62:4c:7d:3f:fb:34:77:08:5b:29:6e:84:77:02:a3: 83:a9:41:d6:31:4f:3c:f1:f3:a7:c7:2b:80:61:7a: 0b:84:16:95:c7:79:d3:db:79:60:53:96:35:36:78: 74:a5:03:76:da:5b:77:fe:b2:d9:67:f9:b3:7c:e8: b2:85:63:62:13:0e:12:8c:2c:a4:9d:a2:d9:05:e5: 61:03:e3:be:d6:6a:17:21:15:bb:45:4f:34:36:e1: 06:4d:df:d4:8a:07:9a:74:62:07:e3:01:11:22:64: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:2B:58:96:5A:73:64:C5:DE:ED:20:3D:13:84:1A:3B:C1:1E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/6e06309a-d58c-33ca-b65a-43e58fba7f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv6: 2602:f871::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:44:63:44:8e:91:56:04:f5:5f:97:05:43:e3:71:c6:6f:39: d2:5f:75:4a:86:0d:74:a6:76:ae:db:0b:03:79:da:db:02:02: 6f:83:e0:30:c3:4c:e3:c4:7a:2b:c8:f3:d8:70:67:67:1d:a2: b0:7f:6b:b4:f6:54:9f:1d:6f:a9:d7:1d:c3:ff:8b:0d:f3:a5: ff:67:d6:94:67:4d:e5:25:23:92:6a:d9:bd:be:b9:c8:f5:6e: 22:43:6f:18:98:c8:68:7d:4b:9d:c0:b9:af:8f:71:70:c2:42: 5c:0a:99:d9:d7:1a:8e:07:68:9e:ea:cc:0c:df:83:2e:b8:cf: 9b:ca:5c:c4:5b:e4:55:70:6c:b3:dd:e1:ba:6e:8f:1d:2c:cf: b5:d7:15:fd:18:99:a0:3e:ea:de:ea:aa:7c:18:69:9f:fb:2e: 6d:02:23:09:3c:0b:e5:a4:9f:b3:09:c4:00:fd:43:6c:e1:d1: 69:ca:16:21:93:d5:7e:40:3c:1b:05:96:d5:16:c5:05:87:af: 16:09:91:23:9d:e0:9b:b3:47:ae:87:05:16:9f:86:0c:5e:5d: 06:2d:a7:7b:31:ff:ac:e2:e1:cb:00:fa:30:53:aa:e6:28:bf: a9:cc:cd:e4:6a:0d:aa:e6:eb:89:da:5f:09:0f:be:4b:56:92: 75:e0:15:35 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8bYksBWEDHiY/pAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzUxYzJkYjktZTRkMy00ZDM3LTkzNWItNTI0MzdmZDU5NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxl0qb+uw39BfhFkJcqOJ5Zzv1/o07WVuqda 6AaVGhbsPGy/rzRFPqEYO1HHzjT9T8fE7KizIGFVkvlkTmt9F8AxL+b46//+z9N2 N1xG8HWU7EI04qtwH9gjsr1kzfG0ynnYO7ZeBUIcvcnfL1PkpT+FG/vRiuzck4iI O4RU+pFY4pXy8kP3dKgIKWyUnskvI6qtBpNiTH0/+zR3CFspboR3AqODqUHWMU88 8fOnxyuAYXoLhBaVx3nT23lgU5Y1Nnh0pQN22lt3/rLZZ/mzfOiyhWNiEw4SjCyk naLZBeVhA+O+1moXIRW7RU80NuEGTd/UigeadGIH4wERImTCiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJn/K1iWWnNkxd7tID0ThBo7wR76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNmUwNjMwOWEtZDU4Yy0z M2NhLWI2NWEtNDNlNThmYmE3ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4cQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAq0RjRI6RVgT1X5cFQ+Nxxm850l91SoYNdKZ2rtsLA3na2wICb4Pg MMNM48R6K8jz2HBnZx2isH9rtPZUnx1vqdcdw/+LDfOl/2fWlGdN5SUjkmrZvb65 yPVuIkNvGJjIaH1LncC5r49xcMJCXAqZ2dcajgdonurMDN+DLrjPm8pcxFvkVXBs s93hum6PHSzPtdcV/RiZoD7q3uqqfBhpn/subQIjCTwL5aSfswnEAP1DbOHRacoW IZPVfkA8GwWW1RbFBYevFgmRI53gm7NHrocFFp+GDF5dBi2nezH/rOLhywD6MFOq 5ii/qczN5GoNqubridpfCQ++S1aSdeAVNQ== -----END CERTIFICATE-----Generated at Mon Sep 28 13:35:57 2026 by rpki-client