$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/9171d676-480a-3156-b9e7-ee8e44fa6097.roa File: 9171d676-480a-3156-b9e7-ee8e44fa6097.roa (raw, json) Hash identifier: RLOQK4cPgYRrNCMBfSh36q45PGkD1ZRiG7cqaU48Kxk= Subject key identifier: 85:60:DC:38:D1:D7:27:27:3A:7D:A3:E0:45:03:47:77:5A:75:3C:70 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584F45428070EF0C4F35262B1FE0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/9171d676-480a-3156-b9e7-ee8e44fa6097.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 14618 IP address blocks: 2602:fe40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:80:70:ef:0c:4f:35:26:2b:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=c20985d2-af7e-432a-ade2-d92c69fd4385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:36:99:d3:9f:7d:06:41:34:cd:7b:2e:5d: e6:70:a5:4a:30:ca:f6:f2:e1:45:20:74:f9:15:dc: e7:32:0e:13:6e:49:ad:26:fd:9f:53:86:f1:6b:d4: f3:48:b1:52:18:53:0b:e2:ff:94:23:49:cd:59:fa: 01:4f:07:87:3e:33:54:79:2c:a8:83:d8:c4:38:50: c5:9c:c6:fe:9c:6c:5c:12:38:16:81:54:d1:b8:f0: 0a:e8:06:48:10:3e:29:9e:57:bc:7a:22:9e:29:30: 56:32:5b:26:3b:00:4c:bc:01:79:93:87:18:8d:82: bc:6e:25:68:3c:d4:69:b8:ac:89:6d:3a:d7:68:cf: 00:d4:e3:fe:1f:32:e6:a6:39:fe:58:77:c7:93:e9: fe:95:36:03:02:76:4f:3d:03:18:8d:0f:38:1c:87: f4:28:d6:6c:d5:1a:8f:15:bb:2b:f4:14:c8:ed:5f: 90:96:80:dd:6c:35:1e:65:80:68:7c:12:1e:6b:8a: e2:d5:12:7b:f9:0e:33:17:51:b4:00:93:6c:87:31: 4f:3b:eb:e9:26:94:4e:bf:75:82:be:cf:bf:2d:4e: 0e:e0:57:fa:be:5f:f6:84:eb:be:48:30:2c:5f:2a: 96:01:a6:b3:f7:35:75:88:32:c1:0b:4d:6d:ed:77: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:60:DC:38:D1:D7:27:27:3A:7D:A3:E0:45:03:47:77:5A:75:3C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/9171d676-480a-3156-b9e7-ee8e44fa6097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e2:56:f1:50:61:77:24:50:d1:04:55:03:8b:f6:f6:8a:33: 74:5e:1a:0d:49:21:f0:b9:d6:58:c5:f3:96:0a:9a:13:0e:59: a3:87:be:2d:6e:1b:4d:7b:6b:7c:13:4d:65:8c:f4:9d:18:65: d8:60:c1:1b:35:71:0c:df:93:7a:38:e5:5e:a8:41:b7:cc:d4: 97:d4:b5:24:85:a6:9a:71:9c:a3:88:06:a0:16:25:50:8d:df: e5:1a:e7:23:16:36:7e:2c:de:a0:9a:4a:7b:17:43:f6:83:60: 68:67:7e:4e:69:b4:58:7a:a8:98:75:0a:08:cc:bb:35:de:56: 23:97:91:b8:e0:db:03:06:08:c1:4d:08:51:79:ae:46:62:df: 75:f1:54:22:79:38:8f:87:87:8b:ec:2d:ce:8f:a5:0f:a7:e2: b3:d6:5b:26:cb:d8:50:5e:3a:60:eb:0e:c1:23:5e:ad:2b:bd: 00:db:34:ed:e8:50:b8:b6:2e:5d:68:15:eb:87:4d:43:cd:3e: f2:79:8e:c9:81:f5:b4:79:50:24:1d:78:73:77:53:79:9f:dc: fd:8a:06:53:56:b1:30:bb:6b:92:81:94:64:5a:e3:95:89:53: a0:ec:22:a4:c1:a6:01:a9:39:df:a4:83:30:42:95:27:d6:5e: af:b8:22:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FQoBw7wxPNSYrH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YzIwOTg1ZDItYWY3ZS00MzJhLWFkZTItZDkyYzY5ZmQ0Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTc2mdOffQZBNM17Ll3mcKVKMMr28uFFIHT5 FdznMg4TbkmtJv2fU4bxa9TzSLFSGFML4v+UI0nNWfoBTweHPjNUeSyog9jEOFDF nMb+nGxcEjgWgVTRuPAK6AZIED4pnle8eiKeKTBWMlsmOwBMvAF5k4cYjYK8biVo PNRpuKyJbTrXaM8A1OP+HzLmpjn+WHfHk+n+lTYDAnZPPQMYjQ84HIf0KNZs1RqP Fbsr9BTI7V+QloDdbDUeZYBofBIea4ri1RJ7+Q4zF1G0AJNshzFPO+vpJpROv3WC vs+/LU4O4Ff6vl/2hOu+SDAsXyqWAaaz9zV1iDLBC01t7XfD4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVg3DjR1ycnOn2j4EUDR3dadTxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvOTE3MWQ2NzYtNDgwYS0z MTU2LWI5ZTctZWU4ZTQ0ZmE2MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+QAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJHiVvFQYXckUNEEVQOL9vaKM3ReGg1JIfC51ljF85YKmhMOWaOH vi1uG017a3wTTWWM9J0YZdhgwRs1cQzfk3o45V6oQbfM1JfUtSSFpppxnKOIBqAW JVCN3+Ua5yMWNn4s3qCaSnsXQ/aDYGhnfk5ptFh6qJh1CgjMuzXeViOXkbjg2wMG CMFNCFF5rkZi33XxVCJ5OI+Hh4vsLc6PpQ+n4rPWWybL2FBeOmDrDsEjXq0rvQDb NO3oULi2Ll1oFeuHTUPNPvJ5jsmB9bR5UCQdeHN3U3mf3P2KBlNWsTC7a5KBlGRa 45WJU6DsIqTBpgGpOd+kgzBClSfWXq+4Ioo= -----END CERTIFICATE-----Generated at Thu Sep 24 06:52:31 2026 by rpki-client